Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/ihpyl854l-sk6C6f1nHh0Yjcgbk.roa
File:                     ihpyl854l-sk6C6f1nHh0Yjcgbk.roa (raw, json)
Hash identifier:          JvNSXvjhs5KJYHmqwWSaBw38c2wEo+QBL0mFTPmmq/Q=
Subject key identifier:   8A:1A:72:97:CE:78:97:EB:24:E8:2E:9F:D6:71:E1:D1:88:DC:81:B9
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       5A
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/ihpyl854l-sk6C6f1nHh0Yjcgbk.roa
Signing time:             Sat 01 Mar 2025 01:30:54 +0000
ROA not before:           Sat 01 Mar 2025 01:30:54 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     23818
IP address blocks:        203.79.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Mar 2025 04:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Mar  1 01:30:54 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=8A1A7297CE7897EB24E82E9FD671E1D188DC81B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:ad:c9:8e:6d:81:49:66:88:99:98:10:87:
                    54:5a:95:5a:e3:78:02:4c:27:64:db:87:45:d2:8d:
                    d6:f4:08:95:90:28:3c:34:9d:5e:6a:7c:67:60:5c:
                    2a:bb:cd:eb:6e:51:09:74:20:91:6c:42:65:f7:5c:
                    39:ba:9e:76:8b:ae:dd:b2:7f:50:22:04:ac:04:74:
                    1f:69:64:1a:18:a2:5a:1f:01:e7:3a:7f:16:63:8b:
                    38:7d:e2:4b:aa:25:91:15:d4:c5:0b:78:fe:fb:05:
                    79:60:a5:8b:9c:1a:8a:96:3d:9e:1b:c7:55:9e:e9:
                    ff:77:bf:4e:1f:49:87:d2:54:2f:f0:87:84:f0:b8:
                    3f:42:5e:8d:ce:8d:58:0e:15:fd:1d:29:13:04:3f:
                    1b:e8:97:dc:74:0f:a8:79:92:23:56:d5:56:76:d9:
                    7b:a2:67:58:3b:7c:07:a0:42:d2:d6:07:da:e3:f6:
                    89:96:b9:bf:26:1d:1d:00:97:86:c5:d0:c3:28:4c:
                    43:1f:35:7c:1f:20:24:55:ac:e5:c2:ea:03:b7:f8:
                    2a:f8:9f:ee:8d:8f:5f:2a:0a:cf:79:e6:65:35:2d:
                    e8:6b:78:a9:36:0d:84:56:0b:94:91:08:b3:86:e0:
                    26:3f:c9:3e:89:89:d2:84:f8:49:92:1f:e1:4b:cd:
                    8a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1A:72:97:CE:78:97:EB:24:E8:2E:9F:D6:71:E1:D1:88:DC:81:B9
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/ihpyl854l-sk6C6f1nHh0Yjcgbk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:19:40:e7:c0:8a:b7:33:09:4f:3d:69:90:76:fc:fc:20:2c:
         9a:65:f7:df:3a:9e:35:6e:97:4c:18:b9:b5:b2:1e:1d:f4:ac:
         a7:f4:f2:e6:89:ec:70:c7:fc:78:d1:76:59:ee:56:6b:d6:b0:
         83:33:8a:04:db:d0:fc:72:70:e2:be:04:c7:15:6e:f5:28:1b:
         39:b0:cd:ea:09:cf:8d:d1:6b:3b:76:97:7d:7e:7d:29:96:b7:
         37:98:de:49:b2:10:88:e2:ac:b2:66:41:0c:20:45:58:7f:77:
         00:1d:c5:e2:df:aa:11:3e:a1:e2:01:a0:74:72:41:e4:6d:a8:
         52:81:99:80:03:13:e8:a2:60:8a:e7:73:80:16:71:0c:17:43:
         e8:1c:c7:33:27:09:bc:fa:21:a7:84:99:2f:5f:0e:83:05:ed:
         e6:5a:9d:7a:6a:2a:e1:fc:c6:d1:76:f0:c5:ab:97:9a:d6:cc:
         49:b5:6e:f1:78:b4:69:2a:9b:cc:ad:d7:a7:00:01:79:cd:6d:
         4d:1c:db:34:04:f0:4e:bb:17:98:41:82:96:49:ec:4a:1f:87:
         2a:61:90:5b:21:37:6a:9c:28:61:da:76:26:96:be:a8:17:93:
         b5:5d:d5:47:d4:ae:a4:ba:7c:3d:01:e4:90:4b:d3:94:e3:50:
         b8:ab:56:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:33:31 2025 by rpki-client