Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1562/B0a0mWHOCKMgdhlzbgWcqzw7SYw.roa
File:                     B0a0mWHOCKMgdhlzbgWcqzw7SYw.roa (raw, json)
Hash identifier:          a9rnnk7ynpuRtGrZ9FL1eswh+wO4FHelX/cS8ENzpdw=
Subject key identifier:   07:46:B4:99:61:CE:08:A3:20:76:19:73:6E:05:9C:AB:3C:3B:49:8C
Certificate issuer:       /CN=FD569FD6697C0FBEB3CE74EC56A6061FBBFCCEB1
Certificate serial:       43
Authority key identifier: FD:56:9F:D6:69:7C:0F:BE:B3:CE:74:EC:56:A6:06:1F:BB:FC:CE:B1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_Vaf1ml8D76zznTsVqYGH7v8zrE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/B0a0mWHOCKMgdhlzbgWcqzw7SYw.roa
Signing time:             Thu 29 Feb 2024 01:29:12 +0000
ROA not before:           Thu 29 Feb 2024 01:29:12 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18125
IP address blocks:        150.26.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/_Vaf1ml8D76zznTsVqYGH7v8zrE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/_Vaf1ml8D76zznTsVqYGH7v8zrE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_Vaf1ml8D76zznTsVqYGH7v8zrE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD569FD6697C0FBEB3CE74EC56A6061FBBFCCEB1
        Validity
            Not Before: Feb 29 01:29:12 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=0746B49961CE08A3207619736E059CAB3C3B498C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b4:8a:17:7a:ba:8a:47:db:2d:27:03:cc:10:
                    b4:c8:78:24:f8:1f:b3:ee:70:53:f7:6d:ca:fb:b4:
                    09:9c:79:90:2b:9c:68:e1:7d:3f:4f:87:d6:5b:2a:
                    d7:0b:f9:7d:ce:72:4b:d4:fb:b7:a2:cf:bc:fd:95:
                    0d:44:ef:41:5f:63:2e:e1:d1:2d:d4:37:ef:1d:5c:
                    ac:e8:25:fa:89:9c:8a:ca:86:df:7a:e2:d4:82:d3:
                    f2:24:8e:b0:41:d9:1b:3d:25:8c:69:e3:b3:05:3b:
                    07:60:a7:25:c7:fa:9d:ec:97:e6:e7:7b:31:76:33:
                    5a:1a:f6:d7:14:62:9d:b2:c2:b5:31:69:86:19:db:
                    00:cc:0a:d7:59:ae:02:27:3c:65:33:d0:ea:b4:e4:
                    e4:10:14:f5:01:1c:07:b7:23:28:de:a3:83:22:5b:
                    05:de:73:7f:ea:f3:a1:92:fa:4e:04:87:d0:39:2a:
                    b8:df:a2:81:29:2e:ac:c5:f1:ba:4d:ff:e1:a2:39:
                    6c:c1:c1:ec:6c:9f:18:bc:0b:65:de:4f:b2:aa:3a:
                    d9:b2:df:70:19:3f:a1:70:c7:ed:fb:e4:98:7c:02:
                    eb:60:69:e6:41:0b:9f:35:b4:6b:fb:0e:fe:3a:9a:
                    be:0c:bf:42:a8:ed:ac:0d:79:5e:8b:2d:a0:52:4e:
                    89:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:46:B4:99:61:CE:08:A3:20:76:19:73:6E:05:9C:AB:3C:3B:49:8C
            X509v3 Authority Key Identifier:
                keyid:FD:56:9F:D6:69:7C:0F:BE:B3:CE:74:EC:56:A6:06:1F:BB:FC:CE:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/_Vaf1ml8D76zznTsVqYGH7v8zrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_Vaf1ml8D76zznTsVqYGH7v8zrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/B0a0mWHOCKMgdhlzbgWcqzw7SYw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.26.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         70:ef:61:9f:12:a7:5c:81:79:bf:c2:b5:b1:b2:3c:be:43:62:
         be:55:61:76:f3:82:be:b3:ab:e3:c7:a4:23:e7:54:ea:04:7e:
         8f:81:e1:3b:3e:f3:31:69:af:91:05:33:dc:39:3d:21:91:8f:
         a9:c2:90:8a:c8:cd:e1:05:f1:5e:50:64:f9:c0:bc:36:73:a1:
         99:ee:7f:40:18:6e:04:91:36:08:03:a4:82:94:28:a8:6b:3c:
         0f:e7:bb:29:40:e8:4f:15:8a:b3:44:d6:99:b4:0a:4a:da:09:
         70:ba:07:8c:54:f5:42:85:47:d4:26:80:bf:82:04:36:c4:75:
         88:f7:9d:45:17:80:41:fe:6f:aa:17:11:d5:aa:06:fa:3c:18:
         39:ca:51:a2:66:c2:49:5d:34:fd:cf:b4:0f:c0:45:48:ea:c9:
         aa:32:60:e7:24:0a:ce:fe:3f:5f:14:47:04:7f:fc:84:21:85:
         2a:8e:81:9b:51:1d:e9:49:49:31:72:e4:58:66:26:83:a2:06:
         dd:d0:7a:13:91:53:6f:b7:bc:ee:ef:36:0a:1a:fc:d0:43:29:
         21:23:ca:34:3c:d7:79:fb:7e:3c:17:ea:30:fa:62:3a:bd:15:
         cd:25:5a:b1:be:49:de:a0:0b:1e:0c:00:9b:8b:53:ab:de:77:
         86:27:96:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:02 2024 by rpki-client on console-fra.rpki-client.org