Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/FVF1EwvN6d2quWdYzuZEQ1mXMEY.roa
File:                     FVF1EwvN6d2quWdYzuZEQ1mXMEY.roa (raw, json)
Hash identifier:          PHlXGP767BnYIPmXFya3K2Edng7RufJCFeL3zeC3N58=
Subject key identifier:   15:51:75:13:0B:CD:E9:DD:AA:B9:67:58:CE:E6:44:43:59:97:30:46
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04C3
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FVF1EwvN6d2quWdYzuZEQ1mXMEY.roa
Signing time:             Thu 29 Feb 2024 01:33:10 +0000
ROA not before:           Thu 29 Feb 2024 01:33:10 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        111.67.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1219 (0x4c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:33:10 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=155175130BCDE9DDAAB96758CEE6444359973046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:48:79:da:d1:62:2e:bb:cc:12:7b:0a:e1:
                    62:93:6c:3a:5d:fc:e9:24:d4:97:94:52:70:54:84:
                    af:88:cc:82:81:4c:13:ef:f5:4e:80:bc:6d:7c:e9:
                    c3:f0:4c:44:8d:64:8b:52:c6:fc:b9:42:34:00:ba:
                    c5:78:30:55:4f:c9:10:be:87:95:fd:55:5d:f9:b8:
                    ec:a0:33:f5:a9:1b:84:1b:c9:8c:81:44:72:39:8d:
                    32:cd:c3:ce:de:54:bc:ac:c7:30:d6:35:b7:a5:b4:
                    40:c2:48:c6:0b:1c:7c:cf:9a:6e:62:c4:a4:d0:e3:
                    80:f7:db:d9:2e:62:57:51:4d:51:29:dd:cf:c2:00:
                    61:06:b4:16:f6:6d:d0:f3:d7:cc:78:bd:d5:d3:40:
                    44:8b:4f:b0:07:03:47:f6:f8:c4:49:ec:b8:36:37:
                    89:d1:b2:e2:76:30:a3:b8:60:2c:b9:4c:a7:3f:6d:
                    04:f1:28:55:27:ea:d1:4c:c7:66:21:64:00:a1:c8:
                    eb:8a:97:d0:cc:22:b0:e2:97:cf:6e:df:72:36:30:
                    d3:41:35:f1:45:9e:d6:5d:76:c4:a4:06:55:45:fd:
                    b3:37:d0:74:6c:f3:23:81:7b:87:e6:a4:a0:eb:86:
                    0a:7b:8d:44:c1:8f:04:53:89:ee:3e:06:3e:31:9b:
                    09:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:51:75:13:0B:CD:E9:DD:AA:B9:67:58:CE:E6:44:43:59:97:30:46
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FVF1EwvN6d2quWdYzuZEQ1mXMEY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:80:64:18:d8:1d:14:ff:af:07:56:5d:39:be:f7:d0:07:ec:
         8b:f3:6d:a7:a8:28:89:20:13:56:b4:55:5b:fb:d1:9e:65:ff:
         05:e6:9f:63:16:5e:28:3c:da:a1:52:b6:80:8e:c2:70:f6:bc:
         1e:04:7c:30:78:55:10:40:55:db:98:42:1b:de:16:3c:47:b5:
         2c:f7:f2:a9:62:b6:6b:46:66:76:f1:78:6e:7c:02:96:32:ee:
         d5:65:8a:0d:26:41:0a:20:0c:0a:6c:f4:9d:73:a9:53:e0:2f:
         cf:6d:10:6c:07:e4:6b:8f:f1:80:7e:d2:95:6c:6f:85:b1:96:
         df:cb:fa:d5:b2:66:49:04:8b:b6:fc:d3:0f:1e:a7:f9:7b:37:
         c8:fc:20:f6:ae:63:5a:ec:c6:68:35:d7:6a:e7:73:f4:51:59:
         ea:ef:e7:06:13:38:4f:02:93:1a:fb:bd:04:4d:b2:0d:90:95:
         66:fb:d3:c1:06:68:db:62:59:72:71:b0:06:d9:87:57:c5:37:
         de:5e:2a:21:92:d7:9d:e2:f5:dd:af:92:59:98:09:df:6c:b6:
         bd:84:83:c6:bc:5a:88:f8:75:1b:4c:d2:6f:e0:ba:a0:c4:04:
         72:83:e5:ff:98:bd:51:cb:13:40:95:83:ad:5a:ae:d6:f1:ab:
         fd:98:c0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:05 2024 by rpki-client on console-fra.rpki-client.org