Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/FT_Qkj0ktasHOTEoaNDtZiRgL78.roa
File:                     FT_Qkj0ktasHOTEoaNDtZiRgL78.roa (raw, json)
Hash identifier:          02hwb0oWC1rwZYe4x7qY6BPB79Li2D3Iu9pR73rAfFA=
Subject key identifier:   15:3F:D0:92:3D:24:B5:AB:07:39:31:28:68:D0:ED:66:24:60:2F:BF
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04A2
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FT_Qkj0ktasHOTEoaNDtZiRgL78.roa
Signing time:             Thu 29 Feb 2024 01:29:02 +0000
ROA not before:           Thu 29 Feb 2024 01:29:02 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        61.200.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1186 (0x4a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:29:02 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=153FD0923D24B5AB0739312868D0ED6624602FBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0d:e3:75:82:ff:50:5f:54:8c:63:9f:15:75:
                    47:7f:9e:5d:fe:ed:24:c2:89:97:c8:9a:e6:56:22:
                    c7:e2:2a:3f:7f:16:f4:ed:c7:74:f1:99:e3:e7:bc:
                    8e:98:c6:e7:83:2d:b1:60:43:ec:dc:65:4c:fc:bc:
                    58:d2:c9:a8:33:58:90:01:08:93:91:be:90:29:9f:
                    79:49:47:1d:ee:7a:8b:9a:c9:3b:67:22:79:14:3d:
                    d0:1d:a5:eb:66:92:ec:34:20:7a:d6:5e:31:ef:d1:
                    d7:a4:71:71:79:2f:04:24:89:ac:d9:1a:97:47:a1:
                    65:db:86:ff:50:d2:29:86:c0:16:ad:1f:37:12:4b:
                    a3:71:fb:88:16:cb:05:18:1b:a4:73:25:c0:e5:0f:
                    7a:5e:d5:cf:2f:7e:b6:1e:eb:c2:18:e9:f3:f2:76:
                    79:b6:ed:ec:62:45:08:48:2a:49:cb:96:4b:ef:ef:
                    6e:1d:14:ca:3f:4c:30:1e:35:ef:cd:26:79:5b:f3:
                    63:1d:45:75:98:1d:08:66:05:36:0c:50:d5:ad:05:
                    fe:1d:6a:a2:dd:53:67:35:fc:a3:e3:80:be:ca:c4:
                    00:61:7d:0c:4b:01:eb:0b:1b:a1:37:be:18:c5:44:
                    1a:7a:56:2a:c4:3b:71:b0:e4:d7:33:c7:95:96:29:
                    13:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3F:D0:92:3D:24:B5:AB:07:39:31:28:68:D0:ED:66:24:60:2F:BF
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FT_Qkj0ktasHOTEoaNDtZiRgL78.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cc:c3:91:a4:d0:12:05:61:f5:34:d5:aa:13:ac:4f:21:68:7d:
         e3:db:66:35:ce:e8:8f:72:fe:14:12:3a:d2:87:ea:00:41:f3:
         4b:ed:1c:1b:20:7e:0f:bc:d6:b0:6b:4b:80:ef:f7:a2:43:72:
         aa:76:49:68:23:11:ea:b2:e9:ac:1f:87:8c:1f:e4:52:c8:ce:
         8a:7f:65:59:6d:64:a7:74:36:eb:56:03:80:6e:d6:88:ef:ca:
         94:79:61:b8:6c:63:92:83:33:a9:05:e7:c5:10:a1:f1:92:82:
         c8:48:97:0f:05:88:45:be:79:ff:7e:9d:14:be:ba:62:98:f3:
         81:a2:d8:51:85:db:38:86:ab:e9:5a:9f:17:2d:c7:68:61:5c:
         ad:84:66:90:01:3c:31:fc:25:37:cd:41:2e:13:b6:ab:ea:5e:
         f1:6c:20:84:e3:c1:88:d9:c8:d4:40:a6:49:53:71:ee:68:ad:
         46:f4:fc:0f:00:47:b9:f6:c5:9d:ee:64:6e:78:d2:c3:ea:b6:
         4c:8b:c8:ee:85:1c:6a:ca:cc:8c:d0:9e:d4:d4:bc:94:67:6a:
         51:5e:ea:34:96:8a:66:07:52:08:b1:48:07:3a:39:12:19:86:
         23:b1:bd:fd:e8:7b:62:98:ac:2e:79:a8:90:c7:8d:31:14:32:
         f2:84:1b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:45 2024 by rpki-client on console-fra.rpki-client.org