Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/seLz1Smiuc7htuRXTlD-4GL1Rks.roa
File:                     seLz1Smiuc7htuRXTlD-4GL1Rks.roa (raw, json)
Hash identifier:          gsowdarQOuSnE8Z823DxzjBRBi3vMi+CzNkP2bvEGsw=
Subject key identifier:   B1:E2:F3:D5:29:A2:B9:CE:E1:B6:E4:57:4E:50:FE:E0:62:F5:46:4B
Certificate issuer:       /CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Certificate serial:       18
Authority key identifier: 1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/seLz1Smiuc7htuRXTlD-4GL1Rks.roa
Signing time:             Sat 05 Apr 2025 01:22:23 +0000
ROA not before:           Sat 05 Apr 2025 01:22:23 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     131931
IP address blocks:        210.171.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
        Validity
            Not Before: Apr  5 01:22:23 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=B1E2F3D529A2B9CEE1B6E4574E50FEE062F5464B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:91:01:0a:9a:fe:63:a1:42:fd:61:f7:8e:33:
                    92:0f:d6:b3:6e:7b:4e:df:06:9d:90:b8:46:db:d2:
                    b5:b3:0f:56:8b:db:5b:1d:bc:0c:cc:de:b6:19:e8:
                    7c:2f:56:a2:6b:95:44:36:8f:8b:e0:0f:fb:53:aa:
                    08:68:40:fe:36:9c:d7:36:3c:40:60:09:fb:bf:aa:
                    16:c7:20:eb:90:aa:42:10:37:c8:3f:d7:7e:7e:76:
                    c9:f6:08:98:e4:b2:87:6f:2b:1e:f4:80:90:2c:a0:
                    c9:84:f7:41:96:95:f3:ee:c3:c7:8f:fa:5e:ba:ff:
                    63:43:c5:36:13:5e:5f:9e:9e:81:55:21:46:a5:fd:
                    ec:2b:ca:61:56:44:0a:8d:42:08:6c:69:e9:12:b3:
                    c5:c5:3f:a9:13:8e:8b:90:2b:47:84:d6:b9:9c:38:
                    6d:22:48:7a:92:5c:87:b4:fb:1c:bb:76:41:70:be:
                    39:7d:90:98:7e:1c:4a:ba:c8:91:79:a7:ca:e9:d6:
                    ec:8e:e7:92:68:27:97:5b:d1:d5:60:49:43:1c:c7:
                    17:ab:12:35:55:1b:46:a2:c6:32:23:fa:25:2c:f2:
                    ea:8e:1a:6d:22:2f:81:b8:7f:81:7a:5c:6c:6f:c8:
                    97:d0:d5:48:fb:3a:b3:b7:3b:fe:2a:60:9a:06:63:
                    2f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E2:F3:D5:29:A2:B9:CE:E1:B6:E4:57:4E:50:FE:E0:62:F5:46:4B
            X509v3 Authority Key Identifier:
                keyid:1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/seLz1Smiuc7htuRXTlD-4GL1Rks.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:93:cd:d7:0a:f6:0f:67:e8:21:19:d9:4a:47:89:52:b6:a0:
         74:44:63:78:1a:89:e1:0f:1d:55:14:5c:1f:40:f6:4e:4f:98:
         67:00:b4:13:21:b5:7a:3e:19:a3:0f:d0:65:dd:ba:06:18:a8:
         ae:68:8b:c1:09:6c:02:fb:e5:50:39:e5:36:14:9e:98:92:08:
         c9:cf:ea:5f:08:72:d9:f8:89:c9:88:cf:ec:91:75:d9:ad:f2:
         97:f8:9f:45:6d:38:d5:ca:63:60:0e:bc:dd:8a:42:ad:04:65:
         86:76:bc:8f:27:28:8a:e3:67:05:6b:1e:48:93:21:ef:35:2a:
         2a:6c:87:6d:b7:73:c1:6e:99:f8:bb:4e:5d:1f:34:dc:05:05:
         61:62:0f:bf:0a:8d:7d:f6:2a:8a:96:6d:48:ef:26:6d:67:fb:
         d9:c5:af:8c:15:52:05:a6:79:e7:92:22:a4:da:9e:c3:2b:64:
         7b:8a:59:2a:d8:e2:7d:b1:62:d8:94:0c:6f:03:68:8e:7f:1e:
         84:ea:c0:55:35:d9:d2:0d:e1:03:c6:ce:ac:64:4d:93:25:00:
         68:84:e5:31:be:79:4c:e9:3c:03:d4:62:3f:8c:48:17:ab:aa:
         6e:09:28:9c:8a:89:c7:1b:4d:39:e2:b6:c9:dc:60:53:a8:da:
         9e:31:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:56 2025 by rpki-client on console.sobornost.net