Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/TOy61SZWacjA5OlUbd9KJ_oIb2U.roa
File:                     TOy61SZWacjA5OlUbd9KJ_oIb2U.roa (raw, json)
Hash identifier:          P3iMfbSNkuVtkIrxGLiBTaDMfqUqh3KqURObTX1cHHk=
Subject key identifier:   4C:EC:BA:D5:26:56:69:C8:C0:E4:E9:54:6D:DF:4A:27:FA:08:6F:65
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0496
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/TOy61SZWacjA5OlUbd9KJ_oIb2U.roa
Signing time:             Thu 29 Feb 2024 01:28:55 +0000
ROA not before:           Thu 29 Feb 2024 01:28:55 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        219.106.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174 (0x496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:28:55 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=4CECBAD5265669C8C0E4E9546DDF4A27FA086F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:b4:29:84:aa:3a:fc:a2:89:61:a7:64:87:
                    56:30:eb:44:35:63:57:6d:37:f7:72:40:b4:35:ba:
                    a2:34:b5:17:46:a5:a9:82:5a:e9:6f:94:2d:79:07:
                    ac:da:6f:af:67:08:54:0c:7d:48:5f:da:f2:a3:58:
                    6b:c8:c6:7d:99:a8:12:91:30:12:41:0d:af:35:77:
                    bf:1a:d2:9e:27:de:7c:ce:95:ba:bf:db:6e:67:97:
                    46:4a:1f:14:c4:46:1c:88:d5:7a:d3:b3:d6:d8:61:
                    8d:7e:08:27:00:76:35:41:34:a5:12:ff:76:6b:71:
                    61:13:f3:03:b4:61:75:70:c9:4d:d9:a4:3b:d2:de:
                    79:9f:2a:b3:3c:54:69:8c:7e:b8:ee:aa:66:ee:55:
                    ce:5d:a3:17:96:a2:96:c2:b2:e1:7e:7d:18:8e:a5:
                    01:36:4d:dd:41:7a:33:9e:24:6f:28:e7:25:f2:02:
                    78:bf:37:6a:05:1b:b4:d3:97:7a:31:59:f1:40:cd:
                    19:5e:ee:74:2f:f3:7a:49:59:8a:2d:5e:37:1b:44:
                    d1:51:5d:01:09:7a:9c:8a:6f:0d:ee:b7:d4:68:33:
                    31:c3:79:bc:8e:d9:bf:6b:42:00:15:dc:ed:e0:f2:
                    30:8a:3a:61:31:ce:8c:b6:5c:0b:d0:0d:f8:2a:91:
                    fa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EC:BA:D5:26:56:69:C8:C0:E4:E9:54:6D:DF:4A:27:FA:08:6F:65
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/TOy61SZWacjA5OlUbd9KJ_oIb2U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.106.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:f9:3c:45:56:4c:0c:f0:b9:34:80:36:d7:6e:86:de:e9:f6:
         44:86:55:37:72:6d:f4:57:1e:c1:de:90:19:ca:29:99:e5:03:
         ae:5b:3b:2b:8b:9f:f9:d6:9a:a2:16:d5:2c:e5:79:2e:e4:49:
         1c:e6:ad:d0:1e:72:58:da:82:d6:de:6a:d4:05:3b:9a:19:89:
         fe:04:9b:1c:f9:3c:9f:9f:69:de:c6:3c:dd:28:6e:dd:be:8d:
         4a:de:b8:a4:4b:c3:4d:ad:e3:90:a2:f6:e8:9c:aa:10:7f:07:
         01:a2:63:cf:ab:c1:23:96:7d:d4:67:45:9c:a3:b3:96:e8:1f:
         b2:4c:e2:6f:c1:b5:0a:27:44:8a:55:56:bc:b5:10:a0:47:65:
         94:9a:5e:b4:a8:6b:30:1a:ae:41:eb:cf:57:04:ea:0e:3a:6f:
         6e:c0:7a:b4:24:00:9c:f5:f3:86:39:03:4c:02:a9:5e:da:d1:
         83:db:39:72:ab:0d:8a:0a:17:e4:f1:5e:4c:c2:57:ef:35:6c:
         20:91:43:9a:fd:1e:b1:12:3f:3f:8c:d6:0e:fd:71:d4:f8:7d:
         b4:26:84:57:09:e1:67:9d:39:84:07:5a:d9:0b:57:64:60:ff:
         c4:64:d6:6e:aa:ea:37:69:8c:22:c7:9b:3a:98:02:2a:5e:ba:
         c4:43:7f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:15 2024 by rpki-client on console-fra.rpki-client.org