Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/AWORAcj1CO9xrUAIa7DIAbMoA20.roa
File:                     AWORAcj1CO9xrUAIa7DIAbMoA20.roa (raw, json)
Hash identifier:          Yotj4W4SLTnPlhmJHUdLH6We7mN14ItOr4HfnMWPaYk=
Subject key identifier:   01:63:91:01:C8:F5:08:EF:71:AD:40:08:6B:B0:C8:01:B3:28:03:6D
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       048B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/AWORAcj1CO9xrUAIa7DIAbMoA20.roa
Signing time:             Sun 01 Oct 2023 01:28:09 +0000
ROA not before:           Sun 01 Oct 2023 01:28:09 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     10010
IP address blocks:        133.186.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163 (0x48b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Oct  1 01:28:09 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=01639101C8F508EF71AD40086BB0C801B328036D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6c:ec:fa:cf:ad:df:22:41:c1:8c:8b:e6:65:
                    71:70:c3:39:7c:f7:db:17:08:9d:43:8a:cf:71:06:
                    c3:47:c6:1e:fa:02:a2:22:2e:48:66:7c:99:ce:ab:
                    13:58:35:94:12:af:cf:7c:6c:92:f3:6f:98:e0:9a:
                    e0:c6:ba:ad:83:f7:dc:7f:03:11:ae:1b:1c:29:c3:
                    b5:5b:88:06:1d:f9:41:32:a2:d5:9c:79:fd:69:3e:
                    52:5f:c8:34:48:0d:71:8f:c2:8d:b3:ab:17:23:03:
                    26:3d:18:57:49:3b:19:2c:8b:9e:34:77:05:9a:55:
                    0f:a8:43:ff:19:6f:f0:69:be:5c:de:cc:6c:25:80:
                    72:41:f6:ca:2f:26:e3:1f:ca:12:5d:80:16:77:a3:
                    cd:59:ad:a2:20:c0:44:af:de:4f:c3:91:7f:e5:43:
                    c6:5a:c8:00:79:f0:4a:2e:bf:93:20:1a:24:68:bb:
                    b1:20:68:7a:01:ec:30:c1:0e:40:42:64:6c:d9:d3:
                    55:17:e9:6b:13:23:e6:86:6e:2f:ea:04:42:90:4c:
                    56:cb:e5:5d:e6:86:92:46:40:53:9f:71:5a:bd:15:
                    13:85:88:83:84:dd:44:dd:0e:09:a1:05:3a:f1:09:
                    ac:ef:03:a1:28:31:8b:ad:d8:b0:a4:8c:1a:e5:9f:
                    a3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:63:91:01:C8:F5:08:EF:71:AD:40:08:6B:B0:C8:01:B3:28:03:6D
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/AWORAcj1CO9xrUAIa7DIAbMoA20.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.186.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:8a:aa:1b:f1:3f:03:88:7d:3c:f9:e0:d6:65:26:63:fd:79:
         fe:ae:2e:55:35:a2:88:93:5f:b7:2e:49:d3:c6:d4:1b:dc:d6:
         48:eb:fe:55:3d:e9:9d:7e:ed:c0:3b:99:57:06:0c:6c:64:2b:
         ef:2d:42:42:f3:73:1a:f5:4e:cf:7e:9f:69:f9:25:ab:e6:af:
         cc:0a:c1:c2:1b:74:1c:b7:43:45:cd:8d:51:2e:60:c4:36:34:
         9c:3e:95:48:e7:79:14:72:cb:c8:46:3e:8e:7b:9b:fb:e5:61:
         23:24:75:06:68:d8:54:c1:e3:7b:b8:e1:2b:5c:55:60:e3:f7:
         f0:99:23:10:76:b4:6a:10:d7:23:10:14:1b:65:f8:bc:18:b4:
         a0:56:10:c7:26:bc:00:3b:63:55:1d:79:6b:d6:b4:65:ff:6d:
         2b:94:7f:c9:06:b1:c1:38:dc:ab:ad:a5:39:22:df:ec:7b:af:
         a2:06:a5:d8:6e:1c:dc:46:b1:54:d1:1f:95:a1:24:05:f7:bd:
         03:10:51:77:d3:8f:74:8f:15:3a:fe:e4:5e:fa:df:c8:ea:85:
         73:ce:7f:66:10:98:9e:66:d2:81:ec:e1:f5:c5:a9:3b:06:fc:
         38:c9:82:9f:22:85:39:81:ba:e9:4a:f2:50:54:1a:5d:a2:3c:
         c2:e9:9f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org