Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/zF-r_0f1dgiUqv-yFsNT47PJgVQ.roa
File:                     zF-r_0f1dgiUqv-yFsNT47PJgVQ.roa (raw, json)
Hash identifier:          a/k+2vO3KrhCMEfOIWIgmDaBqzUYm3BuqRPBUAcQ8MQ=
Subject key identifier:   CC:5F:AB:FF:47:F5:76:08:94:AA:FF:B2:16:C3:53:E3:B3:C9:81:54
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0583
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/zF-r_0f1dgiUqv-yFsNT47PJgVQ.roa
Signing time:             Fri 31 Jan 2025 01:39:53 +0000
ROA not before:           Fri 31 Jan 2025 01:39:53 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        119.83.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1411 (0x583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:39:53 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=CC5FABFF47F5760894AAFFB216C353E3B3C98154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f4:bb:a7:6d:b2:37:bc:2b:07:bc:55:0b:08:
                    e6:fc:02:c1:0c:eb:5b:73:49:0f:7b:8e:4d:de:80:
                    d1:36:05:a4:43:1d:78:d2:f3:3b:2c:18:cb:99:f1:
                    4f:9a:75:64:7b:b4:42:a3:c7:57:33:9f:c6:d2:f5:
                    82:b1:73:33:20:1f:60:b5:d5:7c:41:95:73:20:b1:
                    77:25:77:d9:ce:d0:34:ba:8a:fb:e1:62:28:a1:29:
                    7d:60:51:b7:21:78:8b:92:cf:ec:b8:78:58:36:71:
                    0a:cc:29:c2:90:23:74:b6:de:e2:18:13:e8:63:73:
                    74:a1:65:4f:c7:e3:a4:ac:b5:b1:b7:41:29:86:d5:
                    5d:2a:b8:f1:9d:4e:50:0e:41:a6:84:f6:bc:d4:96:
                    2c:8c:1c:46:02:a4:f0:c9:7b:2f:18:41:1c:72:47:
                    dd:56:4c:96:a7:58:13:44:17:a7:3e:14:34:9c:f8:
                    1d:32:b3:80:d5:50:b3:22:72:97:fa:27:a8:fb:de:
                    23:f7:5c:f7:5e:d2:a6:6e:27:fe:22:a2:48:75:cb:
                    f4:0d:5f:24:5a:3f:77:ef:c6:09:40:23:85:ba:e0:
                    ef:20:71:49:05:e3:f4:2e:5a:4c:e4:6f:ad:62:3b:
                    53:b9:b8:d1:d2:f7:a9:8f:ce:2e:0d:df:bf:b0:f8:
                    78:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5F:AB:FF:47:F5:76:08:94:AA:FF:B2:16:C3:53:E3:B3:C9:81:54
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/zF-r_0f1dgiUqv-yFsNT47PJgVQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.83.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         96:85:a2:e0:fb:89:82:c8:cd:7f:99:81:99:c1:65:78:ff:2c:
         3c:00:84:6c:da:00:e6:ed:6e:f1:b1:f4:72:ec:67:da:01:44:
         5d:48:e9:b3:db:f4:2a:36:26:75:71:78:16:23:e3:67:a4:17:
         79:ef:bb:18:da:10:3a:01:74:03:55:4d:d7:22:98:bc:e7:56:
         a2:a9:83:7b:9e:7e:28:bf:f1:a7:f4:bd:23:ba:03:8b:97:f9:
         e9:14:a7:df:f0:16:13:a3:aa:ea:2a:71:f0:3f:dd:36:11:cc:
         fd:38:29:9c:e9:f3:c6:4a:30:45:ca:9f:2e:d2:e2:86:a1:9c:
         18:13:0e:38:af:e5:db:1c:e4:0f:cd:f5:19:c1:2d:06:73:f3:
         5e:66:8b:b0:f5:db:2f:96:0f:06:8b:c9:25:1e:16:f8:e0:56:
         76:c4:23:35:91:78:e1:bf:c9:e9:04:f4:db:5e:d2:38:21:7c:
         c9:ae:90:07:7d:d4:8c:ac:29:5b:4e:13:28:3f:8c:52:5c:f1:
         fa:e6:8f:a6:34:aa:68:7e:50:19:d6:d8:03:bd:c2:42:65:8f:
         9c:4c:1f:34:c1:40:ba:cb:63:a1:c0:be:a4:43:7b:d0:19:a3:
         88:26:b5:24:6c:62:36:d2:ac:01:ef:c5:45:69:39:ef:4d:b4:
         8e:82:87:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:00:16 2025 by rpki-client