Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/skQok6BMG5hOtqlBCcPAOegtqC4.roa
File:                     skQok6BMG5hOtqlBCcPAOegtqC4.roa (raw, json)
Hash identifier:          dqm/XgGn73MgdB3XJ08x2NWplA/p6c6Hpc/PBVbmfFs=
Subject key identifier:   B2:44:28:93:A0:4C:1B:98:4E:B6:A9:41:09:C3:C0:39:E8:2D:A8:2E
Certificate issuer:       /CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
Certificate serial:       50
Authority key identifier: 19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/skQok6BMG5hOtqlBCcPAOegtqC4.roa
Signing time:             Sat 30 Nov 2024 01:30:38 +0000
ROA not before:           Sat 30 Nov 2024 01:30:38 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     55392
IP address blocks:        130.62.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
        Validity
            Not Before: Nov 30 01:30:38 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=B2442893A04C1B984EB6A94109C3C039E82DA82E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:3a:6b:86:af:ea:52:ac:c2:51:6c:a0:0d:
                    fa:71:a8:29:82:29:27:e8:fb:33:da:38:52:e6:c7:
                    01:da:00:4b:7d:1b:60:9e:77:cb:3a:cb:32:9e:47:
                    2c:60:0b:ec:5b:b3:84:72:ca:a2:37:ef:b6:99:cb:
                    c0:27:51:a0:2d:ae:f2:80:65:bd:20:05:ae:6c:56:
                    d3:54:14:61:16:f0:d6:9f:c1:31:65:19:1d:aa:66:
                    97:1c:cc:7a:cb:8b:d3:88:f5:d6:e5:10:7c:d6:35:
                    ff:80:06:18:23:d8:ab:68:eb:5c:07:50:c4:c1:0e:
                    ae:0d:72:58:2c:7c:eb:9e:1f:89:5a:3b:3b:c9:a0:
                    91:34:1e:66:20:42:5a:5e:ff:37:2f:22:26:67:f5:
                    78:bb:bd:f3:6f:20:0a:b7:ef:b4:68:58:28:2d:a9:
                    84:7b:ba:0a:67:7f:4e:68:85:94:79:c8:10:73:42:
                    52:bf:5a:f8:3e:4f:ce:c5:9b:6c:44:94:b3:c0:d5:
                    93:ea:d3:69:db:a4:56:57:ab:5c:9d:c7:c9:2d:d5:
                    96:29:39:a0:9f:a8:7b:13:68:b3:e7:ef:6a:72:4a:
                    87:a6:2c:f9:14:47:a3:67:60:7b:05:c0:e1:7b:7f:
                    67:be:c7:07:f9:a4:59:81:58:d6:de:8d:4b:a4:c1:
                    cb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:44:28:93:A0:4C:1B:98:4E:B6:A9:41:09:C3:C0:39:E8:2D:A8:2E
            X509v3 Authority Key Identifier:
                keyid:19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/skQok6BMG5hOtqlBCcPAOegtqC4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.62.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         37:16:e8:06:00:e7:9f:42:26:ae:80:94:be:58:a5:50:af:b5:
         d0:74:bc:e2:be:fd:1a:bb:fe:c6:eb:e2:f9:72:82:61:1f:18:
         63:5f:bc:7e:60:6f:cc:2e:9e:d3:fb:b0:55:f5:3c:08:3a:ec:
         18:e9:44:c9:69:39:9a:41:e6:98:42:8f:c8:15:6b:b2:41:5d:
         af:1a:77:80:ba:e8:00:42:28:82:8b:09:a6:ec:ed:a5:60:72:
         a3:01:fe:61:30:e8:42:1a:5a:8f:15:ee:94:8b:de:b6:ea:83:
         f1:1f:ff:fb:24:ce:3f:18:a0:23:7b:ab:46:77:40:2c:d2:9c:
         37:2d:ee:59:a8:d6:aa:b0:99:45:b9:bb:75:62:52:ff:68:39:
         88:02:18:8d:2d:19:8c:16:41:ce:5f:79:48:af:60:a1:5a:49:
         ff:2b:e6:80:68:e2:98:72:d3:6c:57:cf:55:bb:0e:de:60:8e:
         fc:16:cf:82:de:ca:52:da:17:de:90:f1:95:3e:fa:ba:f0:cb:
         0d:05:86:de:f0:cb:a4:74:0d:7f:66:64:0a:10:e8:46:cd:77:
         d1:be:7a:50:85:db:86:19:da:2b:8c:c6:38:ec:3a:80:4f:88:
         84:21:f8:7f:b3:8f:a4:99:53:76:b7:ba:19:4b:fb:d4:da:6c:
         1f:99:02:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:15:21 2025 by rpki-client