Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/BngqrXkN9k8SkmMsP5Yl9Fnf61M.roa
File:                     BngqrXkN9k8SkmMsP5Yl9Fnf61M.roa (raw, json)
Hash identifier:          mnjLw9xE7ChY6azCUMguohwUfqe9pyqyAGSPhN8tOUA=
Subject key identifier:   06:78:2A:AD:79:0D:F6:4F:12:92:63:2C:3F:96:25:F4:59:DF:EB:53
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       55
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/BngqrXkN9k8SkmMsP5Yl9Fnf61M.roa
Signing time:             Tue 01 Aug 2023 01:28:22 +0000
ROA not before:           Tue 01 Aug 2023 01:28:22 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     55900
IP address blocks:        180.131.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 14:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Aug  1 01:28:22 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=06782AAD790DF64F1292632C3F9625F459DFEB53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:34:03:41:89:3e:c1:01:e6:32:66:a0:63:27:
                    17:ba:0a:80:72:b9:09:cd:15:5d:37:73:80:28:fc:
                    16:0d:f9:05:01:26:4b:e3:c8:15:e1:fe:41:ff:fd:
                    0b:33:7f:f1:ea:41:1a:4b:c1:bf:d0:43:3f:1c:a7:
                    59:c6:33:ba:c1:38:7e:5f:b6:85:87:fe:ff:db:cf:
                    67:ce:ec:46:4d:ae:ef:e9:23:d4:39:0a:e4:e9:eb:
                    ff:af:86:43:c7:32:ad:0a:68:6d:25:61:74:8f:96:
                    3d:5a:2d:d9:62:31:64:db:91:3e:ab:51:ce:ca:57:
                    0f:f9:45:ce:d9:68:c6:9c:09:78:9b:ce:90:4a:9a:
                    a8:b5:87:5f:05:60:c2:13:59:a2:78:35:a9:ae:b3:
                    79:52:b5:bf:25:96:61:40:9c:00:e1:5e:3b:1f:49:
                    f0:dc:95:59:07:74:26:dc:16:e2:96:d5:0d:1b:5e:
                    1e:cb:2f:3b:f3:59:aa:17:dd:6a:08:56:c7:c6:17:
                    b6:bb:e0:64:f7:d5:fb:a0:ef:b6:a5:b5:7f:24:04:
                    5d:6a:6a:94:1a:b9:c9:6a:84:03:97:2d:7d:a5:97:
                    a6:1e:83:91:65:98:d4:41:b2:54:ac:71:aa:0c:b3:
                    38:9a:32:72:33:b5:8d:34:93:37:45:2a:61:7a:31:
                    76:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:78:2A:AD:79:0D:F6:4F:12:92:63:2C:3F:96:25:F4:59:DF:EB:53
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/BngqrXkN9k8SkmMsP5Yl9Fnf61M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:04:36:ae:67:4f:e7:48:9e:a4:60:8a:18:ab:4c:7c:c8:94:
         43:56:c5:3f:d7:0e:54:d7:d9:ff:15:b2:ea:22:19:bc:4a:50:
         ad:07:ca:42:6e:01:43:08:84:03:2e:25:dd:31:eb:d3:4e:e1:
         14:f8:47:f0:38:d8:e9:c6:a1:01:ab:e5:6c:8a:63:13:42:6f:
         18:99:f0:32:51:33:48:95:54:5b:fc:48:58:5d:22:5b:89:51:
         6d:84:48:a1:49:11:ca:de:5a:37:84:bf:18:3a:1a:bb:de:7a:
         9b:4f:7b:98:ee:cd:0e:ad:db:2b:74:12:a2:e9:99:30:59:6e:
         d7:9c:f0:1c:a2:12:c6:e6:42:88:7a:e1:10:9e:cb:93:f9:72:
         2c:d7:54:b2:bc:0e:3a:d0:4b:ef:34:e0:05:02:38:42:17:9a:
         70:7c:82:bf:c1:db:db:d9:eb:77:58:c3:35:d4:2b:a6:01:d2:
         79:17:a4:98:d5:af:07:b5:f4:33:c1:d0:b3:69:23:c1:26:ee:
         db:2a:49:c1:33:8b:25:26:0d:9e:b1:af:37:45:1c:a1:e4:42:
         79:34:e5:03:3c:ee:a6:63:42:b1:63:d7:a7:bd:01:b9:e2:dc:
         a3:25:4e:72:da:11:fe:16:d6:14:c8:e5:5c:01:25:4e:79:2c:
         da:0d:b1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:50:38 2024 by rpki-client on console-ams.rpki-client.org