Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/69AVe3CyQc90ci9VbhWwsVsdH5o.roa
File:                     69AVe3CyQc90ci9VbhWwsVsdH5o.roa (raw, json)
Hash identifier:          ZEIDN28UlAYpDbXpGzR/WFL2yg2YOOVjZqfhHMMBvWI=
Subject key identifier:   EB:D0:15:7B:70:B2:41:CF:74:72:2F:55:6E:15:B0:B1:5B:1D:1F:9A
Certificate issuer:       /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial:       17
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/69AVe3CyQc90ci9VbhWwsVsdH5o.roa
Signing time:             Wed 04 Sep 2024 06:59:54 +0000
ROA not before:           Wed 04 Sep 2024 06:59:54 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     24255
IP address blocks:        202.88.192.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
        Validity
            Not Before: Sep  4 06:59:54 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=EBD0157B70B241CF74722F556E15B0B15B1D1F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5c:36:1e:2a:fe:3a:f9:8c:8c:4c:5f:86:5d:
                    87:c0:48:fa:e3:0c:83:9f:44:aa:b4:14:19:1a:dd:
                    df:31:7e:3a:7e:d3:1d:af:ff:76:7e:f2:0f:a9:78:
                    28:b6:87:40:69:f7:2e:fe:ac:8e:eb:fb:a1:57:83:
                    d1:84:18:13:e3:c5:85:03:a0:e4:4d:e3:03:73:5f:
                    da:bf:05:53:67:c1:08:88:7d:e1:76:16:e5:d5:9f:
                    4a:3d:73:44:0f:1a:74:83:87:7e:27:ff:fd:b4:19:
                    9d:4a:cc:93:2a:28:37:9e:4c:cb:26:5e:96:9c:a6:
                    b5:b6:b3:eb:2c:10:cd:62:90:27:78:f2:a4:5c:e9:
                    d6:9a:41:17:8e:9a:95:78:8a:c7:bc:0e:31:5e:d6:
                    1d:87:56:f0:2d:45:46:02:ac:52:90:a2:43:51:6a:
                    4a:f4:05:4c:6e:04:f8:1c:b2:d0:0b:e0:3a:d2:94:
                    23:a7:1d:98:c1:05:68:56:9f:29:a5:6e:e9:e6:12:
                    9e:7c:b2:ae:43:84:e8:e4:df:5e:22:41:ab:92:66:
                    e5:a7:f6:1f:91:b6:c3:aa:98:43:c1:80:2b:2a:84:
                    73:85:50:cc:e7:4e:96:45:86:ef:ae:fd:e6:e1:4b:
                    df:80:4c:41:c9:35:17:b2:c9:b3:f9:da:07:e6:39:
                    53:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D0:15:7B:70:B2:41:CF:74:72:2F:55:6E:15:B0:B1:5B:1D:1F:9A
            X509v3 Authority Key Identifier:
                keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/69AVe3CyQc90ci9VbhWwsVsdH5o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.88.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:8a:96:09:a5:13:ee:f8:49:7d:73:54:cd:50:ba:25:fd:2b:
         66:12:d1:5c:83:ca:9e:d0:d4:23:f8:ca:ca:51:3c:ff:d6:b0:
         63:9f:75:b5:de:81:09:9c:1e:7b:32:e2:a2:20:b1:f3:fb:43:
         83:b2:b8:61:49:66:42:30:c5:f9:21:81:4a:f4:4e:51:9b:10:
         fd:88:b9:cc:3f:e0:17:da:1c:4c:fe:67:0f:2d:ab:52:72:ed:
         d6:e2:3f:f5:79:f1:35:eb:fc:4f:93:f2:56:25:7d:e8:42:7d:
         e9:b6:1e:7b:9b:f4:73:ef:58:d3:52:9b:4e:a5:bd:5a:bc:5b:
         a0:52:73:b0:1b:f6:85:37:34:30:49:28:5d:9d:6b:be:42:b8:
         0e:2c:1f:0c:56:57:15:a0:77:75:4b:e1:0b:43:47:57:94:6a:
         6d:66:29:b9:97:80:e3:29:95:cb:0b:43:65:ba:88:65:9a:3f:
         cf:21:65:1e:09:29:d4:2b:fa:48:50:08:3d:ed:2d:6f:1b:0b:
         01:58:56:cd:e1:21:75:76:9c:50:13:8f:84:c1:d4:eb:71:64:
         78:4b:01:c0:4f:b1:d7:5d:cb:47:9f:36:77:7f:bc:fb:26:90:
         50:34:5d:d4:35:02:3b:f4:1b:64:80:6a:2f:f5:86:ee:d0:8b:
         a3:09:0c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:14 2025 by rpki-client