Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/g84Gq1I363xy2fVvRI-ZbFUO8Xo.roa
File:                     g84Gq1I363xy2fVvRI-ZbFUO8Xo.roa (raw, json)
Hash identifier:          8FWCYiditOQqmhadeoJpWI7kwDhKgx41EzVr1UEjS4Y=
Subject key identifier:   83:CE:06:AB:52:37:EB:7C:72:D9:F5:6F:44:8F:99:6C:55:0E:F1:7A
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04B0
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/g84Gq1I363xy2fVvRI-ZbFUO8Xo.roa
Signing time:             Thu 29 Feb 2024 01:29:06 +0000
ROA not before:           Thu 29 Feb 2024 01:29:06 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        219.96.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1200 (0x4b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:29:06 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=83CE06AB5237EB7C72D9F56F448F996C550EF17A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:8b:0e:e1:3c:2b:64:1b:70:4a:d5:01:87:
                    0c:25:a4:f1:ef:a5:0f:f5:d9:95:c6:ed:da:cd:ee:
                    4d:9a:cc:97:5d:6e:d1:07:6d:ed:f0:b9:3f:ef:11:
                    89:90:42:2b:bd:5c:f0:d4:e1:35:46:ef:fd:a9:e7:
                    16:9c:eb:95:8a:fb:a4:be:f0:76:59:87:12:87:f5:
                    ea:7b:87:32:25:6d:88:67:17:c9:2b:05:0f:c8:17:
                    6e:67:61:c4:85:71:4a:75:25:53:f8:7c:de:d6:e7:
                    c5:9c:a3:67:86:18:79:9b:b0:31:fd:db:ed:81:d5:
                    1d:04:f2:a0:b6:79:0c:fc:49:b3:79:c1:c5:50:f1:
                    8f:7a:49:0b:2f:91:9c:d0:1e:30:62:61:88:61:c7:
                    6d:bf:35:00:b6:72:e9:be:96:c7:e1:3b:d2:3f:af:
                    a2:4c:83:34:84:dd:29:24:fb:24:e7:4e:c1:e5:97:
                    76:d1:cf:c0:16:23:3f:5c:57:2d:b1:23:90:53:b3:
                    18:37:e5:14:84:f8:dd:57:4c:bc:f2:c6:ea:4a:f4:
                    3b:2d:7a:2d:aa:1d:5a:a1:f4:47:bb:39:80:c9:eb:
                    d7:58:74:4e:4b:bf:fe:73:72:d3:2a:12:78:16:b0:
                    1d:27:c7:f4:fc:60:70:6f:dd:4f:d9:78:f8:d6:bd:
                    12:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CE:06:AB:52:37:EB:7C:72:D9:F5:6F:44:8F:99:6C:55:0E:F1:7A
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/g84Gq1I363xy2fVvRI-ZbFUO8Xo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:c8:01:43:4f:6a:62:49:fd:02:4c:80:da:96:7f:ca:0c:25:
         98:ae:ed:fc:ae:e2:93:14:7a:5c:f3:ab:f3:d6:47:18:f4:91:
         73:12:41:b1:fe:fb:69:31:7f:f7:2c:63:69:db:c4:8c:ca:0a:
         b6:63:97:0a:48:76:5d:82:cf:b9:0c:dc:b9:c2:5d:75:10:7c:
         bf:be:cf:86:8a:24:1c:34:7b:ad:e5:be:0e:6e:79:b7:a2:9b:
         92:5c:b8:04:f8:2c:2a:ac:4d:41:0d:ec:e3:97:3f:53:7e:ef:
         ea:de:38:ef:33:5b:12:c5:50:6d:64:70:34:76:35:2a:5a:de:
         2f:35:0c:16:76:9b:23:d2:5a:6e:1f:bc:17:2c:d4:d1:11:c8:
         e8:24:0c:71:e3:58:86:e1:4b:b3:f9:34:d1:b7:b9:e7:f4:ca:
         2b:bc:c9:eb:34:c0:64:e6:9f:f7:31:4e:a0:1e:8e:fe:b1:d5:
         bb:70:eb:19:7e:02:30:60:e7:59:57:05:eb:32:36:48:38:8b:
         a7:db:48:2c:fa:4a:25:10:17:82:4c:81:e3:d7:22:16:2e:98:
         46:6e:f0:92:95:b8:4f:3b:19:49:64:ff:ae:13:ce:b8:7b:b8:
         17:bf:fd:76:c8:04:d7:fb:dc:bb:bc:02:d0:62:b9:a6:31:eb:
         c2:a9:09:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:15 2024 by rpki-client on console-fra.rpki-client.org