Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/dRHwONdA0kpOMxz4HtibImleoQU.roa
File:                     dRHwONdA0kpOMxz4HtibImleoQU.roa (raw, json)
Hash identifier:          3Snpm1crruW4AheSS5lPNhrWl2PMIswMODbv05YSSSg=
Subject key identifier:   75:11:F0:38:D7:40:D2:4A:4E:33:1C:F8:1E:D8:9B:22:69:5E:A1:05
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04EA
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/dRHwONdA0kpOMxz4HtibImleoQU.roa
Signing time:             Thu 29 Feb 2024 01:36:02 +0000
ROA not before:           Thu 29 Feb 2024 01:36:02 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        59.85.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1258 (0x4ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:36:02 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=7511F038D740D24A4E331CF81ED89B22695EA105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:46:01:41:e3:76:28:bc:ff:e4:5d:f0:6e:
                    ee:7a:b9:cb:aa:ca:3e:ee:c1:7b:e2:83:65:12:6b:
                    d1:63:dd:34:2a:6a:89:f6:40:0e:b0:d8:99:02:4f:
                    db:e9:9c:f8:0b:cc:09:c8:6d:8a:b3:57:a1:48:66:
                    8c:b3:76:e1:88:38:c2:95:f7:8d:21:4e:09:8a:fd:
                    03:2b:cb:53:8c:5a:86:b7:1f:f1:ba:18:e1:5c:7f:
                    22:6e:fe:71:68:d4:9e:35:33:7d:2b:4b:48:da:4e:
                    ef:3d:1f:41:a2:f5:cb:e4:49:aa:aa:32:52:fa:dd:
                    5c:15:52:76:38:86:f4:0b:7c:21:3a:fe:3e:97:e1:
                    a2:d8:17:1c:c1:8e:bd:11:46:65:4f:f3:e8:45:f2:
                    5e:58:b8:6a:20:4f:fb:a4:a0:02:f9:2e:0f:d5:20:
                    88:ea:4d:43:97:f6:bc:b6:cc:88:b7:41:cb:74:37:
                    15:fe:e5:a6:95:94:7c:0e:6e:cc:c5:3c:77:cc:80:
                    e3:74:78:73:5e:0e:f3:b4:37:cc:8d:21:1d:b4:19:
                    4d:38:d3:56:09:74:db:e5:0b:32:ab:b8:8f:cb:fc:
                    61:c8:28:cf:67:76:db:89:4f:a4:e5:a3:64:0b:d2:
                    6d:29:d9:51:37:a2:f1:08:35:2b:41:c2:bb:b2:5f:
                    d5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:11:F0:38:D7:40:D2:4A:4E:33:1C:F8:1E:D8:9B:22:69:5E:A1:05
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/dRHwONdA0kpOMxz4HtibImleoQU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.85.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:a5:9e:62:cd:fa:66:b9:07:e1:c0:8f:c3:c6:50:1e:89:cd:
         34:de:a2:0e:c6:47:30:25:bd:50:ba:19:47:c9:80:e8:55:aa:
         e8:38:b1:53:1b:5e:0a:7e:ff:0e:ff:a9:eb:ed:3b:00:b5:79:
         9f:24:43:b9:e6:3e:49:ce:26:ec:df:0d:29:b6:8c:34:0d:0c:
         3c:1c:3a:56:8a:15:ea:1d:2b:eb:76:c9:dc:3d:86:fd:89:28:
         7a:e9:8e:58:d8:79:b9:66:78:dc:ee:e0:37:38:54:34:3a:51:
         3b:0f:32:90:1d:32:27:49:ae:d5:00:ee:f7:bf:62:ea:29:c7:
         5e:09:7d:16:cd:d4:5c:42:98:df:ee:53:ae:d8:04:41:79:dc:
         dd:dc:20:f1:03:2d:17:6e:b3:f7:83:9f:76:a1:af:df:3f:e2:
         d8:67:bd:bb:bb:65:b1:81:0f:16:42:8a:85:70:9d:4f:5c:b2:
         b0:09:05:c1:32:7a:24:95:f1:a4:57:40:e4:42:1f:03:bb:49:
         4e:dd:df:3f:8c:a4:c1:e8:24:03:a6:78:21:38:28:af:99:bc:
         f0:d5:a4:a4:e5:f3:de:e0:70:b7:46:cc:9f:2d:2b:ec:6e:a7:
         e9:a2:74:e9:97:25:c2:d9:5c:b9:6d:bc:9e:72:4d:20:7d:b7:
         bb:0c:bc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:41:59 2024 by rpki-client on console-ams.rpki-client.org