Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/pLFJwHE-ENa1b5LMiISzZ6ycB70.roa
File:                     pLFJwHE-ENa1b5LMiISzZ6ycB70.roa (raw, json)
Hash identifier:          bCr6i8eDBU4euAsbhoMXjw959CKdQxukA33YmKJvHmE=
Subject key identifier:   A4:B1:49:C0:71:3E:10:D6:B5:6F:92:CC:88:84:B3:67:AC:9C:07:BD
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       62
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/pLFJwHE-ENa1b5LMiISzZ6ycB70.roa
Signing time:             Thu 29 Feb 2024 01:29:15 +0000
ROA not before:           Thu 29 Feb 2024 01:29:15 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7667
IP address blocks:        202.255.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: Feb 29 01:29:15 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=A4B149C0713E10D6B56F92CC8884B367AC9C07BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d1:18:7e:87:ab:46:e1:98:c6:5d:44:89:c4:
                    6e:1f:57:18:e8:0a:55:d7:21:f9:bb:49:09:3c:39:
                    7f:ab:06:87:20:96:ed:37:55:bf:68:07:55:b1:96:
                    61:34:3c:2e:70:25:56:b1:06:89:b1:1e:b4:6d:2e:
                    0d:1c:22:8f:ac:4d:52:4d:7f:1f:89:55:48:1e:78:
                    e1:d5:72:b0:e6:0c:31:7f:0b:3f:77:23:5b:87:06:
                    99:d3:07:4b:fb:b6:3b:c2:c0:8e:92:33:16:52:5a:
                    01:40:ba:43:09:42:2e:b6:1d:56:8d:21:b8:7a:c9:
                    ff:da:7c:f5:e3:59:67:fe:51:4a:e5:3c:b4:b9:29:
                    32:2b:09:6c:bb:ed:d5:87:c3:f2:14:88:78:a1:67:
                    e9:fa:3f:5e:fb:57:9e:31:46:24:68:4b:ac:96:f4:
                    a1:10:fc:55:da:70:0d:ce:fb:04:c3:75:97:23:8c:
                    27:82:73:99:fd:fe:82:56:5e:87:f1:d6:da:65:4d:
                    e6:d4:ab:94:21:f1:6e:e2:49:1e:2c:14:ac:69:82:
                    1a:a2:ac:05:11:3a:fb:fd:7b:44:1f:d9:78:c5:d4:
                    66:12:b5:1d:02:71:46:a2:10:a6:dc:32:0f:a3:81:
                    45:bd:7c:94:79:00:28:d0:0b:01:84:22:f8:84:df:
                    de:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B1:49:C0:71:3E:10:D6:B5:6F:92:CC:88:84:B3:67:AC:9C:07:BD
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/pLFJwHE-ENa1b5LMiISzZ6ycB70.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:fe:d5:58:e3:72:f5:0a:6c:89:00:6c:b1:f3:9c:1e:c7:6d:
         21:be:35:2a:5b:7b:90:1f:44:63:5d:81:cf:9d:74:a7:68:f4:
         e7:c2:89:87:e8:14:28:22:1f:ec:86:a0:df:db:c8:f7:6c:6b:
         ee:89:02:ab:21:dc:f0:81:07:e0:d3:0c:09:31:c9:84:9f:72:
         ac:6e:26:e0:29:dd:01:32:ef:20:f1:2d:81:f5:5d:c0:9f:be:
         b7:d1:2e:1b:90:94:80:25:c0:a6:03:cc:a9:56:07:e5:29:0f:
         f4:26:67:f9:7a:62:48:c1:0f:a2:cc:91:d7:e3:c8:df:0e:09:
         9d:b3:c0:f9:1c:b2:b0:b7:c2:d1:c6:51:11:a8:ae:eb:c2:f5:
         c6:d7:67:d9:1b:81:0e:47:01:73:3e:f0:d1:ec:4c:cd:55:f7:
         fe:40:f5:39:a9:46:00:c9:ca:db:69:f4:b2:14:c8:32:64:b9:
         ac:6f:98:7f:80:53:46:d3:08:4d:99:1f:5a:91:06:69:43:27:
         f2:55:e7:27:99:16:eb:92:e3:f3:e6:83:1d:9b:59:60:48:72:
         b4:2a:fa:7e:15:a7:82:07:d8:13:cb:7e:8e:ed:5b:f3:87:e3:
         2d:5d:6a:9b:54:73:90:cc:34:99:53:27:79:61:0f:e4:5c:56:
         c7:a8:ce:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:38 2024 by rpki-client on console-ams.rpki-client.org