Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/iU05XeIWHebFFwOm7XPAV82Up-0.roa
File:                     iU05XeIWHebFFwOm7XPAV82Up-0.roa (raw, json)
Hash identifier:          FOEfSEp1cP+PR8XJI5/HpI0nMGp+DY7FairwL0DtgxE=
Subject key identifier:   89:4D:39:5D:E2:16:1D:E6:C5:17:03:A6:ED:73:C0:57:CD:94:A7:ED
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04BE
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/iU05XeIWHebFFwOm7XPAV82Up-0.roa
Signing time:             Thu 29 Feb 2024 01:33:07 +0000
ROA not before:           Thu 29 Feb 2024 01:33:07 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        112.140.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214 (0x4be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:33:07 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=894D395DE2161DE6C51703A6ED73C057CD94A7ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dc:59:77:a5:dc:b8:c2:f6:dd:5a:d4:3d:a6:
                    97:8f:46:36:41:66:eb:9e:48:ce:84:de:c5:a2:95:
                    1d:5c:3f:02:1e:03:b3:38:af:ce:5a:1c:7d:39:ee:
                    5f:b0:d8:9d:71:29:77:53:37:c2:7e:7e:4f:98:de:
                    4d:c5:2b:d1:9b:57:ac:5c:ae:78:8e:72:b9:fa:b0:
                    a4:a7:21:b1:1e:3c:4b:30:d0:8b:b8:2e:b0:21:09:
                    8a:46:7e:2c:e4:4d:fd:ff:5f:18:7f:cb:dd:e0:76:
                    6e:07:9f:d2:8d:d9:c5:11:9f:7f:6a:3b:b7:2f:af:
                    dd:5d:0f:d3:8b:fb:05:4b:10:b6:5e:91:ed:b1:1b:
                    c8:4c:95:28:39:0a:38:9f:20:4d:a2:d6:2b:65:06:
                    d6:25:0e:0c:46:82:2b:04:82:cb:d3:cd:ee:5f:31:
                    c9:52:52:8d:65:f6:84:4b:f6:08:a9:26:e4:9a:a9:
                    5b:7c:ec:c1:15:15:ff:89:ce:87:97:77:58:51:bc:
                    66:2f:07:c1:1c:2f:18:4f:be:bb:14:0e:0a:9c:b6:
                    1b:7a:f2:6e:66:ae:97:c7:be:68:d1:42:64:94:f5:
                    3b:46:57:03:53:8c:47:a9:d8:91:1f:c9:97:37:6c:
                    8f:71:08:ee:05:c8:a7:7d:9e:c5:a0:23:68:1c:eb:
                    a6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4D:39:5D:E2:16:1D:E6:C5:17:03:A6:ED:73:C0:57:CD:94:A7:ED
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/iU05XeIWHebFFwOm7XPAV82Up-0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.140.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:af:3b:11:d5:b9:57:1c:aa:11:4b:c2:79:ab:86:9a:0c:18:
         55:01:d3:da:3e:70:43:05:75:50:10:e5:a1:45:07:a8:7f:5d:
         25:d0:83:19:a9:7e:09:1f:28:ca:4b:d1:57:0f:17:e1:ce:ba:
         f4:76:e0:3c:9a:7f:3e:51:22:9e:18:b6:ad:ae:08:47:53:b7:
         33:cc:72:8e:48:b9:72:62:c5:f0:65:db:7e:c7:b2:0d:2d:d3:
         48:d5:de:63:b2:e5:1c:ca:22:0a:c5:e9:fd:f6:cf:6d:1e:02:
         5e:99:c9:68:2b:b4:58:56:84:7b:e2:d5:73:9f:a4:9f:d9:d9:
         c5:99:e2:e7:78:06:d0:0c:77:f8:9f:ae:cc:a3:fc:8f:76:80:
         a0:af:15:de:2b:a8:c9:3f:40:4d:48:db:06:0f:ef:75:e1:69:
         21:36:89:d1:d6:83:b8:2f:a3:a9:8b:3f:a8:32:6a:a6:b3:07:
         ee:c9:8e:f9:e0:0d:e3:78:95:16:99:ff:cc:62:ab:a7:a8:13:
         00:a5:d9:88:17:43:d5:66:02:ce:b3:5d:18:16:c8:96:35:7f:
         28:c0:09:91:b3:75:52:5a:82:b3:4c:ca:13:6e:28:68:11:e6:
         1f:2d:a0:40:80:58:28:4a:ed:27:f7:dd:b4:12:c9:1f:78:78:
         bc:b7:f5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:48 2024 by rpki-client on console-ams.rpki-client.org