Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/18t8eYosE3SfXdBMAYSfqcDg48U.roa
File:                     18t8eYosE3SfXdBMAYSfqcDg48U.roa (raw, json)
Hash identifier:          EF+P4DeQiBF1ZRpJttaK1C2Z4nc3M/YlroGGawP7MJI=
Subject key identifier:   D7:CB:7C:79:8A:2C:13:74:9F:5D:D0:4C:01:84:9F:A9:C0:E0:E3:C5
Certificate issuer:       /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Certificate serial:       65
Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/18t8eYosE3SfXdBMAYSfqcDg48U.roa
Signing time:             Tue 01 Apr 2025 01:30:02 +0000
ROA not before:           Tue 01 Apr 2025 01:30:02 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     59125
IP address blocks:        1.21.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
        Validity
            Not Before: Apr  1 01:30:02 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=D7CB7C798A2C13749F5DD04C01849FA9C0E0E3C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:16:a8:7a:67:bd:5d:f7:6b:12:ba:7a:be:
                    5f:bf:bb:61:87:80:08:d1:1f:fb:b8:15:2b:29:bd:
                    79:97:8a:be:49:a8:c1:78:37:03:04:5e:d3:56:8e:
                    02:b5:7f:48:3b:60:70:d5:25:73:25:94:fb:19:16:
                    56:5c:c7:a5:21:c6:cb:0f:a9:5a:6f:48:c9:aa:30:
                    03:d6:59:39:4c:2d:46:e0:15:89:4d:7d:2f:58:fb:
                    2b:4e:64:be:61:b2:90:a1:e9:e2:9d:72:bf:73:d3:
                    4d:2f:37:49:60:36:62:55:b6:a5:47:58:1c:04:5a:
                    58:44:60:55:3c:2a:1f:e1:1f:98:09:74:0b:56:2d:
                    e6:0c:cb:b9:e7:f0:13:61:b4:83:45:bd:10:5c:b3:
                    24:e4:13:29:1a:cd:ea:39:72:72:61:17:e8:0b:d2:
                    ed:27:88:ba:cb:95:40:09:dc:50:d0:bb:61:0a:e0:
                    46:95:33:f1:8c:d6:48:bc:6d:c2:81:f5:c3:1b:12:
                    f8:bf:06:91:be:61:3a:e9:36:c7:d1:9a:c9:90:e5:
                    6e:6e:3e:63:c4:cb:76:06:25:e5:81:52:d9:e4:6e:
                    69:c0:d7:8d:7d:af:74:f7:2c:f5:c5:a5:5a:9d:24:
                    a5:1b:33:e6:86:20:42:50:82:5a:eb:78:3a:32:bb:
                    d4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CB:7C:79:8A:2C:13:74:9F:5D:D0:4C:01:84:9F:A9:C0:E0:E3:C5
            X509v3 Authority Key Identifier:
                keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/18t8eYosE3SfXdBMAYSfqcDg48U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.21.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:e9:99:fa:a3:42:db:5a:df:07:e5:9c:15:69:df:57:12:06:
         a6:b4:89:15:f4:c1:7e:d9:72:17:23:e6:7b:6a:2b:ea:0f:6e:
         ab:fc:b4:81:ab:f3:ec:06:4f:da:e4:4f:47:cb:65:e7:ac:7f:
         5f:0b:ab:6c:63:12:3e:a7:82:54:45:6b:fa:9c:38:d7:41:2d:
         ef:e9:8e:22:dd:59:b4:2c:11:2a:0a:76:71:e3:4c:28:b0:4d:
         dc:f5:67:f8:dd:91:28:af:4b:25:12:20:d9:f5:06:a7:b9:d1:
         8b:3d:db:27:97:a0:9e:fc:5e:68:a8:09:dd:90:da:cf:b9:80:
         3e:0e:3b:1f:13:36:11:d4:80:96:da:fa:94:19:c3:94:1e:6a:
         5c:9a:df:92:29:c7:48:e9:77:87:53:de:aa:7b:0f:2d:35:c9:
         46:e0:2d:b3:2f:c4:b7:ad:6c:4f:72:75:e1:19:33:3b:e9:9d:
         7e:01:28:96:29:38:25:1c:61:24:ae:3a:a4:aa:f4:d6:61:72:
         40:f8:3c:4a:94:2f:0c:c4:bc:17:bb:04:94:fb:9f:6b:f3:38:
         fb:6f:d5:c5:dd:17:f8:b8:3c:01:4b:3f:79:4d:f2:aa:53:64:
         ea:a3:04:74:b9:b0:f2:a6:a8:50:d8:d9:46:49:18:bd:54:16:
         b8:9e:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:43 2025 by rpki-client on console.sobornost.net