Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/4rpgfFYJaoFQ6xTglRhRaG4CGms.roa
File:                     4rpgfFYJaoFQ6xTglRhRaG4CGms.roa (raw, json)
Hash identifier:          aKFKK/YCj5ddcEEE3L+ODOZ1AZ7zvJ6LWVNhkfWy6DA=
Subject key identifier:   E2:BA:60:7C:56:09:6A:81:50:EB:14:E0:95:18:51:68:6E:02:1A:6B
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0493
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/4rpgfFYJaoFQ6xTglRhRaG4CGms.roa
Signing time:             Thu 29 Feb 2024 01:28:53 +0000
ROA not before:           Thu 29 Feb 2024 01:28:53 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        180.233.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1171 (0x493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:28:53 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=E2BA607C56096A8150EB14E0951851686E021A6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:8d:8d:f2:76:66:dc:2f:ed:d9:89:2f:00:
                    d0:a7:f8:3f:aa:3f:bd:3f:27:28:fd:50:6d:a2:a8:
                    19:30:eb:d3:e3:13:fb:bc:d1:22:9b:e5:1a:09:36:
                    4d:42:9f:49:d3:ee:d8:05:b4:47:f7:a5:33:f4:70:
                    0c:82:0e:39:bc:47:e5:c2:02:51:8d:87:0b:ca:a5:
                    21:4b:b9:1b:81:98:01:1e:61:0c:36:79:a7:83:8f:
                    d5:f8:50:75:39:ea:9b:23:1e:c6:61:ad:4e:0f:26:
                    d3:d4:ec:f3:8a:44:b9:f3:0e:db:9a:e1:32:e0:3b:
                    8e:6b:0b:67:8c:fc:8f:73:64:1c:ff:e0:26:e3:d5:
                    23:e5:b2:80:9d:81:b4:4d:af:29:f0:a1:55:9b:ee:
                    02:ac:45:9a:c2:27:1d:34:42:f6:e2:05:ee:77:eb:
                    c4:af:cc:53:9b:61:b2:f8:7d:f8:47:7a:b0:f8:f0:
                    0d:19:c7:ab:b1:d5:37:1d:35:ab:15:d8:1a:18:59:
                    f2:6c:74:90:d7:2f:11:95:96:70:e0:27:2e:35:db:
                    cd:11:18:fa:e1:8e:ae:01:f8:60:bd:a7:26:ba:89:
                    b1:89:a7:ca:07:80:8d:84:bd:58:01:1c:91:4d:23:
                    45:6f:7d:a8:c4:e8:2e:4c:81:d0:60:67:e2:6e:56:
                    ac:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BA:60:7C:56:09:6A:81:50:EB:14:E0:95:18:51:68:6E:02:1A:6B
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/4rpgfFYJaoFQ6xTglRhRaG4CGms.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.233.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:a3:a4:a5:a7:01:62:2a:7d:a1:79:99:26:b9:f3:44:63:9b:
         3b:c5:69:3c:6f:c2:3e:5f:7e:f2:32:0f:f1:92:99:59:4b:72:
         a5:13:31:83:6e:8b:fa:0a:40:91:c4:e9:9b:c4:6d:54:56:52:
         39:2c:33:69:e3:78:55:bd:35:38:03:33:cc:6b:6e:4f:ba:77:
         7e:90:b4:0c:f5:53:a0:ed:27:67:a3:35:a8:ef:0c:52:9e:7c:
         15:9c:9a:02:74:f4:40:6e:23:1d:68:c9:78:2e:cf:4e:57:e1:
         6b:0b:1e:c3:04:c2:23:10:60:6f:9c:20:7b:71:74:2c:e2:8f:
         a3:16:ff:79:e0:05:2b:c6:c6:45:f8:d1:1f:8f:ef:4e:ef:77:
         91:c5:de:10:8b:a0:44:14:52:95:95:26:8c:6f:bd:ea:f5:79:
         23:c3:89:3f:88:8a:56:a9:14:8d:ad:0f:21:65:48:cd:0d:7d:
         37:dc:7c:be:d7:77:f7:d1:da:c8:d9:21:55:5b:85:10:29:48:
         2c:99:25:05:a7:f4:33:1d:85:8b:f9:6a:e4:76:97:18:a7:9f:
         54:91:01:a0:bd:3d:e9:53:95:e9:06:d2:f9:93:37:43:e6:de:
         e5:48:f9:9c:c4:53:53:85:72:ca:a1:14:91:8a:5e:be:4b:8d:
         6a:ca:55:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org