Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/fYSRf84_v-dIWZK7zCLzXUeMrfk.roa
File:                     fYSRf84_v-dIWZK7zCLzXUeMrfk.roa (raw, json)
Hash identifier:          wcoDfEIsqYZRF0qz1HrdQwVWocYg8WmyjlPewehBuJ8=
Subject key identifier:   7D:84:91:7F:CE:3F:BF:E7:48:59:92:BB:CC:22:F3:5D:47:8C:AD:F9
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       050F
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/fYSRf84_v-dIWZK7zCLzXUeMrfk.roa
Signing time:             Thu 29 Feb 2024 01:39:23 +0000
ROA not before:           Thu 29 Feb 2024 01:39:23 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        180.149.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1295 (0x50f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:39:23 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=7D84917FCE3FBFE7485992BBCC22F35D478CADF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:09:ca:71:2e:03:54:b7:56:92:28:2e:31:8e:
                    42:03:b2:4e:8c:7b:d6:af:65:65:3d:04:0f:ef:4d:
                    9c:c5:8d:44:5a:86:a7:5b:17:4e:42:76:de:16:ce:
                    a0:db:89:c4:9f:f9:78:65:ce:d3:52:ff:7c:f2:94:
                    70:6f:50:75:5a:f4:14:8f:d6:57:77:63:5d:46:3b:
                    3b:a0:56:b9:a0:c7:6e:19:f0:3d:5f:4b:3d:f8:55:
                    48:fb:48:eb:d9:68:0a:f3:4a:50:a3:00:d5:0c:02:
                    9c:c1:45:b9:dd:b7:8f:dc:e1:a0:1c:fd:4b:94:c8:
                    e9:01:bc:53:5e:34:fd:f0:3e:7a:b9:6e:0a:b6:20:
                    e9:f9:81:ea:5a:5a:c9:89:b5:9d:9a:92:f3:b9:de:
                    37:c8:c8:d7:8a:51:90:46:98:21:98:97:fc:cc:bb:
                    b8:45:6c:a6:77:c3:0e:af:3f:8f:5c:45:f0:b6:24:
                    5a:e5:c4:89:6e:ff:d1:0f:f7:64:c5:8f:1b:c7:93:
                    26:d3:3d:e5:62:0d:0d:82:00:87:68:42:e3:df:0e:
                    f0:93:64:4f:1b:52:e2:12:14:c4:ec:14:a6:25:62:
                    1b:33:cc:66:03:45:ee:7c:e5:89:a8:cd:ac:05:f9:
                    f9:6c:29:5c:43:d5:cc:e5:21:6a:f3:24:00:1b:4b:
                    df:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:84:91:7F:CE:3F:BF:E7:48:59:92:BB:CC:22:F3:5D:47:8C:AD:F9
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/fYSRf84_v-dIWZK7zCLzXUeMrfk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.149.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:21:7b:f1:c9:4c:c4:89:a7:1b:5c:76:2c:b4:0d:4d:ef:21:
         e6:eb:c1:39:b3:40:85:bf:f0:38:43:4a:08:d1:d4:8c:24:5c:
         99:23:74:e2:ea:ec:a2:12:23:45:32:11:b1:e6:44:b4:63:62:
         19:51:fc:b1:5e:12:73:38:82:97:0a:52:c5:97:46:7d:5c:63:
         d9:0b:43:34:c3:f5:a6:76:38:65:e5:e1:c6:dc:a9:2d:92:ca:
         64:17:ab:99:fa:21:37:68:74:77:74:b9:ae:8e:49:85:a3:46:
         cf:e5:8d:7e:2d:03:26:cb:6f:da:f7:45:e1:0a:75:26:0e:27:
         6a:ed:9f:f1:00:42:ed:e3:40:a0:d7:68:41:0b:0b:eb:27:17:
         20:1e:ae:c2:fe:f6:01:82:7d:e3:1f:dc:21:14:97:79:8f:db:
         ad:29:77:ab:8b:fa:81:11:10:a8:3f:b2:93:0f:0e:87:25:fb:
         4c:35:85:e2:c7:92:11:5c:8a:ea:ca:f1:52:39:64:57:91:66:
         7d:ad:10:0b:68:96:57:3b:8a:d0:ad:be:25:59:11:7d:1c:95:
         8e:62:9d:0b:37:6e:92:0e:0e:1f:fb:1d:58:6f:2f:96:8e:d9:
         04:e1:be:e5:04:c7:fd:16:d0:75:bd:be:1b:2c:23:72:33:42:
         fd:fa:ea:89
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw
MTM5MjNaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDdEODQ5MTdGQ0UzRkJG
RTc0ODU5OTJCQkNDMjJGMzVENDc4Q0FERjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD2CcpxLgNUt1aSKC4xjkIDsk6Me9avZWU9BA/vTZzFjURahqdb
F05Cdt4WzqDbicSf+XhlztNS/3zylHBvUHVa9BSP1ld3Y11GOzugVrmgx24Z8D1f
Sz34VUj7SOvZaArzSlCjANUMApzBRbndt4/c4aAc/UuUyOkBvFNeNP3wPnq5bgq2
IOn5gepaWsmJtZ2akvO53jfIyNeKUZBGmCGYl/zMu7hFbKZ3ww6vP49cRfC2JFrl
xIlu/9EP92TFjxvHkybTPeViDQ2CAIdoQuPfDvCTZE8bUuISFMTsFKYlYhszzGYD
Re585YmozawF+flsKVxD1czlIWrzJAAbS99ZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUfYSRf84/v+dIWZK7zCLzXUeMrfkwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L2ZZU1JmODRfdi1kSVdaSzd6Q0x6WFVlTXJmay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAK0lcwwDQYJKoZIhvcNAQELBQADggEBAFEhe/HJTMSJpxtcdiy0DU3vIebr
wTmzQIW/8DhDSgjR1IwkXJkjdOLq7KISI0UyEbHmRLRjYhlR/LFeEnM4gpcKUsWX
Rn1cY9kLQzTD9aZ2OGXl4cbcqS2SymQXq5n6ITdodHd0ua6OSYWjRs/ljX4tAybL
b9r3ReEKdSYOJ2rtn/EAQu3jQKDXaEELC+snFyAersL+9gGCfeMf3CEUl3mP260p
d6uL+oEREKg/spMPDocl+0w1heLHkhFciurK8VI5ZFeRZn2tEAtollc7itCtviVZ
EX0clY5inQs3bpIODh/7HVhvL5aO2QThvuUEx/0W0HW9vhssI3IzQv366ok=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:47 2024 by rpki-client on console-ams.rpki-client.org