Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/7lCpiBmGbt3Ycd91dzqX4l2DhR8.roa
File:                     7lCpiBmGbt3Ycd91dzqX4l2DhR8.roa (raw, json)
Hash identifier:          tDb5zgtYe3D9j8rwBLIM/1gDJjkGx4HA0tL1gm7Cmlg=
Subject key identifier:   EE:50:A9:88:19:86:6E:DD:D8:71:DF:75:77:3A:97:E2:5D:83:85:1F
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04E7
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/7lCpiBmGbt3Ycd91dzqX4l2DhR8.roa
Signing time:             Thu 29 Feb 2024 01:36:00 +0000
ROA not before:           Thu 29 Feb 2024 01:36:00 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        112.139.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1255 (0x4e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:36:00 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=EE50A98819866EDDD871DF75773A97E25D83851F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d4:d5:7f:99:d3:b4:8b:66:f5:1e:68:f5:16:
                    7b:70:b3:d3:bb:c8:83:39:14:2e:20:da:88:26:d0:
                    92:c6:c0:fe:06:04:ef:4e:04:d2:9d:a2:99:ca:23:
                    e2:76:85:0c:69:ba:8c:2c:48:e1:cf:73:ae:83:eb:
                    94:5f:28:a3:50:92:7d:3f:eb:d3:ba:4e:1e:ad:35:
                    9e:e2:a9:3a:4a:cc:81:08:29:bb:23:46:b8:4f:d1:
                    c3:e8:24:76:07:cb:1b:cd:51:5b:fd:58:fa:f2:61:
                    eb:66:e4:85:ed:75:14:4c:8d:14:16:1e:87:28:50:
                    fb:c0:04:c2:2d:8d:0b:d2:06:fc:a2:8e:91:1f:e5:
                    5c:73:f5:5a:af:ec:03:93:da:7c:69:e4:7f:68:19:
                    ec:f2:8e:05:73:b1:6d:3a:cf:d6:35:e6:3b:32:79:
                    2b:a8:6f:58:a5:66:59:a5:20:37:10:68:22:9c:f9:
                    31:3b:b3:d9:39:fe:de:80:91:6e:98:4f:9e:df:3b:
                    40:0e:21:39:df:a6:04:a8:5a:6b:5a:0a:79:8f:04:
                    67:85:ca:fc:e1:25:ac:37:d2:d3:21:52:c6:e9:29:
                    b7:75:5b:12:62:58:5e:83:11:b8:dc:06:4c:93:82:
                    5d:1d:53:40:dc:19:19:f3:38:97:a6:96:e7:6f:05:
                    cd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:50:A9:88:19:86:6E:DD:D8:71:DF:75:77:3A:97:E2:5D:83:85:1F
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/7lCpiBmGbt3Ycd91dzqX4l2DhR8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.139.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4d:cd:ef:46:ae:37:ae:63:14:c2:f0:7f:0c:b4:ee:3b:17:b5:
         44:bb:ca:2b:12:c8:5a:b0:b6:31:1a:cd:74:2f:f3:17:ff:db:
         d1:9b:b0:3e:e8:82:d9:8c:9e:c1:f1:4f:8e:40:e5:d7:b5:9f:
         7c:34:5b:b4:b4:56:cc:32:6f:c5:d7:5f:d0:cb:15:61:9d:00:
         6c:0f:81:f6:8a:ef:16:15:7e:bb:64:47:94:3f:a3:e7:53:57:
         4b:6f:0c:f2:05:e2:e5:63:24:06:5c:28:c1:13:32:04:59:2c:
         05:c9:98:36:50:38:fe:64:4a:23:e7:0d:68:51:5c:1a:ab:67:
         63:af:09:f0:86:37:44:b8:bf:4c:9c:8e:e9:8d:92:3d:b7:c7:
         c2:cb:9d:28:f5:b7:ca:e8:fb:4f:0e:ee:98:cf:e5:a9:b1:77:
         88:14:58:86:99:56:a9:52:63:62:ae:a0:f5:73:6f:eb:05:03:
         b0:c9:2b:9e:67:e8:a6:b8:ce:6d:df:79:06:b1:1a:11:22:0d:
         3c:66:7a:03:4b:9e:8e:df:50:3f:5c:c6:cb:0d:84:8c:24:d4:
         72:e5:ac:67:9e:83:b5:0b:60:21:ac:28:48:4d:f7:a8:7b:48:
         05:f0:29:1c:60:2d:cd:05:b9:26:78:8d:9c:9b:14:67:b3:71:
         3c:e9:b4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org