Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/675/hSf0jKInSE-w9POI_5TEl_jSMYA.roa
File:                     hSf0jKInSE-w9POI_5TEl_jSMYA.roa (raw, json)
Hash identifier:          u+SbB3ErfgZAkVJkufB08+oiO0nR+ID1TlX0aFRgAkU=
Subject key identifier:   85:27:F4:8C:A2:27:48:4F:B0:F4:F3:88:FF:94:C4:97:F8:D2:31:80
Certificate issuer:       /CN=041FC867F39C53644D0C5C50994B55111BD76CA3
Certificate serial:       03
Authority key identifier: 04:1F:C8:67:F3:9C:53:64:4D:0C:5C:50:99:4B:55:11:1B:D7:6C:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/hSf0jKInSE-w9POI_5TEl_jSMYA.roa
Signing time:             Mon 23 Dec 2024 02:55:58 +0000
ROA not before:           Mon 23 Dec 2024 02:55:58 +0000
ROA not after:            Fri 19 Dec 2025 12:41:20 +0000
asID:                     14618
IP address blocks:        218.223.14.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041FC867F39C53644D0C5C50994B55111BD76CA3
        Validity
            Not Before: Dec 23 02:55:58 2024 GMT
            Not After : Dec 19 12:41:20 2025 GMT
        Subject: CN=8527F48CA227484FB0F4F388FF94C497F8D23180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0f:ef:5b:78:ee:01:c9:f8:c7:b7:c8:c9:ab:
                    e6:66:aa:d6:b0:84:de:14:20:e3:a3:0a:56:cb:84:
                    17:13:9d:db:c5:2d:78:ab:ce:b3:18:3c:35:ca:aa:
                    d3:77:9e:96:96:a5:fe:36:fc:36:95:71:8c:c4:6b:
                    d3:84:5e:40:b0:2b:a7:83:61:89:57:d3:2c:68:dd:
                    72:23:e8:94:83:fa:66:a2:d3:33:b5:17:f9:75:b0:
                    1e:97:05:ff:ec:1f:c8:17:cd:6e:63:7a:7d:cd:92:
                    2e:e8:00:12:3a:40:e4:89:ba:39:05:7d:9d:ba:ee:
                    d7:03:6d:47:fe:4d:84:45:bd:e2:d3:da:b3:45:91:
                    d9:15:15:79:b9:e0:1e:84:3e:47:41:6d:e1:03:5d:
                    1e:e2:56:0e:cb:e9:ac:fb:eb:39:ae:85:7d:f2:55:
                    5e:69:64:48:43:67:84:07:7c:fa:ea:df:52:68:ae:
                    34:eb:27:19:a2:c0:b1:ff:ee:d1:5e:23:79:a9:60:
                    bf:93:f6:4a:b8:d4:2b:be:31:50:fd:68:90:5f:3e:
                    c9:b0:76:14:16:11:94:89:cf:54:a1:ed:26:73:86:
                    ff:31:3c:9f:66:89:e3:74:e3:45:72:9e:63:a6:f7:
                    be:13:9e:f5:ca:e9:d9:bf:70:11:08:ce:d5:bc:d0:
                    40:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:27:F4:8C:A2:27:48:4F:B0:F4:F3:88:FF:94:C4:97:F8:D2:31:80
            X509v3 Authority Key Identifier:
                keyid:04:1F:C8:67:F3:9C:53:64:4D:0C:5C:50:99:4B:55:11:1B:D7:6C:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/hSf0jKInSE-w9POI_5TEl_jSMYA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.223.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:81:f1:76:53:40:ba:2f:0f:49:fd:bc:63:29:a6:ef:ee:5d:
         57:36:f9:4f:26:f9:b1:3a:3b:4b:59:7a:4e:c0:46:d3:5c:7a:
         dc:a5:a2:7f:89:ce:42:1d:50:8d:53:41:74:4d:84:61:c3:08:
         f1:d6:bd:59:85:7c:f3:d5:1f:76:60:72:1f:e3:e0:cb:a1:db:
         cd:bd:73:09:05:a5:bc:28:8a:10:b2:a2:9e:e4:42:2f:40:5c:
         8f:3b:61:b5:31:65:98:a2:35:7e:0a:a8:02:42:c1:7d:99:60:
         0c:97:85:ef:13:29:c4:27:df:f5:b4:c1:d8:a0:d9:45:15:10:
         02:22:de:de:67:10:97:b6:b1:c4:00:0f:ab:14:e3:63:ee:75:
         22:a9:1b:9b:37:ce:4f:36:fa:41:c2:dd:23:9e:3f:09:d0:b3:
         29:f3:03:27:55:1d:a5:23:56:a1:a6:75:e6:b3:5d:0d:12:41:
         3c:16:ba:d6:56:22:ba:c9:b2:c6:56:5b:9e:48:fd:a8:63:d0:
         34:74:62:a8:d5:da:f6:c3:82:b5:ae:64:09:93:b3:46:23:28:
         c9:46:23:c5:c9:4a:df:46:a7:09:bc:7b:43:53:4c:cc:e9:b8:
         a6:8b:4e:b4:73:4d:1a:a5:29:34:d2:25:56:bd:dc:c1:0d:c2:
         97:16:8d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:36:44 2025 by rpki-client