Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/0Uj4Yg-wavlQmhUfqOHDLHTG0B8.roa
File:                     0Uj4Yg-wavlQmhUfqOHDLHTG0B8.roa (raw, json)
Hash identifier:          zpz00dPgh2cF0IZsWZX1PSE+S4sbNkC4pbzBn9H9Ks8=
Subject key identifier:   D1:48:F8:62:0F:B0:6A:F9:50:9A:15:1F:A8:E1:C3:2C:74:C6:D0:1F
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0513
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/0Uj4Yg-wavlQmhUfqOHDLHTG0B8.roa
Signing time:             Thu 29 Feb 2024 01:39:26 +0000
ROA not before:           Thu 29 Feb 2024 01:39:26 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        220.148.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1299 (0x513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:39:26 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=D148F8620FB06AF9509A151FA8E1C32C74C6D01F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:32:d8:c2:c7:6e:1e:84:f0:bb:19:54:8a:
                    36:c2:b8:fd:fb:60:a1:87:25:e5:9e:eb:aa:b9:b5:
                    15:74:08:f2:2b:09:57:d4:26:fe:4b:c5:d7:19:2d:
                    62:88:be:16:66:e4:54:4e:f1:df:8c:ce:3f:fe:2b:
                    f1:8e:e3:33:a5:04:4e:39:6f:e1:cd:e8:54:9a:37:
                    ba:3b:56:a8:c2:01:72:5b:bf:e6:94:dd:47:1c:7e:
                    39:82:14:b1:e5:2c:e3:a1:6a:73:19:68:6d:f2:82:
                    b5:43:ca:8a:50:7a:5a:e4:cb:4a:bd:26:46:94:59:
                    01:17:41:5f:6f:78:f5:a3:50:c5:3e:4b:87:78:3d:
                    d1:3e:d2:98:5a:5b:4c:76:c8:b7:25:5a:b3:69:16:
                    60:1d:93:e4:d2:d9:86:8d:df:a0:16:04:85:3f:f3:
                    99:3e:9c:a6:6c:d0:9b:01:2d:33:35:2f:07:89:32:
                    c4:ce:7b:d7:1e:3f:11:6d:e6:73:a6:78:0f:2b:8f:
                    0b:01:fb:d6:cb:51:fb:35:cf:48:8d:5b:74:ca:ef:
                    de:be:ec:96:c7:d1:5a:2a:1a:02:02:8a:87:14:d8:
                    81:bc:23:24:c7:56:4d:f9:b3:d7:ed:d6:97:f7:75:
                    ce:18:5f:12:0d:ad:8b:dc:07:c3:d6:fd:88:f2:3b:
                    f2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:48:F8:62:0F:B0:6A:F9:50:9A:15:1F:A8:E1:C3:2C:74:C6:D0:1F
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/0Uj4Yg-wavlQmhUfqOHDLHTG0B8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:32:1c:ed:85:b1:69:64:b2:f5:25:2a:09:87:7d:92:c6:d0:
         75:7b:41:48:3e:69:41:f0:75:e1:17:6d:a4:54:df:ee:b5:93:
         0e:d8:d8:19:c8:b8:1c:05:95:cd:27:58:9c:52:bd:2c:0d:dc:
         39:68:19:d9:21:c6:ff:b2:3f:08:9e:87:94:5e:95:9f:ad:1b:
         9a:cb:cc:26:36:5f:37:e9:b0:6e:49:38:53:3c:31:b9:a9:df:
         58:ca:f8:74:e0:02:4a:96:a0:5c:bd:44:e2:f1:5e:a2:92:e8:
         24:0c:92:11:70:7b:80:a8:fc:3e:86:d9:ce:72:78:93:a7:62:
         4a:b5:59:9b:28:9d:9b:d4:32:b3:3a:23:66:79:c8:b2:e1:10:
         c5:e0:e7:02:52:bb:cd:3f:d4:63:7e:1d:dd:64:2d:cc:1e:b2:
         e5:4e:6c:3c:b7:67:ae:5d:1a:e0:7e:ab:3a:7f:92:a0:d2:77:
         4d:85:34:08:73:db:16:e9:71:83:43:ec:b5:19:ce:83:07:ee:
         f2:54:f5:a8:64:17:d7:e5:57:e2:05:2c:aa:66:5d:cf:12:63:
         11:c0:2d:af:55:86:14:3a:10:e7:27:ac:b4:0e:ae:78:46:5f:
         17:2c:81:18:0f:11:f0:32:ea:64:11:32:d4:7d:5f:36:ac:33:
         f5:09:aa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:41:59 2024 by rpki-client on console-ams.rpki-client.org