Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/o-51nVj_HQcdwz-P57mXio5a-dg.roa
File:                     o-51nVj_HQcdwz-P57mXio5a-dg.roa (raw, json)
Hash identifier:          h7ZQa9Cs35Y3cIvsu+WjAeIYVktU4X5Hm+rRAR5ds3A=
Subject key identifier:   A3:EE:75:9D:58:FF:1D:07:1D:C3:3F:8F:E7:B9:97:8A:8E:5A:F9:D8
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04E2
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/o-51nVj_HQcdwz-P57mXio5a-dg.roa
Signing time:             Thu 29 Feb 2024 01:35:57 +0000
ROA not before:           Thu 29 Feb 2024 01:35:57 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        219.124.156.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1250 (0x4e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:35:57 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=A3EE759D58FF1D071DC33F8FE7B9978A8E5AF9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a2:aa:d8:87:7c:d9:66:4f:27:4b:af:8a:51:
                    46:ed:ec:70:20:5a:de:3a:a6:b1:ca:be:e3:d5:15:
                    97:28:7f:c4:36:c9:63:6a:45:bb:80:8e:b1:c9:a1:
                    9e:e2:4b:0a:f5:ed:96:2a:05:77:b6:c8:11:f6:f4:
                    bb:60:37:e9:9f:26:0b:22:78:ae:7b:5e:93:03:af:
                    e4:ac:35:46:a4:8b:af:b6:bb:2f:5e:dc:bf:c5:ea:
                    2a:6a:a8:0d:48:83:00:5f:37:f7:ae:a1:f9:4a:04:
                    fe:50:eb:d2:b5:ab:b0:05:bd:e6:31:23:cd:eb:06:
                    e3:75:0c:06:52:4b:d2:b2:d0:c8:6e:76:b4:e3:41:
                    2e:b0:77:7c:5d:29:ba:c7:77:7a:60:a5:66:31:7b:
                    69:94:73:54:93:49:52:92:be:cc:81:87:9b:30:d2:
                    80:19:73:da:24:4d:5a:29:3d:1c:e8:8f:f5:53:97:
                    14:8c:7e:e0:56:0c:f0:26:4a:e5:8b:d5:10:3b:57:
                    2e:1a:28:71:60:c1:8a:52:f9:fa:b1:f4:3a:e6:c3:
                    01:32:f6:63:d2:85:86:5d:6a:4d:53:8b:b6:ae:17:
                    0e:e8:cd:91:91:b5:b5:d1:43:1d:81:82:a1:c5:cd:
                    a5:75:75:e0:d1:de:be:27:ad:8b:85:7f:e9:08:4f:
                    9d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EE:75:9D:58:FF:1D:07:1D:C3:3F:8F:E7:B9:97:8A:8E:5A:F9:D8
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/o-51nVj_HQcdwz-P57mXio5a-dg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.124.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:b7:3e:f6:14:d7:93:3e:25:8c:27:17:98:b0:f6:90:cf:ee:
         8f:4b:7c:b8:a9:70:b6:a2:bd:b1:54:51:61:14:b3:aa:c2:d5:
         b8:0e:f1:41:98:dc:90:90:c4:c5:60:13:81:30:29:ae:03:e0:
         60:52:9f:e8:c2:7a:50:48:1e:0e:24:e6:94:37:8e:22:ff:97:
         8c:dd:f7:53:d7:c5:9f:86:0b:db:7e:36:21:25:f1:1f:a1:3f:
         6f:fc:08:dc:b0:f5:cd:03:e6:ed:33:12:eb:01:e7:de:30:c7:
         aa:c9:ef:cd:4d:8e:9b:2e:b6:23:88:43:c2:f0:15:7e:ba:42:
         a1:70:c7:34:16:ed:35:d5:58:13:8a:50:ca:d5:5e:78:f2:71:
         e2:c1:cd:f7:14:39:ca:70:63:7d:e9:53:59:be:6e:f6:d3:85:
         cf:8a:95:27:29:a7:50:02:1b:8e:5f:db:6e:8d:2e:c9:28:cb:
         cb:a9:bf:a4:5f:be:df:e2:cb:df:f3:d2:3a:bd:3a:fb:88:3b:
         06:a2:23:bf:e0:d4:f7:d0:aa:90:6a:07:c9:d2:42:63:53:61:
         1b:e4:a1:5e:8d:7d:a5:6d:3e:3f:2e:a2:c6:64:48:c5:2e:33:
         2c:b4:19:b2:1d:b3:2e:18:84:a1:7c:7f:49:c7:b6:58:f3:53:
         d2:28:b6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:46 2024 by rpki-client on console-ams.rpki-client.org