Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/oxlis82rsA7k9rTZgNAYnHGg3C8.roa
File:                     oxlis82rsA7k9rTZgNAYnHGg3C8.roa (raw, json)
Hash identifier:          SSpkE5rcY4NsfCxkCawuRtCOqLZAlKnlEAkEq3+h77I=
Subject key identifier:   A3:19:62:B3:CD:AB:B0:0E:E4:F6:B4:D9:80:D0:18:9C:71:A0:DC:2F
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04D0
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/oxlis82rsA7k9rTZgNAYnHGg3C8.roa
Signing time:             Thu 29 Feb 2024 01:33:16 +0000
ROA not before:           Thu 29 Feb 2024 01:33:16 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        219.96.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1232 (0x4d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:33:16 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=A31962B3CDABB00EE4F6B4D980D0189C71A0DC2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:72:cb:15:93:73:ff:31:57:b2:71:d2:fa:13:
                    0d:17:9d:d2:c0:dd:a3:8b:f3:fd:19:34:db:83:18:
                    57:e1:16:c9:4a:e8:5d:cf:41:95:c4:69:f4:c0:4f:
                    d7:4d:20:88:96:00:85:06:f4:1e:ae:92:bf:48:a8:
                    62:32:2d:a3:65:35:d1:b4:e9:0f:81:cf:da:d9:80:
                    18:ca:f8:4b:73:6f:50:db:00:9a:bd:63:b6:21:ba:
                    89:a2:8d:ab:37:41:e3:39:f3:ff:cb:35:3e:b0:8b:
                    37:b7:8e:8f:85:6a:93:3d:69:9f:68:27:87:a6:55:
                    03:f9:57:40:50:34:9d:f9:bc:1d:04:89:18:4e:00:
                    8b:d4:6f:d2:38:a1:9e:ea:fe:62:b2:26:43:d6:1b:
                    00:63:4f:7c:52:57:87:98:61:43:86:27:5e:f1:b7:
                    a0:6b:86:e8:63:86:ad:96:09:a8:89:54:1e:c3:c8:
                    c9:42:06:e0:f9:01:03:aa:f7:ae:4c:5e:83:4a:58:
                    95:f3:15:86:66:1d:e9:5a:35:88:0f:7b:ad:78:b2:
                    a2:13:e8:40:5f:ce:b7:18:20:2a:20:77:47:2f:a5:
                    3c:81:78:37:66:3b:cc:e5:ed:af:c6:f0:c4:c6:93:
                    13:02:d4:96:e3:8c:91:1c:75:1d:1b:26:33:8a:f7:
                    39:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:19:62:B3:CD:AB:B0:0E:E4:F6:B4:D9:80:D0:18:9C:71:A0:DC:2F
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/oxlis82rsA7k9rTZgNAYnHGg3C8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:77:5e:a0:87:b9:0f:e6:ba:6f:f6:87:66:3f:1c:eb:d0:ff:
         26:4c:a6:8a:a4:c7:18:68:05:28:45:b6:87:17:03:da:80:46:
         f6:ba:f7:81:a2:5c:2b:07:91:61:95:19:74:5a:2c:5d:2e:00:
         48:64:96:d0:5d:16:4f:8a:a4:54:55:6e:1f:f8:00:98:5a:f1:
         42:f2:d4:e2:40:3d:8e:7c:fa:18:63:ee:61:92:c7:79:0e:48:
         93:ee:1c:f7:24:84:12:e3:ba:b8:76:08:f4:02:43:71:e5:5e:
         db:27:d4:44:5c:c7:20:06:ee:c7:fd:d9:85:b2:cf:f3:1c:53:
         ed:c4:30:df:32:8e:db:9f:c9:05:2e:42:14:9f:1b:64:63:37:
         e7:c4:22:be:5d:a1:4c:4f:64:a7:16:99:0e:ed:43:d8:bd:00:
         36:81:d9:78:67:1e:d0:02:aa:25:ca:5b:b0:f1:1c:04:70:c8:
         2a:2e:de:e3:a5:d9:74:13:90:51:b6:7d:77:5d:34:60:3a:85:
         2d:5b:77:c0:7f:1c:a7:98:a6:f8:e2:89:75:7f:ae:85:95:6b:
         c7:dd:c3:54:02:97:ed:4b:f5:2c:6a:29:19:85:ed:b7:b2:8b:
         d8:96:d8:f4:3a:41:9c:85:ec:8d:7a:ee:ef:57:3f:ee:f5:67:
         27:2c:a8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:45 2024 by rpki-client on console-fra.rpki-client.org