Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/Vnks0X54fgwSdih_Eb9ybgQ1mtM.roa
File:                     Vnks0X54fgwSdih_Eb9ybgQ1mtM.roa (raw, json)
Hash identifier:          WeyAjoeFKB7Kh3wyfZ23/pbrroBhV1oO1LvYeZNKln4=
Subject key identifier:   56:79:2C:D1:7E:78:7E:0C:12:76:28:7F:11:BF:72:6E:04:35:9A:D3
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04D8
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Vnks0X54fgwSdih_Eb9ybgQ1mtM.roa
Signing time:             Thu 29 Feb 2024 01:33:19 +0000
ROA not before:           Thu 29 Feb 2024 01:33:19 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        111.67.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1240 (0x4d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:33:19 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=56792CD17E787E0C1276287F11BF726E04359AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:11:d7:b7:7a:22:91:c2:5f:67:57:eb:4f:
                    9e:6b:c4:64:54:bb:3c:e5:91:5e:c5:90:d4:a5:41:
                    e7:ea:94:51:ed:06:02:47:20:07:87:4e:49:46:1e:
                    5c:07:f7:21:9a:d6:8d:55:d3:a8:90:ed:94:9e:a5:
                    87:92:99:a7:01:ba:cc:29:ab:00:f7:ff:f5:e3:a1:
                    3b:96:48:b5:54:88:a1:f0:d0:6e:1a:ea:fd:a6:4d:
                    6a:b5:8d:25:a7:d6:8d:c1:46:af:dd:1d:23:14:f2:
                    18:28:c6:76:2a:71:58:63:ea:ea:8f:d2:b6:4e:02:
                    58:48:ed:cf:1c:f7:b4:0b:c4:ca:e3:91:3b:89:db:
                    a3:82:c3:b5:22:4e:4a:61:df:76:6e:98:e7:ed:b0:
                    6b:38:92:be:0b:79:33:eb:13:bc:a8:3f:74:a7:b8:
                    be:4a:19:95:14:7e:b2:40:d7:c2:c8:a6:61:1d:f1:
                    7a:79:3d:8c:8a:ad:c6:30:80:34:0c:fd:e1:ec:39:
                    90:63:0d:73:0b:91:1c:a3:c3:59:37:a5:6f:72:5f:
                    dd:bf:bd:d3:53:f5:19:5c:4c:96:17:89:8a:42:2e:
                    6f:12:3a:6e:fb:1f:29:e2:bd:12:7a:7d:85:64:2d:
                    d6:2e:f9:96:d9:04:e3:af:7e:3e:06:06:49:74:5a:
                    79:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:79:2C:D1:7E:78:7E:0C:12:76:28:7F:11:BF:72:6E:04:35:9A:D3
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Vnks0X54fgwSdih_Eb9ybgQ1mtM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:41:b7:7b:70:8e:0c:84:bc:4d:f3:d4:fa:b8:97:23:2b:d4:
         1b:a3:d5:30:fd:bb:c5:b6:d9:fe:ea:b8:5d:f8:86:36:3b:39:
         0a:12:87:45:93:4e:92:7a:04:06:1f:5b:ea:0c:49:9e:c4:9a:
         6a:74:b4:8b:8d:ed:0b:55:a6:ea:aa:0b:6f:25:7f:46:cb:09:
         10:5d:fd:7f:ff:eb:45:e9:a0:ca:93:a3:5d:c5:64:63:12:fe:
         c1:5e:7a:af:ca:bd:ab:3b:9b:9f:0d:07:62:a0:a4:9c:ff:2d:
         9c:f3:28:25:5c:19:90:1e:48:3f:23:b4:05:34:a8:10:5e:6a:
         86:76:06:50:31:0a:51:c5:e1:31:3d:1e:1e:76:28:fe:cf:1e:
         78:3e:8b:37:c6:3d:84:b6:78:28:13:63:2e:60:b8:08:c0:04:
         46:7a:ae:69:dd:3e:e3:10:f2:35:28:f3:5a:c7:06:e9:5d:27:
         ec:b0:34:38:8f:a5:82:d6:99:25:33:98:ae:ab:5e:51:93:5b:
         cc:e7:f4:01:05:ba:3d:66:98:e7:7b:9f:77:5a:fc:c7:0c:f9:
         a1:79:6f:2a:fd:10:6f:25:89:1c:34:7d:28:7d:ba:ce:b4:d8:
         4e:06:af:42:e1:43:b5:6e:7c:b6:33:3f:d3:f5:8b:34:ac:8f:
         73:bc:b6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org