Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/2r5zs_MjjLwUQKtOUBcgwjoq5Uw.roa
File:                     2r5zs_MjjLwUQKtOUBcgwjoq5Uw.roa (raw, json)
Hash identifier:          i/9ObAok76VSvXvGQsUfP1dfMt3kRfpKJl1bA/zVBA8=
Subject key identifier:   DA:BE:73:B3:F3:23:8C:BC:14:40:AB:4E:50:17:20:C2:3A:2A:E5:4C
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       049E
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/2r5zs_MjjLwUQKtOUBcgwjoq5Uw.roa
Signing time:             Thu 29 Feb 2024 01:28:58 +0000
ROA not before:           Thu 29 Feb 2024 01:28:58 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        119.83.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182 (0x49e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:28:58 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=DABE73B3F3238CBC1440AB4E501720C23A2AE54C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:1f:da:3f:30:f1:5a:4f:a4:5e:93:d8:9a:
                    90:b3:af:2c:05:ee:08:4c:d0:31:37:27:8b:cc:38:
                    eb:65:53:51:92:fd:88:37:eb:ec:a2:5a:52:9d:c4:
                    2e:15:16:87:c7:7d:36:8a:00:e1:db:90:73:2f:ce:
                    65:e6:3a:36:6a:a9:01:54:39:06:5d:63:b9:eb:24:
                    ac:57:28:4f:cc:2e:83:2f:e2:95:23:b6:39:ac:42:
                    07:c7:3b:21:01:4a:54:bf:91:1f:8f:5d:02:70:5b:
                    5e:01:0e:0b:b1:67:62:4e:41:c7:3d:b7:25:12:f6:
                    77:de:3e:f7:cb:a9:f1:82:f7:6b:57:aa:a7:02:01:
                    d1:4f:01:a1:fc:06:52:b3:14:8e:16:34:35:71:cf:
                    ea:df:3e:ed:e3:6a:a0:8e:3b:ff:93:29:27:55:0a:
                    05:b5:97:c0:c8:e9:a0:9d:8c:bc:0c:de:1b:14:25:
                    9c:1b:e6:81:30:95:4a:94:a3:a6:e7:bd:4c:4b:d9:
                    32:7d:26:c7:eb:8b:05:1b:c2:9e:b3:5a:78:72:13:
                    52:a8:b7:3b:8a:d7:e0:1d:bd:64:a6:aa:7a:12:3f:
                    b3:d6:87:ba:68:20:5f:a6:60:3a:2f:c6:26:ff:b0:
                    91:7b:6f:00:df:09:1c:d4:1e:ab:0d:e8:47:b4:04:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BE:73:B3:F3:23:8C:BC:14:40:AB:4E:50:17:20:C2:3A:2A:E5:4C
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/2r5zs_MjjLwUQKtOUBcgwjoq5Uw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.83.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         bf:88:6d:dd:2a:14:2a:17:38:15:be:4c:6a:e0:5e:b2:92:a8:
         3a:c6:11:87:79:e1:d3:23:3b:a2:fd:8e:d8:7d:fa:e3:b5:11:
         bc:70:56:e7:77:da:86:38:96:15:60:33:6b:28:bd:e1:c5:20:
         5a:4f:50:b8:6f:09:f1:bc:27:4e:bb:d9:c2:c5:54:39:67:73:
         88:f8:63:af:11:e9:a7:59:8c:26:32:9a:dc:11:e8:3b:f5:ef:
         9a:5b:fd:39:71:4c:e2:cb:0e:2d:ae:53:a0:4e:5b:ad:b0:00:
         f1:df:fd:97:3c:fe:b9:15:61:7f:e4:cb:a0:ea:ad:24:2b:a6:
         96:5e:38:d8:c7:88:df:7e:3b:a7:e4:5c:9a:af:e0:b1:06:3a:
         99:52:5e:1a:72:d5:c2:87:f6:e0:f8:b5:91:43:05:09:44:28:
         f1:81:06:57:8f:5d:63:6e:ba:a7:62:8b:39:87:c9:7b:5c:3e:
         6c:bf:0f:98:39:f1:c4:d0:ef:68:4d:67:cb:4f:16:35:07:d2:
         78:cb:82:ef:84:54:5f:23:98:7e:cb:be:c1:ef:5e:43:70:3c:
         df:03:67:dc:9c:be:d1:3e:55:cd:ad:0f:f6:89:70:4b:9a:36:
         d2:1b:cb:1b:4a:ba:e9:7b:63:68:5d:91:44:44:02:e2:3c:2b:
         06:82:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:50 2024 by rpki-client on console-fra.rpki-client.org