Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/mXrQgGBryeVR830rhtcDlqUUxcA.roa
File:                     mXrQgGBryeVR830rhtcDlqUUxcA.roa (raw, json)
Hash identifier:          nX7CUtd+45TOQlGCYTMt4MtXFBJZ6pUuZS/J1tPeJ0o=
Subject key identifier:   99:7A:D0:80:60:6B:C9:E5:51:F3:7D:2B:86:D7:03:96:A5:14:C5:C0
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0497
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/mXrQgGBryeVR830rhtcDlqUUxcA.roa
Signing time:             Thu 29 Feb 2024 01:28:55 +0000
ROA not before:           Thu 29 Feb 2024 01:28:55 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        220.148.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1175 (0x497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:28:55 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=997AD080606BC9E551F37D2B86D70396A514C5C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e4:04:3f:d0:b1:9b:58:d7:5d:9d:a9:ab:17:
                    1a:4e:4b:76:8d:07:2a:7f:fd:c2:7a:8c:14:4a:af:
                    bc:ba:05:08:f5:30:e7:97:95:38:f1:1c:a5:eb:af:
                    d9:d6:ed:1b:9b:19:f7:2d:c5:dd:95:96:17:ee:dc:
                    04:2f:d8:f7:2d:27:fc:f5:64:0d:56:8b:93:b2:e2:
                    9c:3f:d2:42:5f:c2:74:ce:30:52:42:25:92:2d:cd:
                    a2:7d:7f:37:60:d0:58:2c:24:c4:19:3d:65:2e:f6:
                    4c:e6:bc:6e:54:5f:db:a2:8a:88:2c:c0:6a:7b:a9:
                    81:0e:ca:a3:36:7a:08:f0:9c:b7:9f:ac:6d:4f:8f:
                    5c:62:b9:50:9d:a0:ab:ee:e6:c3:29:30:7d:6f:c8:
                    90:8d:61:93:12:88:79:1f:4c:6b:74:b1:64:5a:37:
                    0a:bf:1c:34:d0:ab:27:10:6f:db:47:a3:55:e8:6a:
                    b9:59:a3:32:d3:43:14:3a:53:6b:aa:c5:95:da:11:
                    f1:e6:5e:dd:fe:69:c9:fd:98:8a:9d:f5:fd:89:d8:
                    4c:ce:1e:2a:04:3b:fd:e7:19:8f:f3:6e:2d:d3:b7:
                    e9:02:7c:64:de:69:8d:92:d8:fb:d7:de:b6:a5:44:
                    64:6f:ef:c3:9c:cf:b9:3a:e1:4e:6a:36:65:66:ff:
                    dc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7A:D0:80:60:6B:C9:E5:51:F3:7D:2B:86:D7:03:96:A5:14:C5:C0
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/mXrQgGBryeVR830rhtcDlqUUxcA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b5:60:2b:72:77:08:2a:50:24:d0:30:cb:c4:77:7a:31:43:0d:
         09:77:f1:87:94:1d:fc:5d:ad:1d:f1:bf:9a:80:98:75:7f:c2:
         a9:58:55:77:72:2d:5a:c3:95:fb:c3:04:c4:af:88:3f:70:6e:
         72:e4:7b:fd:ee:6a:99:4f:c7:21:13:95:97:82:36:4b:d5:87:
         c8:06:9c:44:86:de:7e:09:70:1d:50:a0:ad:45:f8:80:ee:ba:
         4b:e5:f9:98:63:49:b1:ed:71:9e:a4:7c:36:33:93:40:c9:29:
         4c:79:6d:23:a1:65:9d:ba:43:d3:9b:48:26:c6:d0:53:26:bc:
         37:7a:9b:24:81:83:ef:6c:f0:f4:bf:a6:77:d1:df:bd:e6:0c:
         8a:3a:93:18:78:cc:3d:6d:2e:ca:de:4a:b9:21:63:0d:06:73:
         c8:61:24:9c:32:67:d1:5b:2d:55:65:65:f3:01:da:12:9e:bf:
         de:99:fd:d6:13:58:50:67:63:e2:43:96:ec:51:94:50:51:bc:
         f2:4d:77:dd:bb:7d:31:6c:20:88:29:e5:28:c1:ab:ab:ce:21:
         85:29:c7:1c:62:4a:eb:d7:43:bc:90:d3:b4:67:1f:a3:12:c0:
         1e:af:27:0d:f4:88:14:f2:65:d4:65:b7:0f:c2:9a:33:d0:43:
         2d:09:0d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:05 2024 by rpki-client on console-fra.rpki-client.org