Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/Z-L4fjek9qBHp61e0axZbk8iZac.roa
File:                     Z-L4fjek9qBHp61e0axZbk8iZac.roa (raw, json)
Hash identifier:          fc1aSewSEuSFmjDu6XmxRyFk3p1/+L4WNH9sLVieRzk=
Subject key identifier:   67:E2:F8:7E:37:A4:F6:A0:47:A7:AD:5E:D1:AC:59:6E:4F:22:65:A7
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04F7
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Z-L4fjek9qBHp61e0axZbk8iZac.roa
Signing time:             Thu 29 Feb 2024 01:36:07 +0000
ROA not before:           Thu 29 Feb 2024 01:36:07 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        59.86.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1271 (0x4f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:36:07 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=67E2F87E37A4F6A047A7AD5ED1AC596E4F2265A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f5:16:93:34:e0:0e:01:81:94:ae:4e:41:8f:
                    a6:78:af:d9:69:00:b4:d3:e6:fb:c5:2e:73:4a:dc:
                    85:4a:55:f2:c6:1c:6d:94:bf:a4:ed:45:25:92:d3:
                    8f:77:49:47:93:7e:97:2c:02:cb:19:a6:25:a1:87:
                    de:f2:c6:7f:a3:dd:68:95:b7:0e:10:7e:9c:b9:63:
                    79:0c:f8:a8:04:b8:49:b3:5a:e9:b3:0c:ac:f6:2c:
                    ad:1f:f2:26:31:62:39:4d:19:22:6e:2f:05:9d:9f:
                    d6:af:d8:b6:f6:93:7e:e7:e5:81:93:49:2d:14:b6:
                    bb:00:6c:e2:59:6c:2f:de:cb:2a:6b:76:01:19:71:
                    29:87:db:43:0c:9f:b4:30:26:c2:83:0e:58:d7:53:
                    70:05:11:91:cb:24:12:70:b1:a9:f2:af:95:fd:79:
                    07:76:69:b8:aa:4e:9f:11:94:c5:b9:3d:74:b7:c6:
                    14:f2:c3:2c:29:bf:fd:e2:ac:cf:57:06:13:1a:9a:
                    f4:5f:6a:2f:c2:fb:53:7e:e1:3d:c8:31:1c:02:74:
                    d1:29:77:10:71:41:c9:68:41:06:bc:3e:5c:26:0c:
                    74:8e:15:65:c2:cd:60:31:3d:f4:dc:a9:45:79:e4:
                    33:4f:8f:4a:e7:2f:9c:42:bd:9a:81:ca:3c:fc:86:
                    f8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E2:F8:7E:37:A4:F6:A0:47:A7:AD:5E:D1:AC:59:6E:4F:22:65:A7
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Z-L4fjek9qBHp61e0axZbk8iZac.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.86.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         58:bf:ad:43:7a:48:6c:b5:af:4e:b3:1e:12:d6:e8:f5:26:83:
         c9:84:12:ba:b1:70:79:e5:68:af:06:f9:42:ea:14:7c:bf:38:
         73:50:f9:2e:43:f5:9e:b6:73:59:55:55:11:30:a1:75:93:89:
         b5:d3:6c:0a:d1:d7:ff:ce:b6:3a:4e:0a:68:95:56:2a:68:ea:
         77:81:c6:18:21:ec:d2:eb:a8:61:12:07:f6:db:c4:0a:65:c0:
         cd:e5:09:e7:d0:ba:79:09:39:9d:fb:4e:55:63:43:ad:ba:90:
         55:c1:b2:90:80:1d:ed:1e:d6:33:c1:69:92:29:5f:d2:fc:0a:
         67:11:b6:91:45:9d:05:34:47:8f:ed:9d:69:28:5d:10:0e:5b:
         d9:e1:ca:24:79:55:20:2e:68:b9:04:c2:5b:a3:b0:ea:e1:f0:
         5c:6e:9e:dc:86:fe:05:c8:b3:17:f4:69:16:42:2b:51:e0:67:
         45:dc:9b:9f:a1:c9:51:22:a4:8b:43:16:34:7f:0b:19:08:a0:
         36:a7:3a:6b:b8:3b:e6:91:a2:f7:44:33:e9:4d:95:4d:a9:c5:
         4b:9a:c8:db:99:4a:fc:9c:99:63:73:c4:86:5c:71:c7:d5:38:
         2b:90:de:84:e6:a2:ba:ee:7c:ea:ac:7f:ef:a0:c5:de:ed:a1:
         4a:a8:2a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:48 2024 by rpki-client on console-ams.rpki-client.org