Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/K2J2TS2r1VJQ73O39ES0n3PqDTI.roa
File:                     K2J2TS2r1VJQ73O39ES0n3PqDTI.roa (raw, json)
Hash identifier:          ZscREkTw0nDlrEEyTArigRQCHo6+Pb6lN8ephiLLEsg=
Subject key identifier:   2B:62:76:4D:2D:AB:D5:52:50:EF:73:B7:F4:44:B4:9F:73:EA:0D:32
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       79
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/K2J2TS2r1VJQ73O39ES0n3PqDTI.roa
Signing time:             Sat 31 Aug 2024 01:29:32 +0000
ROA not before:           Sat 31 Aug 2024 01:29:32 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9621
IP address blocks:        218.40.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Aug 31 01:29:32 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=2B62764D2DABD55250EF73B7F444B49F73EA0D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:aa:d5:82:79:d8:42:47:38:20:d4:7e:7b:da:
                    2b:1c:a6:0a:bc:2b:4b:a0:a7:39:18:b1:40:d5:6c:
                    2f:0c:81:d9:e6:64:3a:10:fc:a5:5b:a5:0d:e7:31:
                    6d:fe:e6:91:da:15:fe:c4:e7:6b:00:12:25:31:da:
                    a8:22:b5:40:6a:fb:1b:40:c9:35:8d:f5:71:bf:98:
                    24:59:15:8b:2b:c9:42:0e:0a:3d:aa:73:51:8c:c8:
                    a6:d2:3d:3f:f5:75:73:a9:f4:7b:94:7b:51:3a:9e:
                    d8:41:65:d1:ac:47:d4:94:a8:73:b4:4e:bc:17:27:
                    2b:a1:78:2f:64:a3:b6:b5:3e:5c:cb:f3:b4:ab:9b:
                    b2:6d:7a:2d:69:1f:a8:5c:e3:70:67:d8:96:90:67:
                    99:67:a1:5c:5e:b5:c9:18:b3:fd:3a:12:af:d3:5d:
                    d6:4b:0e:6f:8b:c0:b3:d1:47:0b:53:0f:d7:27:c5:
                    ab:58:de:1a:33:8b:22:ac:cf:36:4f:c8:a9:f3:29:
                    01:96:fd:c7:df:41:82:80:4a:c7:95:14:3f:c6:14:
                    75:49:72:b7:d6:1d:ed:8d:2c:48:5d:b8:c4:51:22:
                    2f:91:cc:bb:78:99:11:10:cb:57:d9:f8:12:78:93:
                    6d:19:aa:92:6f:60:f9:cd:06:27:4a:fe:a3:c2:33:
                    f7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:62:76:4D:2D:AB:D5:52:50:EF:73:B7:F4:44:B4:9F:73:EA:0D:32
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/K2J2TS2r1VJQ73O39ES0n3PqDTI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:86:81:51:3c:18:d5:7e:77:64:16:3c:46:14:ce:ea:9d:47:
         fa:0c:3e:da:49:39:2b:0b:e0:25:0d:e3:59:1a:7a:63:ae:68:
         5f:a6:e7:d2:c4:16:70:6c:f0:8f:2f:ec:bc:06:91:63:5a:54:
         69:9f:04:19:38:ef:aa:64:7c:67:36:2c:50:5f:94:45:38:1e:
         66:93:e8:d5:6c:ba:4d:04:9d:42:8d:39:bd:d8:eb:4b:71:14:
         c6:58:e9:d2:93:3b:15:2c:60:52:84:d1:bc:69:82:8e:ac:96:
         6e:10:83:37:e6:60:71:96:a7:e4:93:4a:c7:f2:86:cf:d4:6c:
         5f:8a:ad:9b:b6:60:5d:ed:bd:96:a4:59:dd:97:d6:2b:e5:4d:
         96:c2:f4:42:97:e7:07:8a:1d:89:e1:17:df:91:a9:31:48:cc:
         c8:38:15:17:5e:65:7a:56:e7:1e:8f:ef:6f:72:57:5e:22:14:
         5e:33:0c:bc:40:c2:23:34:b9:62:34:89:84:20:7e:4c:66:95:
         91:8f:16:51:49:f7:5b:8b:8f:18:d1:3a:4a:2c:d1:4e:51:3c:
         bc:93:92:d4:c6:a2:07:1c:34:5b:70:24:44:e7:04:55:57:fe:
         bb:8d:ea:7f:94:93:84:af:80:de:69:cf:85:12:e8:a6:2b:21:
         7a:37:77:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:36 2025 by rpki-client