Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/kieN-7-k4VYb5PiYhA-iz8AymFw.roa
File:                     kieN-7-k4VYb5PiYhA-iz8AymFw.roa (raw, json)
Hash identifier:          ech7gnAxY9UaqJkKL091gAlgqztJifJDI0WbX1bTa4g=
Subject key identifier:   92:27:8D:FB:BF:A4:E1:56:1B:E4:F8:98:84:0F:A2:CF:C0:32:98:5C
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04FB
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/kieN-7-k4VYb5PiYhA-iz8AymFw.roa
Signing time:             Thu 29 Feb 2024 01:39:15 +0000
ROA not before:           Thu 29 Feb 2024 01:39:15 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        220.216.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1275 (0x4fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:39:15 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=92278DFBBFA4E1561BE4F898840FA2CFC032985C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:51:af:f4:f8:8c:9c:92:00:a7:7c:07:b6:7e:
                    b0:f7:d6:62:50:0c:90:37:e4:d6:a7:0d:2a:e7:a6:
                    ef:93:af:e6:6d:aa:e0:a8:de:34:f9:56:95:f3:b1:
                    c2:7a:fc:3e:04:ef:9f:d8:52:b9:b5:d1:fc:80:52:
                    42:5e:fc:d0:ec:67:cc:43:54:ce:b0:6e:fe:c5:96:
                    d4:8c:1b:63:0f:13:3e:cf:2c:05:07:62:d8:cb:fb:
                    a7:32:c3:29:6c:28:f8:40:b9:77:73:57:b8:9a:3e:
                    0b:81:c0:07:91:38:c6:be:97:b9:0c:a5:fe:4e:76:
                    2b:fc:84:6a:77:06:49:3a:93:d6:5c:0d:aa:86:5d:
                    ad:97:70:76:0d:30:26:a3:11:39:5d:30:8c:f4:53:
                    b2:82:bb:60:c7:22:ab:61:ec:01:31:74:9c:7b:5b:
                    c3:83:65:0f:8b:ce:f3:0c:43:26:3b:74:52:87:64:
                    ae:27:1b:d6:da:90:f3:b0:4e:71:4f:92:69:bf:0b:
                    1a:fd:57:be:a2:4c:f2:62:17:ab:5c:ea:c8:be:55:
                    fb:9a:7b:7f:4c:d3:28:bb:6c:f8:a4:10:95:26:93:
                    98:57:9e:cb:26:38:9a:a9:bc:ba:b7:d0:b7:91:4a:
                    fb:82:a9:f8:9d:33:88:81:e3:86:4b:73:29:92:d5:
                    ab:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:27:8D:FB:BF:A4:E1:56:1B:E4:F8:98:84:0F:A2:CF:C0:32:98:5C
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/kieN-7-k4VYb5PiYhA-iz8AymFw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:d9:9e:ad:a3:36:42:a9:90:ef:5b:12:cb:8d:8b:25:f4:0b:
         f0:c2:df:22:ee:a2:03:d9:09:05:6c:4e:a8:23:a1:0c:57:77:
         de:fa:2c:a4:dc:79:26:89:fd:e3:67:b1:16:33:6a:3e:56:fd:
         d1:ed:89:2a:ae:d6:94:c8:0b:b8:db:14:77:81:98:23:a4:68:
         e7:fd:ac:f7:02:4c:7c:93:1d:c5:3f:57:9b:18:88:18:ff:98:
         8e:ef:24:8d:11:66:ea:b0:92:06:57:8a:35:e2:90:f2:f6:34:
         be:24:15:7c:ed:8a:f4:76:7a:d8:6a:c9:d9:3d:a8:39:5d:0f:
         0b:b4:a5:74:20:17:6e:d7:f5:97:30:01:2d:64:e2:21:0f:ce:
         c1:95:25:37:91:40:0e:5d:bf:72:37:b8:0b:16:52:a1:23:b1:
         a3:a1:f6:b1:36:ee:67:ef:f9:f7:83:88:f5:fa:8c:4a:9c:35:
         b3:bf:c0:72:13:c4:27:92:7f:8c:e9:ac:51:c5:cc:ea:9c:b7:
         32:da:05:66:a2:cb:0f:d1:fe:7d:60:f6:bd:1f:c2:9b:3b:d3:
         63:f6:f5:20:cf:05:8c:ae:dc:6e:fa:ce:cd:be:6c:c5:b5:15:
         e4:c0:85:14:be:05:b0:7f:4e:27:79:fe:80:1c:fa:4a:a4:50:
         5b:98:41:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:46 2024 by rpki-client on console-ams.rpki-client.org