Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/b_6pn9o6_C98A7nY-eNCIT1ucBo.roa
File:                     b_6pn9o6_C98A7nY-eNCIT1ucBo.roa (raw, json)
Hash identifier:          suM0596vlhHmEnJ9ON9yFiGIugEJ7qfvu2SGhTJsEEI=
Subject key identifier:   6F:FE:A9:9F:DA:3A:FC:2F:7C:03:B9:D8:F9:E3:42:21:3D:6E:70:1A
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       26
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/b_6pn9o6_C98A7nY-eNCIT1ucBo.roa
Signing time:             Thu 18 Jul 2024 01:47:21 +0000
ROA not before:           Thu 18 Jul 2024 01:47:21 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     24259
IP address blocks:        203.188.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Jul 18 01:47:21 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=6FFEA99FDA3AFC2F7C03B9D8F9E342213D6E701A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:92:d3:27:70:c5:50:04:42:b7:41:38:5c:
                    80:dd:42:3f:e7:2e:c7:d9:0b:71:fd:9c:b1:79:e8:
                    41:ae:94:2f:1d:36:2b:93:63:57:6c:19:b9:6d:dd:
                    a7:6b:15:b3:f6:51:2e:7a:ab:85:1b:f9:ca:ea:84:
                    61:0e:44:7c:0c:a9:e7:41:42:54:0d:ba:1c:62:c4:
                    cd:a8:80:66:4f:a1:bb:62:d8:77:55:08:98:0b:64:
                    fe:e7:5b:1e:d0:b9:fa:12:86:30:e1:a1:47:aa:20:
                    fa:10:52:f5:af:8b:e7:da:a0:fa:bb:89:1c:92:d6:
                    a9:d3:a8:8e:b3:56:4a:40:88:a6:72:99:af:77:56:
                    9e:ac:ba:0f:ba:76:5d:b4:ec:6a:d8:06:57:52:f8:
                    c3:b6:64:14:32:c1:4a:03:4e:fd:9b:54:e0:64:11:
                    34:19:02:4b:c8:89:a3:4b:67:ee:81:6d:e1:0d:bc:
                    ba:0b:52:e8:f0:06:91:ca:47:b6:54:34:4c:de:ef:
                    2a:44:9c:49:d7:5c:a0:37:9d:9e:c7:bf:88:b0:7a:
                    33:82:65:bb:d4:4f:03:3d:d0:73:dd:42:0c:dd:eb:
                    bb:a5:36:78:bc:7e:a2:48:4f:cf:04:4d:12:48:da:
                    fd:1e:65:65:fa:66:07:7f:2d:08:7c:12:7f:a2:a7:
                    ef:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FE:A9:9F:DA:3A:FC:2F:7C:03:B9:D8:F9:E3:42:21:3D:6E:70:1A
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/b_6pn9o6_C98A7nY-eNCIT1ucBo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.188.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:f7:56:ad:4b:93:41:7b:9f:b8:de:bf:bd:1c:3a:24:cb:d9:
         96:eb:2e:82:45:42:84:34:c9:29:ad:92:b2:51:ce:ac:eb:b8:
         8d:76:df:60:73:1e:4c:b7:f3:b4:3d:4f:26:d7:b6:3f:e0:4a:
         ab:6f:e1:bf:1e:d0:c5:50:93:3a:b8:23:fd:e1:e3:3b:1f:91:
         b6:44:0c:0f:93:da:f1:b9:fb:f7:66:90:69:e8:e2:31:48:4c:
         09:b4:64:e8:e9:25:68:6c:df:d9:13:f2:fc:1d:47:de:be:0e:
         bb:85:42:de:37:48:c9:27:53:fc:38:82:17:50:41:da:a7:6a:
         39:ef:6e:ac:a6:95:13:e1:77:0e:7f:3e:a5:7d:6a:d5:88:87:
         8e:e3:25:4d:f1:5e:bf:5a:1a:bd:a1:33:3b:84:14:db:37:9b:
         94:0d:a6:0b:b1:1b:44:9a:44:69:93:78:ce:6e:cb:a2:ad:40:
         83:40:bf:f1:fd:24:b0:bf:94:89:34:bd:3c:4d:8c:de:6f:6d:
         e6:84:21:00:4d:fa:b9:38:83:96:48:90:82:96:87:80:bd:e2:
         25:04:d2:df:87:33:70:07:8d:07:76:03:7a:9e:00:90:41:0b:
         b7:64:de:89:05:6f:ae:ac:9f:33:55:21:bf:1e:f6:f5:28:48:
         6d:f0:39:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:23 2025 by rpki-client