Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/RH7mcyR_rcarqemjvfzMCTllzuo.roa
File:                     RH7mcyR_rcarqemjvfzMCTllzuo.roa (raw, json)
Hash identifier:          ZBt1JyX5KVxHQUaPOEcWUZ48OLS8LeTER89pTp9lm5g=
Subject key identifier:   44:7E:E6:73:24:7F:AD:C6:AB:A9:E9:A3:BD:FC:CC:09:39:65:CE:EA
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04E0
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/RH7mcyR_rcarqemjvfzMCTllzuo.roa
Signing time:             Thu 29 Feb 2024 01:35:57 +0000
ROA not before:           Thu 29 Feb 2024 01:35:57 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        220.216.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1248 (0x4e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:35:57 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=447EE673247FADC6ABA9E9A3BDFCCC093965CEEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:97:87:56:2f:62:48:4c:22:1f:13:a2:93:32:
                    60:cb:66:0c:45:3e:1b:e1:e1:7d:8d:cb:41:7d:d3:
                    68:97:be:89:55:8f:d6:17:b2:81:9e:b0:93:9a:0a:
                    89:e0:0b:bf:be:75:05:e6:d3:af:e6:d5:01:d9:b3:
                    64:fc:7b:fb:46:86:60:c7:ab:de:ea:a3:dc:4c:a1:
                    31:ca:c5:57:b4:11:6b:f1:4c:d8:ed:39:38:fb:7f:
                    0c:8f:9c:cb:52:0d:e6:99:5a:99:be:22:a4:d0:7a:
                    6a:c4:03:42:74:43:9d:d5:89:24:7c:4c:a7:a1:09:
                    48:37:b0:87:ec:ee:39:9e:88:b9:80:c1:a0:01:f7:
                    7d:a5:d9:d4:28:71:1c:d3:77:d4:46:8f:be:10:a7:
                    a6:bf:94:42:e2:c1:69:7a:b3:8b:4f:fb:32:f5:1d:
                    94:57:40:5f:d1:14:1c:4a:5f:a7:50:c5:c1:b9:0e:
                    36:23:e3:c7:f3:aa:02:46:96:8d:c0:d9:aa:30:eb:
                    78:d7:ff:33:0f:91:4b:14:3e:ab:0a:70:28:ab:b3:
                    87:ff:d3:db:fc:df:e5:7a:1a:ac:3b:7e:05:70:9b:
                    2a:0c:ca:e4:71:ab:e9:45:40:b1:4e:95:e2:3b:77:
                    33:bc:b6:d4:b2:ad:ec:6a:45:c5:0f:43:70:e8:b3:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7E:E6:73:24:7F:AD:C6:AB:A9:E9:A3:BD:FC:CC:09:39:65:CE:EA
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/RH7mcyR_rcarqemjvfzMCTllzuo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         21:33:68:d5:c9:be:f0:58:72:c7:de:02:c9:bf:ed:31:8f:e6:
         00:a6:20:57:61:71:9a:87:f0:17:68:f9:64:5a:08:78:93:b8:
         17:17:db:96:6b:3a:d7:25:3c:1e:02:f3:54:73:a2:08:7d:f9:
         c4:72:e8:3d:39:7c:41:1b:a9:04:79:2c:b3:59:d0:6b:0d:a1:
         5d:40:c7:f0:4a:90:ec:60:fd:ab:ca:58:d2:e1:2b:fc:3c:b9:
         40:16:cb:69:8b:bc:8e:f9:ee:58:58:70:e6:99:66:a7:53:09:
         fd:25:32:63:c6:f2:bb:5d:25:50:10:94:7a:13:9e:52:6f:57:
         ce:83:76:bf:76:d7:31:e5:8f:1d:6b:64:2b:ce:2c:c1:28:b8:
         52:ba:c5:fb:60:1b:43:69:75:6b:d2:c9:4f:50:5d:7a:06:83:
         f8:17:55:b8:46:b9:66:52:29:ed:03:9e:00:e4:7b:f5:db:0f:
         be:e7:f6:44:c9:27:e1:98:39:57:1d:56:0d:59:9d:bc:17:88:
         4d:3c:15:bb:06:24:13:71:58:16:cc:26:d1:33:7d:2b:17:e8:
         a5:9b:93:48:1f:81:96:ae:f6:90:25:b2:7f:33:59:78:50:3e:
         54:23:e6:65:a2:07:1b:10:35:1e:d9:62:17:82:d1:4a:cf:9d:
         5d:c1:36:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:45 2024 by rpki-client on console-fra.rpki-client.org