Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/eE78f9uv0e03CTLTP9LkO7UNbOU.roa
File:                     eE78f9uv0e03CTLTP9LkO7UNbOU.roa (raw, json)
Hash identifier:          t6hFe8urYu16GNWnK8g1vMeiIJx2ITIyDj+hiSerAyI=
Subject key identifier:   78:4E:FC:7F:DB:AF:D1:ED:37:09:32:D3:3F:D2:E4:3B:B5:0D:6C:E5
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04F4
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/eE78f9uv0e03CTLTP9LkO7UNbOU.roa
Signing time:             Thu 29 Feb 2024 01:36:06 +0000
ROA not before:           Thu 29 Feb 2024 01:36:06 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        218.219.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1268 (0x4f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:36:06 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=784EFC7FDBAFD1ED370932D33FD2E43BB50D6CE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:31:57:b4:4e:5c:c2:55:10:70:dd:5e:7e:89:
                    8b:90:10:41:33:df:c8:80:f4:ca:5c:ac:c1:77:a0:
                    31:b7:be:57:e7:c9:2f:c7:be:f7:a3:8f:10:de:3b:
                    52:aa:4b:12:93:39:bb:6c:7c:4e:e6:1a:b2:2b:bf:
                    e0:18:c5:49:78:42:a8:fa:ab:a0:a9:84:37:c8:91:
                    bf:a8:7b:74:f5:f5:02:2c:b9:e8:30:f6:76:82:03:
                    ec:51:5c:2a:89:80:96:91:0b:0b:55:5b:42:00:ef:
                    25:ad:7a:b3:83:7a:5c:36:52:1d:39:5d:51:cb:00:
                    e5:83:85:8f:91:be:80:eb:45:fb:ed:16:8e:eb:9f:
                    2c:f7:86:38:0c:c5:18:a3:48:e7:b9:f7:81:cd:64:
                    9c:49:e6:54:cd:0d:05:26:7e:eb:0c:45:ef:7b:88:
                    40:2e:0b:3a:f4:b9:54:34:de:e7:9f:8d:cc:d0:46:
                    17:16:4b:3d:97:67:7f:37:3a:87:2f:8f:8a:c9:cc:
                    1e:04:da:e2:44:ab:2d:94:68:c4:7c:ad:5e:69:b9:
                    00:0e:6e:07:90:75:c7:97:be:a2:a3:c4:b3:c7:2f:
                    a5:fc:8f:36:38:51:6d:ca:f1:92:db:bc:f3:dd:17:
                    d1:d8:61:d5:11:f1:07:ae:9d:a6:10:78:4f:f1:b2:
                    a9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4E:FC:7F:DB:AF:D1:ED:37:09:32:D3:3F:D2:E4:3B:B5:0D:6C:E5
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/eE78f9uv0e03CTLTP9LkO7UNbOU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:2a:39:ca:f8:39:79:a0:d4:58:54:8c:15:0c:8d:63:a1:cd:
         04:da:d4:6a:9c:93:3a:6d:fb:71:e9:e2:96:56:00:88:92:3d:
         df:67:91:c0:a4:eb:17:20:bb:40:f9:9a:de:e6:92:d4:d8:6e:
         2c:69:bb:c9:f6:b2:e1:13:7d:bc:54:f0:21:26:f3:8c:e8:43:
         f6:3e:f3:82:4e:7a:72:13:e5:27:eb:60:fc:ae:00:59:05:13:
         93:6a:fc:2d:e9:c0:e3:6e:6e:2c:6c:82:17:c0:b2:6f:e4:e7:
         e9:c3:cf:fe:92:10:b6:7c:6b:f6:f5:38:31:4d:13:50:0b:e8:
         91:bd:ab:9f:c5:8b:fa:a8:47:f7:89:c2:3e:05:e4:21:31:58:
         65:78:bf:ae:4b:87:21:35:ce:35:d5:6d:e3:28:46:40:11:24:
         db:73:3b:a4:1d:eb:be:4c:04:32:b9:cf:93:07:a6:d5:48:34:
         f2:7a:27:e0:b2:17:02:57:92:86:b2:cc:88:24:72:e0:43:14:
         a7:ee:d1:65:4f:a6:2b:e3:cf:d8:a4:c6:d7:e6:79:bd:f6:e8:
         32:23:81:ad:be:c8:4c:02:33:ec:7c:ae:fb:5b:9f:06:fe:cc:
         cf:bc:5c:ee:a4:db:25:da:2c:51:a8:58:12:79:ae:58:f1:21:
         96:5e:f7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:51 2024 by rpki-client on console-fra.rpki-client.org