Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/d54p5_7tKvXn4byp0zYnk2NB5r0.roa
File:                     d54p5_7tKvXn4byp0zYnk2NB5r0.roa (raw, json)
Hash identifier:          uy4ZYoEk64UED6TnNVAF5DhWd4QHwItggHvIDloJF3U=
Subject key identifier:   77:9E:29:E7:FE:ED:2A:F5:E7:E1:BC:A9:D3:36:27:93:63:41:E6:BD
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04FA
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/d54p5_7tKvXn4byp0zYnk2NB5r0.roa
Signing time:             Thu 29 Feb 2024 01:36:09 +0000
ROA not before:           Thu 29 Feb 2024 01:36:09 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        220.216.68.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1274 (0x4fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:36:09 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=779E29E7FEED2AF5E7E1BCA9D33627936341E6BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:61:f4:c0:7d:23:6f:dc:ce:12:91:f3:5d:20:
                    3f:af:d7:21:1a:49:f6:c0:be:ea:7e:30:b8:19:b2:
                    76:09:f3:5e:3c:d6:eb:76:eb:31:ba:ba:c5:74:9f:
                    82:04:eb:0e:69:32:b7:19:09:db:24:27:bc:b2:f9:
                    5a:db:02:ce:13:b5:22:c7:17:e0:fe:0c:45:63:9f:
                    48:08:a5:8a:19:5c:02:b3:21:a5:e3:e9:9b:34:84:
                    68:16:48:45:aa:97:4a:a2:bf:4c:80:ff:6c:2e:79:
                    55:0d:30:ef:0b:21:9e:42:a0:6a:78:0f:7d:68:8b:
                    61:c1:83:d3:d3:dd:5e:f6:b1:2d:db:25:3d:49:f7:
                    5f:80:82:ce:b6:eb:1d:43:01:6e:0e:e9:4f:91:44:
                    f7:15:f0:da:02:19:c1:72:5f:0d:74:a7:de:38:ca:
                    be:71:79:30:f4:67:c1:39:1a:55:96:21:24:d3:05:
                    91:49:c2:ae:3d:84:37:82:ee:75:67:f3:f0:1e:17:
                    1e:cc:67:3c:ce:e4:34:a3:fc:44:4c:8f:aa:54:9d:
                    43:5a:06:55:ed:53:f1:e6:f2:1a:b3:88:7f:92:51:
                    f2:dc:f1:b9:00:c9:87:4c:ee:e8:0c:28:e8:70:70:
                    70:23:93:b0:6f:a9:f7:de:3c:88:b8:89:69:6a:9b:
                    42:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9E:29:E7:FE:ED:2A:F5:E7:E1:BC:A9:D3:36:27:93:63:41:E6:BD
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/d54p5_7tKvXn4byp0zYnk2NB5r0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:17:49:fd:6b:31:e0:46:de:2e:f3:50:19:00:d2:b6:da:96:
         13:f4:45:ab:95:bb:cd:22:8d:c7:f6:25:ab:b7:ba:5d:0f:00:
         b1:47:c7:97:6c:fe:10:11:87:f8:3b:83:04:cd:05:55:fa:6c:
         66:d8:a3:79:06:4c:69:21:c0:d2:22:ae:ef:5e:e6:b8:19:85:
         32:d0:77:dc:b6:7f:99:fd:c0:68:9d:97:4d:a1:bd:92:d1:75:
         56:74:8a:41:60:2a:e5:ca:70:27:d9:6c:3a:e9:03:68:92:c1:
         58:33:3b:1d:99:56:4e:43:e3:5e:c2:97:f8:29:36:16:58:51:
         56:49:af:85:6c:73:d6:56:6b:dd:50:61:83:14:a3:4a:df:b1:
         f8:b2:08:af:42:26:b4:85:9b:d1:32:c8:57:33:a6:4b:5d:f0:
         20:44:59:b6:fe:c5:54:69:94:ef:b9:80:cc:ef:c6:be:18:c8:
         d6:a4:e6:4b:d0:78:bd:84:8b:a2:00:8f:f7:c5:e8:97:d9:e8:
         4a:72:47:cc:da:af:1a:19:60:8d:4e:37:64:0f:8e:d2:04:0c:
         21:53:fb:0f:a2:c5:f2:b2:bb:e6:78:7f:92:ce:bf:6d:d9:81:
         e8:e5:37:71:61:dd:a4:1d:98:a7:b8:80:22:e3:5c:7a:d2:68:
         af:53:fb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:05 2024 by rpki-client on console-fra.rpki-client.org