Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/T-phI26mPTXGJuT4tO8iDapqbOU.roa
File:                     T-phI26mPTXGJuT4tO8iDapqbOU.roa (raw, json)
Hash identifier:          +6isQDlMN3L7+IpUIaeeRYklqMybmJFlnMDvkTYm6PI=
Subject key identifier:   4F:EA:61:23:6E:A6:3D:35:C6:26:E4:F8:B4:EF:22:0D:AA:6A:6C:E5
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04BF
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/T-phI26mPTXGJuT4tO8iDapqbOU.roa
Signing time:             Thu 29 Feb 2024 01:33:08 +0000
ROA not before:           Thu 29 Feb 2024 01:33:08 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        42.125.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1215 (0x4bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:33:08 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=4FEA61236EA63D35C626E4F8B4EF220DAA6A6CE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:91:64:d4:36:da:99:16:45:9b:86:7e:d5:
                    39:e7:24:9c:0d:72:27:58:fa:a2:6f:bb:4c:0b:c2:
                    bc:6a:43:e5:80:30:10:69:8a:80:d8:9f:20:68:ac:
                    9e:a8:8b:87:aa:2b:62:f8:54:f3:85:7e:22:49:01:
                    d6:81:b3:5e:17:a5:ee:e7:9b:d1:35:14:7d:8a:d0:
                    f5:7c:25:f5:32:da:60:ef:ca:3f:21:4f:12:1b:c6:
                    c9:36:24:15:0b:85:fb:05:32:1c:1f:4b:95:90:e5:
                    13:b2:b1:dc:ba:9c:24:65:0f:06:d2:ec:35:8e:8c:
                    da:aa:ba:11:46:66:4d:6d:77:6b:95:3b:63:e2:4a:
                    27:aa:74:bb:42:53:9c:99:1c:a1:27:95:73:0a:5a:
                    da:13:e4:32:61:7c:df:5d:f4:d3:7d:4a:17:21:4a:
                    d0:31:a3:70:4f:04:06:bb:8b:4d:6f:40:a6:65:bd:
                    20:d2:01:1f:43:d7:84:12:fd:ad:71:6f:1f:63:93:
                    14:64:f7:45:f6:77:66:e3:2d:4c:90:19:31:d5:3a:
                    ca:88:ec:93:62:86:c3:bf:ac:c2:9b:6a:86:72:63:
                    a4:97:c4:e1:84:79:4d:4e:02:73:1f:f9:bb:b3:2f:
                    e0:5b:94:07:c1:1c:01:2f:77:8a:1b:4c:37:9c:5f:
                    61:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EA:61:23:6E:A6:3D:35:C6:26:E4:F8:B4:EF:22:0D:AA:6A:6C:E5
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/T-phI26mPTXGJuT4tO8iDapqbOU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:3a:d9:29:a4:c8:a0:ff:69:2e:7e:3d:cd:56:17:93:db:86:
         b3:fc:66:4e:b3:ed:8d:ff:6d:9f:10:b8:5c:cd:10:42:d7:a9:
         fd:7d:2c:9b:cb:70:7f:85:ef:e9:f2:f2:e6:d4:76:b3:65:15:
         50:53:ad:e8:3f:31:20:57:74:a7:c9:89:b2:0b:96:d1:30:f0:
         0d:46:df:a8:79:36:4e:94:59:37:8b:1a:14:1d:14:c9:c8:04:
         3e:c4:9b:d2:fd:96:d8:07:05:02:d4:95:e0:3b:c9:8c:1d:8d:
         6a:34:00:c5:b2:f0:91:d0:a0:f7:7b:a0:67:6b:a5:82:4b:95:
         d2:bd:d0:86:36:78:a6:e4:a8:fc:f1:03:62:2c:55:43:fe:17:
         d2:95:c5:ad:c9:18:f2:0f:86:5e:9e:61:02:a9:60:bf:78:ec:
         f2:b7:98:30:d5:48:cb:25:46:15:aa:5b:c4:e2:5b:52:25:74:
         c5:3c:82:0e:95:dd:00:a6:82:b0:8e:9f:96:03:74:ca:a6:de:
         e1:f7:2a:21:11:bc:15:ed:49:82:ac:bf:5a:e2:ae:4d:b9:67:
         48:52:74:ba:7a:55:7f:06:0a:e0:b1:5b:04:28:f4:c2:31:41:
         7a:46:8e:aa:04:89:4c:12:fe:bc:73:9c:a9:3a:58:65:a7:f1:
         eb:e0:c4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:45 2024 by rpki-client on console-ams.rpki-client.org