Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/5gXUTO4RjhriZC2a4zEUxhXNpic.roa
File:                     5gXUTO4RjhriZC2a4zEUxhXNpic.roa (raw, json)
Hash identifier:          NcpgBhXp7I7O9yyx5P5FcgCgtJP+CpsQ2FxkB0vouyw=
Subject key identifier:   E6:05:D4:4C:EE:11:8E:1A:E2:64:2D:9A:E3:31:14:C6:15:CD:A6:27
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04ED
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/5gXUTO4RjhriZC2a4zEUxhXNpic.roa
Signing time:             Thu 29 Feb 2024 01:36:03 +0000
ROA not before:           Thu 29 Feb 2024 01:36:03 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        203.95.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1261 (0x4ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:36:03 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=E605D44CEE118E1AE2642D9AE33114C615CDA627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:41:0b:d5:94:69:7a:83:80:43:e1:50:a1:28:
                    f1:3e:9a:ca:93:cb:3e:c9:ff:43:42:2f:88:ab:74:
                    78:8d:ab:94:8e:ef:03:94:95:b9:51:50:ef:a9:73:
                    9b:9f:f7:16:92:16:eb:59:72:ac:2b:76:c7:69:0a:
                    f4:f7:89:a1:5c:b9:4c:6d:f0:b0:e4:dd:dd:22:0d:
                    91:94:68:57:9f:a0:3a:49:bb:8f:d5:49:02:99:bc:
                    45:35:f5:d6:42:56:b5:2d:07:86:55:fe:5c:5e:84:
                    a1:74:b7:4e:9d:3a:6c:39:08:09:1e:00:0e:70:6e:
                    64:52:20:97:d3:a8:3b:72:a6:cc:f9:63:3f:e1:4a:
                    13:ad:81:02:af:06:8c:6b:06:77:b2:4f:2a:83:a4:
                    e1:40:a8:a0:cf:b9:d6:e1:fb:23:f3:b8:f3:cc:01:
                    8a:ff:f5:2c:6a:41:66:1d:01:56:e0:a1:cf:1d:88:
                    83:0a:7a:ee:0a:9e:90:fa:7b:2c:ad:43:dc:28:58:
                    09:a3:d2:01:db:9e:22:bc:4c:0d:c4:8f:84:41:22:
                    f9:ce:26:75:e0:7e:ea:a6:6c:bc:73:97:36:88:65:
                    37:81:d7:5c:88:d2:f6:04:d8:20:08:6e:79:be:65:
                    2a:c6:25:98:6f:ff:77:db:8c:39:3a:c5:1b:9a:41:
                    40:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:05:D4:4C:EE:11:8E:1A:E2:64:2D:9A:E3:31:14:C6:15:CD:A6:27
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/5gXUTO4RjhriZC2a4zEUxhXNpic.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.95.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:29:ae:e1:90:57:42:84:5f:72:99:bb:35:f5:89:c9:f8:36:
         21:32:14:7a:2d:80:fa:3e:e3:a3:79:2a:e4:4d:f1:16:22:5a:
         42:50:17:4f:bf:38:ae:26:12:e1:be:be:c0:14:99:2d:1d:fb:
         88:2f:3b:8f:94:48:a2:a2:15:e9:29:f2:31:ff:43:38:b2:04:
         2e:ef:d3:b2:5e:07:4e:56:d1:83:34:13:dd:63:3e:c3:d3:59:
         0a:f5:1b:9e:20:9e:ac:bd:7b:85:1d:74:a8:b5:d9:bf:b4:ee:
         71:82:7a:3d:70:b9:2a:2c:1f:94:65:bf:0e:26:1f:9c:79:01:
         56:63:1d:26:eb:34:24:14:52:c4:89:8b:37:80:75:d3:e0:8e:
         23:9d:89:20:e7:bf:f8:13:ab:d0:80:e6:33:d8:50:fe:87:c6:
         45:4c:37:4a:00:db:0d:76:2b:da:9e:6f:14:ec:d4:0d:8f:96:
         36:6d:74:fd:43:42:47:12:9c:ed:b7:e3:1b:8d:a1:cc:9e:43:
         7d:25:85:fe:0c:1b:38:5a:c9:6a:86:c6:32:29:ab:cf:1e:50:
         5a:06:7f:1a:08:77:e4:b5:ec:f6:b4:c0:50:3b:91:82:ec:6f:
         a0:d4:62:91:4c:44:6f:b5:0b:8e:d9:c7:86:b5:b3:69:66:f7:
         8a:56:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:45 2024 by rpki-client on console-ams.rpki-client.org