Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/IF-RTS3mdbUm9AgziyuVcKAjhR8.roa
File:                     IF-RTS3mdbUm9AgziyuVcKAjhR8.roa (raw, json)
Hash identifier:          KhLg7LBXqfp/DwOm5Q2Dj9hQkvSwPprf7NLcsWkMyME=
Subject key identifier:   20:5F:91:4D:2D:E6:75:B5:26:F4:08:33:8B:2B:95:70:A0:23:85:1F
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       22
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/IF-RTS3mdbUm9AgziyuVcKAjhR8.roa
Signing time:             Thu 18 Jul 2024 01:47:19 +0000
ROA not before:           Thu 18 Jul 2024 01:47:19 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     24259
IP address blocks:        124.110.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Jul 18 01:47:19 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=205F914D2DE675B526F408338B2B9570A023851F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c3:69:bc:7a:2b:0c:76:d2:51:6a:e2:75:13:
                    e1:0f:af:65:35:99:50:4c:2b:02:ff:4e:61:e3:83:
                    28:37:4b:43:74:0c:77:cb:35:97:16:98:9f:95:3c:
                    76:6b:3e:e9:6a:65:55:d1:eb:07:05:b8:ce:7a:10:
                    8f:c7:1e:e2:55:5b:6d:8d:28:7d:d4:01:de:dc:97:
                    6f:40:40:1b:84:06:28:ee:c4:a0:70:fe:00:25:41:
                    7f:48:a7:b8:d8:13:93:3b:84:cf:f9:68:e4:09:2a:
                    a6:f0:56:dc:ec:7d:58:f1:a4:b8:39:d4:e2:f0:fb:
                    34:6e:0d:ad:3b:24:87:9f:bd:63:f2:77:27:2b:46:
                    f3:10:5c:23:e6:5d:a1:75:ec:f4:77:6a:6a:9c:02:
                    d0:e9:da:b6:19:b3:db:f8:0a:4e:ac:e3:6c:63:6c:
                    bd:e0:a1:14:de:68:ce:b6:81:78:c8:ec:3a:5e:25:
                    75:eb:0d:9f:94:6a:9f:61:61:23:9f:96:40:6f:d6:
                    98:f8:7e:3e:ed:3f:75:8d:6e:25:b0:01:b7:d7:36:
                    96:8e:3e:2d:c7:10:77:e0:e3:1b:e7:48:b9:11:be:
                    46:54:a2:e1:53:12:6b:74:96:30:74:ed:96:7e:be:
                    86:29:09:ca:cf:43:f7:d2:c1:dc:ca:d6:ad:3d:60:
                    51:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5F:91:4D:2D:E6:75:B5:26:F4:08:33:8B:2B:95:70:A0:23:85:1F
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/IF-RTS3mdbUm9AgziyuVcKAjhR8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.110.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:34:07:e9:ea:ba:35:ce:a4:10:6f:5b:b8:9f:26:90:9c:c3:
         b9:f6:d2:14:58:bf:38:fb:82:07:e2:8a:fa:7c:95:1b:6c:c4:
         68:0f:00:5c:6a:dd:df:93:26:03:8a:68:44:59:ba:cc:c8:61:
         1e:5c:63:5f:ea:7f:a3:1d:4d:0d:97:d9:c5:18:10:98:ab:64:
         00:fc:cb:c4:e7:cf:32:b9:db:43:60:25:7a:b7:13:7d:e7:fe:
         cc:0d:94:1a:19:c6:9c:53:6e:f2:f1:9e:11:fa:79:ef:a6:c3:
         59:46:32:e6:df:3e:58:77:be:1a:2f:08:42:56:47:5a:67:b6:
         c1:c0:55:f7:98:50:25:d2:52:29:19:42:ca:88:a7:e8:b2:89:
         1b:52:3f:00:46:bc:ce:be:22:9c:d5:8a:fd:25:bb:9c:07:30:
         e7:16:8e:17:88:d9:c9:e1:29:84:64:80:0d:f6:70:0f:3c:d9:
         69:36:22:13:ad:5a:cb:18:e1:af:21:0c:a9:02:60:82:c4:8e:
         83:66:75:d6:82:2a:3d:43:e3:b4:28:63:18:8f:a4:4a:e3:94:
         10:32:70:b5:6e:73:bc:5a:74:a2:f2:23:73:c0:e6:d4:2d:23:
         fc:09:3f:cc:af:b4:bb:64:b4:bb:f7:6a:bd:b6:d3:54:9b:17:
         d6:2e:d0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:37 2025 by rpki-client