Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/-cvCcKTct55Ix1Qa3-rprb8l9LM.roa
File:                     -cvCcKTct55Ix1Qa3-rprb8l9LM.roa (raw, json)
Hash identifier:          tVzEiBVZCS5V8OXDgxu57GFWwPZXgsfrQzktuprjv54=
Subject key identifier:   F9:CB:C2:70:A4:DC:B7:9E:48:C7:54:1A:DF:EA:E9:AD:BF:25:F4:B3
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       053B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-cvCcKTct55Ix1Qa3-rprb8l9LM.roa
Signing time:             Fri 31 Jan 2025 01:30:24 +0000
ROA not before:           Fri 31 Jan 2025 01:30:24 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        183.86.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1339 (0x53b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:30:24 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=F9CBC270A4DCB79E48C7541ADFEAE9ADBF25F4B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:3c:9b:3b:af:f1:6f:15:cb:c4:6d:77:09:
                    64:4d:2c:9c:a4:5c:3a:36:6c:ea:52:e3:96:ad:20:
                    ca:8a:69:96:1c:84:de:bf:af:63:52:98:a0:92:c7:
                    e2:70:e1:27:b9:47:ab:95:69:99:16:d6:6d:d5:0d:
                    68:7b:5b:25:b3:6f:6b:a9:7b:d8:91:1a:d3:ad:e8:
                    6a:dd:00:44:33:f0:b5:00:6b:fc:41:35:40:9f:1b:
                    fa:72:43:2e:6c:5f:05:6e:4e:83:88:f3:ca:7e:43:
                    44:9f:7b:43:ab:0e:81:ed:6a:9a:81:93:3e:c3:5f:
                    f7:55:24:9d:48:f5:50:cd:90:30:b4:f7:7e:82:58:
                    f3:26:9b:79:67:31:0e:43:e1:2d:95:52:39:fc:38:
                    aa:86:10:af:36:09:54:c6:8c:57:b4:cc:84:90:a5:
                    fc:0a:7a:cb:f6:2a:cd:e8:40:3b:3a:b6:59:45:1b:
                    3b:04:28:d4:14:06:e9:98:ee:70:a2:54:2f:3d:2c:
                    ab:6c:67:2d:cd:e0:bf:e9:be:28:ed:d1:d5:20:ef:
                    d0:7f:98:05:33:7f:77:b9:18:cd:70:fe:85:70:5a:
                    81:d9:d3:ad:00:7b:90:8d:b0:50:89:e6:ae:4d:39:
                    91:29:e0:de:58:3e:29:17:6a:c9:18:36:0f:9d:02:
                    08:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CB:C2:70:A4:DC:B7:9E:48:C7:54:1A:DF:EA:E9:AD:BF:25:F4:B3
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-cvCcKTct55Ix1Qa3-rprb8l9LM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.86.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         90:bb:e3:ce:3e:79:06:76:60:0c:4e:ae:7e:f2:9e:25:23:a0:
         58:e3:63:b8:c3:48:44:c1:3a:2b:ca:c1:14:e2:9e:93:b7:68:
         3b:e3:38:9f:5c:76:56:fb:a7:74:34:b9:48:2b:59:59:62:9d:
         8f:d6:5b:2f:38:df:90:21:2d:ef:09:0e:0b:95:db:66:4f:68:
         28:82:e7:11:e6:61:8c:9b:0d:78:9f:b2:fa:84:55:84:17:66:
         77:e6:a0:dd:7b:03:ae:65:02:74:bb:9f:6f:47:b2:d6:dc:91:
         bd:75:90:0c:67:10:e1:b3:44:d1:b9:1a:dc:bc:14:bb:71:a3:
         50:22:00:75:fc:ac:b8:6e:82:91:bf:51:81:05:4f:61:4e:10:
         42:28:f1:bf:e7:1c:34:f7:c6:93:e6:05:f0:0c:31:12:a8:92:
         73:3a:59:8e:a6:00:ae:21:fb:76:24:72:0b:c1:b0:a8:cd:a4:
         72:e9:ec:5f:d2:ce:95:cb:df:a3:19:21:2c:19:21:3f:07:02:
         92:a2:05:08:55:27:b6:31:3e:a5:3f:18:42:85:69:ba:6e:2e:
         f4:88:6f:76:84:ac:2d:b7:57:67:c6:20:16:6c:5e:ec:57:6f:
         39:b6:49:35:36:48:08:5e:ec:71:d3:90:f8:2e:a6:13:d3:ba:
         bf:7c:ff:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:11 2025 by rpki-client