Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/rrNGsUykHUxI6tvc_n2HrjFgENU.roa
File:                     rrNGsUykHUxI6tvc_n2HrjFgENU.roa (raw, json)
Hash identifier:          MheImnCxKHIHO3L+OdBviLoE+7gky5qO7gMIZP1+eoc=
Subject key identifier:   AE:B3:46:B1:4C:A4:1D:4C:48:EA:DB:DC:FE:7D:87:AE:31:60:10:D5
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       A4
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/rrNGsUykHUxI6tvc_n2HrjFgENU.roa
Signing time:             Fri 31 May 2024 01:31:47 +0000
ROA not before:           Fri 31 May 2024 01:31:47 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     2518
IP address blocks:        202.225.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May 31 01:31:47 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=AEB346B14CA41D4C48EADBDCFE7D87AE316010D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:50:ef:38:76:c3:6c:21:a3:02:a1:b8:9c:
                    61:c0:ab:44:ac:c7:20:35:71:5f:cc:77:b7:77:d7:
                    a0:7e:54:7a:3f:0a:82:0b:d2:ed:20:d9:8d:fe:b0:
                    7f:bb:83:a7:91:8b:db:b5:22:eb:4f:3f:39:f0:28:
                    d0:41:87:c5:fb:46:e1:60:ff:9d:87:8d:55:ab:79:
                    d8:ce:22:66:e8:31:d4:c3:fa:96:27:6d:ee:9f:a7:
                    47:a4:0b:c0:c3:eb:23:d8:e1:d1:10:cf:df:50:25:
                    06:f1:74:40:6b:24:6d:3d:d8:c8:2a:dd:98:21:92:
                    32:df:ab:39:14:6a:be:4c:59:18:b7:85:54:e7:61:
                    1d:52:60:84:7f:18:34:a8:45:b2:b8:c4:4b:2c:cd:
                    21:5b:cb:e3:7a:49:61:13:c7:a6:d2:e1:3b:2c:45:
                    58:de:4f:55:fb:e4:5e:2c:69:be:28:0c:ac:d7:64:
                    a9:96:45:81:5d:7c:3f:98:3f:48:54:94:04:e1:fd:
                    05:33:2f:25:51:ad:ac:db:a3:1f:df:0e:d5:3a:63:
                    25:43:1f:08:fb:7f:5f:a5:01:f4:e8:c0:fa:72:9e:
                    ba:5d:16:3a:64:c6:be:4e:61:78:8e:9e:d5:4e:69:
                    eb:ae:86:54:a5:dc:91:f5:9e:cb:49:e9:ef:33:8b:
                    3b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B3:46:B1:4C:A4:1D:4C:48:EA:DB:DC:FE:7D:87:AE:31:60:10:D5
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/rrNGsUykHUxI6tvc_n2HrjFgENU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.225.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1d:fd:a4:41:2a:15:c3:92:f8:67:8e:dc:ea:f2:bd:88:36:4a:
         12:a8:b7:d8:a8:9a:47:af:13:7c:42:2d:ae:2c:f2:07:ce:d6:
         9e:74:a8:0e:87:bb:0a:a1:26:22:8a:0b:8f:dd:92:92:77:05:
         e9:9c:e5:63:7d:e3:50:a8:66:fa:cf:02:76:68:38:10:62:d9:
         07:1e:73:ec:28:fd:6e:2b:7c:11:c0:d6:b1:0a:d9:b3:53:98:
         85:84:a8:51:b1:0e:f8:45:aa:92:b0:cb:f5:40:b4:a0:d2:29:
         42:b4:c4:20:48:e5:ef:f2:ec:2c:b7:25:2d:c0:29:3b:50:9f:
         4b:47:ce:14:bc:64:41:14:87:db:e2:a9:7a:3b:ec:34:a7:a7:
         35:44:36:d8:09:0d:04:fb:cc:d1:3a:5e:1a:7c:83:d5:f2:68:
         07:70:57:af:53:e9:cc:d5:6b:bc:62:93:fc:3c:02:18:06:6f:
         08:c5:c1:5e:48:de:03:98:68:32:0f:a7:03:82:93:58:46:27:
         fc:3b:fe:0d:26:ea:b2:72:fb:77:ad:b2:fc:95:ac:3b:bc:a7:
         ab:b8:06:49:09:ce:b4:da:6d:6a:08:50:84:20:cb:56:2e:75:
         3d:2d:e4:be:9b:92:3c:3d:ba:3a:19:a3:a5:60:3c:17:02:3c:
         2e:f4:47:05
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2
MDI5NUM4NUZGMzdFMkRDRjc1QUYwMTRENDRBRDNCRjhDMzNBNDAeFw0yNDA1MzEw
MTMxNDdaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFFQjM0NkIxNENBNDFE
NEM0OEVBREJEQ0ZFN0Q4N0FFMzE2MDEwRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/R1DvOHbDbCGjAqG4nGHAq0SsxyA1cV/Md7d316B+VHo/CoIL
0u0g2Y3+sH+7g6eRi9u1IutPPznwKNBBh8X7RuFg/52HjVWredjOImboMdTD+pYn
be6fp0ekC8DD6yPY4dEQz99QJQbxdEBrJG092Mgq3ZghkjLfqzkUar5MWRi3hVTn
YR1SYIR/GDSoRbK4xEsszSFby+N6SWETx6bS4TssRVjeT1X75F4sab4oDKzXZKmW
RYFdfD+YP0hUlATh/QUzLyVRrazbox/fDtU6YyVDHwj7f1+lAfTowPpynrpdFjpk
xr5OYXiOntVOaeuuhlSl3JH1nstJ6e8zizufAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUrrNGsUykHUxI6tvc/n2HrjFgENUwHwYDVR0jBBgwFoAUfGApXIX/N+Lc91rw
FNRK07+MM6QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzkzOS9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3LU1NNlEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3
LU1NNlEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvOTM5L3JyTkdzVXlrSFV4STZ0dmNfbjJIcmpGZ0VOVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDK4TANBgkqhkiG9w0BAQsFAAOCAQEAHf2kQSoVw5L4Z47c6vK9iDZKEqi3
2KiaR68TfEItrizyB87WnnSoDoe7CqEmIooLj92SkncF6ZzlY33jUKhm+s8Cdmg4
EGLZBx5z7Cj9bit8EcDWsQrZs1OYhYSoUbEO+EWqkrDL9UC0oNIpQrTEIEjl7/Ls
LLclLcApO1CfS0fOFLxkQRSH2+KpejvsNKenNUQ22AkNBPvM0TpeGnyD1fJoB3BX
r1PpzNVrvGKT/DwCGAZvCMXBXkjeA5hoMg+nA4KTWEYn/Dv+DSbqsnL7d62y/JWs
O7ynq7gGSQnOtNptaghQhCDLVi51PS3kvpuSPD26OhmjpWA8FwI8LvRHBQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:24 2025 by rpki-client