Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/gPWMKVW-CJzlOeUuhuwOC9Tn4zc.roa
File:                     gPWMKVW-CJzlOeUuhuwOC9Tn4zc.roa (raw, json)
Hash identifier:          0RVqy/OGaamKyPWajNfserI/jrWfVpKOqBEopkypLEI=
Subject key identifier:   80:F5:8C:29:55:BE:08:9C:E5:39:E5:2E:86:EC:0E:0B:D4:E7:E3:37
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04E5
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/gPWMKVW-CJzlOeUuhuwOC9Tn4zc.roa
Signing time:             Thu 29 Feb 2024 01:35:59 +0000
ROA not before:           Thu 29 Feb 2024 01:35:59 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        219.96.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1253 (0x4e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:35:59 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=80F58C2955BE089CE539E52E86EC0E0BD4E7E337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5f:8f:76:55:2a:ce:51:ef:ac:5e:59:3e:16:
                    b0:dd:64:11:15:c5:5f:46:4d:2d:58:47:cd:04:b5:
                    10:c0:87:a7:3f:27:16:01:aa:2e:27:f1:f1:e0:f6:
                    18:4e:c5:17:5d:b1:9a:e9:82:75:62:b1:53:2d:e3:
                    74:df:83:0a:c1:e7:2f:d1:ae:c1:97:23:cd:14:99:
                    ec:37:df:8f:c0:4b:3f:15:ed:57:27:f7:d7:b9:79:
                    cb:9c:e5:dc:5d:2e:e5:87:f5:c7:aa:11:1f:3e:2e:
                    65:62:f3:3e:0a:16:06:c3:68:bb:f7:f9:39:d4:94:
                    e8:c8:ad:72:cc:c2:96:32:99:25:a4:a1:d8:5f:9f:
                    42:9d:75:1a:1b:d8:f3:1a:d4:22:aa:f5:39:c1:69:
                    b0:cf:79:15:49:7d:a1:70:fa:1b:9d:a8:30:46:89:
                    0d:12:de:87:21:af:2f:2e:13:da:c2:e5:0b:83:ea:
                    a1:d5:4c:84:91:6c:24:c5:fc:28:11:d7:c0:ef:33:
                    c9:72:29:a7:c0:10:88:99:01:da:88:92:16:d5:a9:
                    17:93:50:20:30:91:a5:d1:ca:e8:97:91:50:67:9a:
                    35:d4:0c:ae:55:52:b1:f1:7f:5c:d6:1f:b4:a6:16:
                    46:7a:b8:a6:08:bf:97:ff:08:ff:d0:d1:b5:c8:a3:
                    22:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F5:8C:29:55:BE:08:9C:E5:39:E5:2E:86:EC:0E:0B:D4:E7:E3:37
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/gPWMKVW-CJzlOeUuhuwOC9Tn4zc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:6e:6f:65:52:2d:0d:bf:02:77:78:e6:61:1a:9a:a4:6b:6a:
         45:6a:ba:85:d9:11:29:fb:a0:e9:fe:8f:8e:93:53:e7:83:b7:
         86:4a:9b:bb:94:c5:84:97:8b:e2:dd:fe:d9:f8:2c:e7:57:c1:
         18:f2:b0:8f:03:d8:17:1f:34:d3:68:d9:3f:9a:82:dd:54:97:
         42:15:cb:f4:68:1a:10:28:35:42:c0:8b:a8:cf:66:d5:06:16:
         a3:73:0d:2c:4d:b1:7d:74:cd:36:ae:8c:23:48:d5:b0:25:a4:
         b0:f9:16:64:02:e6:9a:3c:5d:0e:1f:d9:9c:96:98:35:8b:6e:
         0c:fb:af:29:a5:85:83:ed:c5:71:cd:90:30:d6:8d:9c:3f:8e:
         c0:13:17:44:4f:a0:ca:fd:42:ed:f9:c5:68:8d:cc:95:78:1b:
         ad:a1:8c:55:54:13:4e:45:e9:96:e7:77:98:5f:0d:79:9f:a3:
         2d:cc:42:ad:aa:06:eb:d0:e0:2e:23:00:52:1e:2d:c5:c9:ba:
         12:b9:84:d1:65:02:05:69:83:8e:63:0c:a7:7b:e4:f3:00:bc:
         b0:ec:d3:e8:e1:7b:c0:ab:b1:2f:c9:17:89:ca:4f:80:84:e2:
         fc:8a:1f:22:3d:d6:c4:07:4a:80:d7:48:05:41:1a:0f:b8:0e:
         9f:c3:71:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:51 2024 by rpki-client on console-fra.rpki-client.org