Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/5g5vcoFIwlK1vh80-D5lbE2Ivto.roa
File:                     5g5vcoFIwlK1vh80-D5lbE2Ivto.roa (raw, json)
Hash identifier:          /qImtx/MMINlPyT5lxEfNSinBT91VfpJejIdhw397yY=
Subject key identifier:   E6:0E:6F:72:81:48:C2:52:B5:BE:1F:34:F8:3E:65:6C:4D:88:BE:DA
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0512
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/5g5vcoFIwlK1vh80-D5lbE2Ivto.roa
Signing time:             Thu 29 Feb 2024 01:39:26 +0000
ROA not before:           Thu 29 Feb 2024 01:39:26 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        218.219.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1298 (0x512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:39:26 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=E60E6F728148C252B5BE1F34F83E656C4D88BEDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:8f:68:3a:a8:94:ad:bc:19:33:04:78:ed:
                    02:c0:c4:8c:47:9c:35:94:f8:44:d8:14:3f:a9:1e:
                    d9:54:66:65:1e:15:19:5a:a8:c6:87:fd:e3:9d:bf:
                    d5:bd:c0:0d:1f:24:9f:2d:33:4f:ae:3a:bb:7c:85:
                    ca:0f:c0:43:53:63:a9:0f:4d:17:7f:fe:a3:93:33:
                    33:f1:48:2a:81:1c:ab:7b:60:a1:5c:08:3c:9e:be:
                    b3:bc:66:f6:21:5f:80:75:81:23:61:cb:33:6c:65:
                    c6:54:11:8b:ba:eb:47:49:e4:a9:42:fa:9b:af:ad:
                    2b:8c:74:ce:28:03:63:7a:9a:e2:d1:10:a6:45:8f:
                    a5:07:14:24:05:9a:ad:10:ab:aa:ae:85:15:dd:a1:
                    85:e7:18:26:91:48:52:09:ed:d8:ba:f1:ca:92:9f:
                    34:1a:aa:30:b2:6c:c8:f2:a3:0d:13:44:c3:b5:89:
                    5f:7e:d3:82:1c:3a:ef:8e:d8:0d:ac:bb:26:4c:8e:
                    6b:a4:de:63:3a:73:53:c0:d5:02:47:8d:77:28:f7:
                    dd:54:58:67:fb:b7:f7:e3:0a:97:75:85:82:b4:7d:
                    2f:d2:dc:55:bd:23:88:a8:4f:80:a8:ef:9d:02:f8:
                    16:4a:2c:9f:d2:5f:46:0f:d3:23:0d:bb:f2:22:6d:
                    52:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0E:6F:72:81:48:C2:52:B5:BE:1F:34:F8:3E:65:6C:4D:88:BE:DA
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/5g5vcoFIwlK1vh80-D5lbE2Ivto.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c6:dd:31:0c:75:fd:68:dd:c3:17:66:cd:07:56:24:8b:04:f3:
         63:58:12:93:8f:42:31:7d:ed:4b:36:cd:12:bb:94:df:6d:11:
         55:94:71:2b:bd:2d:d3:16:b3:ee:54:16:7f:c2:f1:98:58:ad:
         56:a1:44:f6:e4:3c:53:07:4e:23:e8:71:d8:a3:b6:da:6b:63:
         df:50:67:b3:38:b3:0b:1e:be:bb:ab:35:49:cb:10:44:16:9b:
         93:e2:f7:c8:87:bf:1b:36:2b:46:d0:62:75:51:f1:71:51:a1:
         cb:5b:54:4a:38:c4:c9:0c:71:dc:17:4d:b2:59:e1:6d:28:8f:
         e7:a3:2f:e3:b2:5f:b1:62:1a:5e:1e:c0:b5:fa:0e:9d:7b:07:
         25:6b:80:41:7b:25:ff:bb:69:5f:14:95:c7:c9:4c:67:bb:a5:
         73:96:87:ab:92:1f:03:e4:4f:02:4f:52:00:be:86:84:f0:b9:
         16:fd:36:dd:c3:55:25:91:e6:9e:ea:a4:ea:19:ed:30:f0:32:
         e7:b6:b6:17:b7:85:95:ba:bd:20:5e:e1:e4:be:0e:88:be:91:
         6a:6d:77:7b:a6:dc:50:de:74:c2:1b:fc:4a:0d:e3:27:2f:9c:
         bc:11:98:03:f9:26:3f:e1:e9:55:98:04:ec:41:18:42:b5:92:
         81:96:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:45 2024 by rpki-client on console-ams.rpki-client.org