Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/G01qj6ElHPltKfkopE732Q9BDr0.roa
File:                     G01qj6ElHPltKfkopE732Q9BDr0.roa (raw, json)
Hash identifier:          YxFSjSdMaU0XHz77fewCIXsZWqhjfsr0GW1nsdgf520=
Subject key identifier:   1B:4D:6A:8F:A1:25:1C:F9:6D:29:F9:28:A4:4E:F7:D9:0F:41:0E:BD
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04A5
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/G01qj6ElHPltKfkopE732Q9BDr0.roa
Signing time:             Thu 29 Feb 2024 01:29:02 +0000
ROA not before:           Thu 29 Feb 2024 01:29:02 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        42.125.226.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1189 (0x4a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:29:02 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=1B4D6A8FA1251CF96D29F928A44EF7D90F410EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:81:54:8c:14:01:63:a2:1e:21:3e:01:da:
                    15:21:02:d2:06:35:bc:0b:52:f5:72:a0:3f:a9:85:
                    80:8e:67:28:6f:98:09:e0:52:21:0d:90:77:de:61:
                    39:54:ab:c7:8e:63:54:eb:62:5f:84:4f:dd:8a:08:
                    a9:51:cd:79:e5:62:f9:c7:98:09:76:8c:ee:3b:13:
                    16:90:50:50:f9:35:8a:71:41:7f:d4:d5:1c:74:68:
                    f8:fe:4d:d6:0e:a9:ad:2b:64:0c:80:da:31:d8:1f:
                    e9:3b:e4:dd:cd:97:20:38:a2:b1:23:41:95:c6:4f:
                    5f:1b:73:bb:04:30:86:85:04:9c:97:57:49:3b:a5:
                    04:8d:1e:15:ab:b9:48:84:23:03:b9:ff:7e:65:30:
                    e7:fa:a5:55:ef:5c:6e:04:40:38:87:e2:35:70:e9:
                    81:af:f3:2a:b5:4a:8e:13:90:70:73:6b:87:fb:ff:
                    dd:67:5e:bd:e0:6e:79:0f:3c:15:8e:f9:b2:81:51:
                    83:be:27:24:bb:7e:a6:a6:b0:a9:57:bd:a2:fc:f8:
                    50:f8:d0:ac:d7:0b:f4:92:bd:32:51:81:fe:5d:e3:
                    57:4d:73:f2:7e:72:de:c9:cd:03:9d:47:78:c0:91:
                    41:20:96:dc:a4:3b:7f:3c:f8:96:e1:e0:03:29:e0:
                    72:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4D:6A:8F:A1:25:1C:F9:6D:29:F9:28:A4:4E:F7:D9:0F:41:0E:BD
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/G01qj6ElHPltKfkopE732Q9BDr0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:7c:ed:3f:bd:c1:37:68:89:c9:79:dc:cb:0e:d5:e7:8f:56:
         02:33:59:02:39:70:45:19:46:eb:89:c8:f0:ee:13:12:3a:43:
         21:15:ff:2e:e2:83:f9:2b:0f:a5:bf:6d:5c:4e:78:7c:e4:ae:
         8e:95:58:a8:cb:7f:60:01:93:76:44:62:77:35:e5:7c:81:61:
         bb:e7:cc:95:7c:65:cc:9d:b5:03:e6:7a:21:0c:5b:e1:bc:b9:
         71:94:b8:27:3e:26:bf:2c:9c:e2:4c:a1:7a:9b:59:f8:a7:0f:
         c5:a1:32:b0:cf:0d:48:f6:c6:32:df:24:99:c9:cc:e8:32:00:
         96:bb:c5:fe:a4:86:9c:93:b4:bc:72:d8:56:66:ff:69:fd:0f:
         3a:cd:95:46:81:5d:5c:97:ee:a3:d7:96:9e:1b:ba:d0:37:49:
         59:81:05:10:1e:05:ee:f4:67:d1:a1:d3:ba:69:da:04:04:a9:
         a3:40:1a:7d:a5:aa:a6:f6:13:d9:93:ab:9c:54:37:64:01:73:
         ff:32:b2:d7:ba:7f:0c:79:64:d5:b5:08:06:53:31:df:67:4c:
         9d:cb:f4:eb:fe:94:67:fd:9c:09:74:ec:69:41:11:a5:23:4f:
         48:34:88:81:3d:a3:9c:43:40:66:b9:ab:83:87:26:6e:4f:dc:
         b2:32:2f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org