Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/BsU3ILY26XStuuLk6UtkznI7R0s.roa
File:                     BsU3ILY26XStuuLk6UtkznI7R0s.roa (raw, json)
Hash identifier:          +nT/yMWHSUdhXkE7gml8vS4o+4F6pwBXUYMPjuYPdCg=
Subject key identifier:   06:C5:37:20:B6:36:E9:74:AD:BA:E2:E4:E9:4B:64:CE:72:3B:47:4B
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       6C
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/BsU3ILY26XStuuLk6UtkznI7R0s.roa
Signing time:             Sun 30 Jun 2024 01:29:10 +0000
ROA not before:           Sun 30 Jun 2024 01:29:10 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     55900
IP address blocks:        180.131.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Jun 30 01:29:10 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=06C53720B636E974ADBAE2E4E94B64CE723B474B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:38:ef:6f:d6:77:49:f0:e6:a6:7c:8b:54:
                    49:c4:7d:65:c0:e6:cc:31:d7:ea:c2:44:c6:b1:82:
                    54:2a:4c:b2:b0:f9:c1:46:25:1f:f7:ec:14:23:f9:
                    4e:b6:e2:5b:b8:9f:1c:b3:8a:f4:ce:fb:69:c0:b4:
                    a9:e0:d4:ec:5c:3b:13:b6:b8:4d:27:34:79:df:77:
                    0e:7e:be:6e:15:92:d2:6b:71:06:99:88:55:ec:cf:
                    ee:e0:e5:06:74:91:6d:d8:47:0d:5d:7d:f1:bd:3c:
                    bb:63:0b:08:78:6b:eb:f2:88:9c:df:80:76:17:73:
                    85:50:bf:8f:ee:2a:7b:84:5b:79:c0:36:0c:19:4b:
                    96:07:5c:fd:1e:7a:b6:8a:65:51:53:7d:82:40:14:
                    a5:2a:69:3b:f1:2f:65:42:9c:67:b5:1f:79:f0:90:
                    08:bb:a2:9a:b2:ec:d6:e4:d7:8c:4c:65:5c:0f:b2:
                    48:be:e3:fc:1c:c0:13:7c:fc:21:e3:6b:a3:a8:83:
                    c1:49:6b:ce:66:ff:42:ae:36:9d:7b:7a:38:04:2f:
                    0f:b6:7e:ca:52:e7:d5:e6:8f:58:b8:2e:97:5d:c7:
                    4a:6d:1b:30:29:a4:ed:21:22:f3:ca:fb:24:e2:a4:
                    74:fd:20:0b:02:d1:a5:9a:de:27:43:34:5a:3b:cd:
                    d4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C5:37:20:B6:36:E9:74:AD:BA:E2:E4:E9:4B:64:CE:72:3B:47:4B
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/BsU3ILY26XStuuLk6UtkznI7R0s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:d6:13:43:8f:a6:f5:78:4f:de:f1:7f:e4:25:07:85:08:2f:
         f6:ca:2c:31:ca:a5:4d:15:3a:32:c5:88:8b:4d:73:78:16:f9:
         0e:5b:98:be:d9:14:8b:8f:9b:24:37:84:bb:2b:9b:9c:b2:fe:
         07:e9:ea:99:71:92:ba:d2:42:53:c7:0c:f1:4a:fc:f4:95:73:
         fd:e4:63:08:60:b0:31:eb:1a:3d:7e:82:92:8c:4c:36:46:cc:
         29:1f:3a:17:fc:ce:d5:97:47:48:59:3f:42:c0:78:c7:25:fc:
         4c:fa:68:48:1f:82:11:c0:71:77:9c:90:65:02:6d:db:a5:a1:
         68:e9:b3:b9:09:37:44:5f:85:60:f7:70:5d:cd:b1:60:d1:3f:
         dc:fa:ec:ed:20:f2:fa:da:e8:18:7a:8f:8c:96:c4:01:08:33:
         0c:cc:80:71:be:01:c4:2c:93:8b:47:13:20:fc:8f:38:4d:a9:
         7c:63:bc:5d:fd:88:fd:be:f7:47:e6:ed:86:e0:74:a6:dd:15:
         f2:1b:3e:20:4b:a9:c9:2d:d4:e9:2a:8b:61:be:25:f3:32:07:
         ba:d4:cb:55:61:da:21:33:31:3e:4c:89:2d:1c:05:d9:39:a6:
         a7:d4:26:51:e0:d9:5f:69:18:f6:1e:69:44:80:08:bd:65:1f:
         7a:0b:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:04 2024 by rpki-client on console-fra.rpki-client.org