Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/920/u1dKSm84US-PEvt9664lRGP4sPo.roa
File:                     u1dKSm84US-PEvt9664lRGP4sPo.roa (raw, json)
Hash identifier:          VTllf6gfCTAUf5S11rP3tSBvNpgmmHHgQZK8MkTR0JQ=
Subject key identifier:   BB:57:4A:4A:6F:38:51:2F:8F:12:FB:7D:EB:AE:25:44:63:F8:B0:FA
Certificate issuer:       /CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
Certificate serial:       02
Authority key identifier: C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/u1dKSm84US-PEvt9664lRGP4sPo.roa
Signing time:             Wed 08 May 2024 07:33:29 +0000
ROA not before:           Wed 08 May 2024 07:33:29 +0000
ROA not after:            Thu 08 May 2025 07:05:01 +0000
asID:                     24279
IP address blocks:        103.13.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
        Validity
            Not Before: May  8 07:33:29 2024 GMT
            Not After : May  8 07:05:01 2025 GMT
        Subject: CN=BB574A4A6F38512F8F12FB7DEBAE254463F8B0FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1c:90:bb:5d:19:aa:0a:20:8b:07:1d:48:c5:
                    29:6a:6e:47:87:51:41:e6:46:37:4a:24:ab:5c:b4:
                    1e:f7:ad:2b:ad:4f:76:af:c9:67:e3:b5:29:6b:66:
                    66:25:56:42:10:f6:c7:5d:ad:40:03:8a:99:5e:11:
                    aa:20:c4:15:a8:70:7d:bf:13:e0:a0:37:e0:19:17:
                    12:a3:09:a4:3a:41:35:c5:68:29:e2:b9:29:d8:c3:
                    16:92:b3:75:a5:9f:23:2d:21:ac:90:89:d8:88:4b:
                    d5:91:57:96:6f:b8:b1:51:1c:98:36:ec:b5:09:b6:
                    9f:4d:b6:76:3b:b6:95:7a:04:dd:a0:4e:14:c6:4f:
                    35:81:5f:11:ec:3c:b4:07:25:b7:ee:3e:30:fd:1a:
                    15:ea:35:07:c9:82:b2:be:55:81:d2:81:54:02:ea:
                    4c:8b:d9:ce:28:5f:a7:e3:24:f3:d8:14:15:1c:35:
                    fa:5f:3b:4f:d7:60:73:dd:d2:1f:eb:bb:ee:1c:6c:
                    9a:ac:5c:20:8d:66:de:09:fc:92:b7:d9:2a:90:3f:
                    b7:82:c1:e4:43:76:2f:f9:35:92:19:fc:28:95:6a:
                    9d:55:42:0a:a4:8e:95:2b:88:7b:e8:18:f6:ad:db:
                    88:ec:28:84:d5:ea:f1:64:c2:ec:f2:13:6a:01:0e:
                    85:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:57:4A:4A:6F:38:51:2F:8F:12:FB:7D:EB:AE:25:44:63:F8:B0:FA
            X509v3 Authority Key Identifier:
                keyid:C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/u1dKSm84US-PEvt9664lRGP4sPo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:2b:94:62:87:d0:5f:89:57:cc:68:08:3e:2c:65:45:ac:13:
         42:01:da:60:97:43:a8:95:40:4b:e2:37:d0:67:93:40:f0:91:
         e5:6c:8c:ff:23:4b:b2:be:31:a5:a3:79:6d:d3:8c:6a:5d:e0:
         87:4c:d1:f1:da:da:ae:b8:bf:8b:07:f2:9c:fc:08:8e:94:e1:
         29:08:53:12:04:cd:37:cf:7d:5e:6c:7f:8e:19:c3:dd:27:20:
         27:d5:ff:09:d0:e2:f0:47:9c:17:06:95:15:a2:f6:22:07:78:
         b0:a7:06:38:6c:f9:cd:6a:e3:70:a5:77:10:4a:46:c5:ab:47:
         13:de:22:a2:4c:2f:f6:06:f5:24:44:bf:cc:1c:72:2c:fd:92:
         72:94:b4:01:e3:05:17:ea:01:58:7c:15:ca:c9:af:9f:d6:6c:
         d2:07:57:8d:b6:3c:78:ab:2d:ff:62:ad:c4:bb:88:2f:98:d0:
         65:72:16:75:62:f9:09:5c:70:e8:3f:85:ea:f3:55:f0:c1:7a:
         c6:64:c6:dc:91:dd:48:bf:ad:a1:3d:de:16:e6:fe:83:04:ba:
         28:c6:9d:90:e9:68:ec:4e:82:8e:a5:69:f9:02:d7:e7:0a:59:
         dd:08:e8:10:48:be:51:86:9b:e9:1d:d6:f1:74:ac:82:cb:6f:
         d2:39:e3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:18 2025 by rpki-client