Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/pCFMYmYaMjB50rVP430wrio4XtM.roa
File:                     pCFMYmYaMjB50rVP430wrio4XtM.roa (raw, json)
Hash identifier:          VMVILmsFxyk+ZVoloDgyJvILcW7qcX8kUJh1w0+shDE=
Subject key identifier:   A4:21:4C:62:66:1A:32:30:79:D2:B5:4F:E3:7D:30:AE:2A:38:5E:D3
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04B4
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/pCFMYmYaMjB50rVP430wrio4XtM.roa
Signing time:             Thu 29 Feb 2024 01:33:04 +0000
ROA not before:           Thu 29 Feb 2024 01:33:04 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        111.67.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204 (0x4b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:33:04 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=A4214C62661A323079D2B54FE37D30AE2A385ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:71:5a:de:61:c5:9b:36:67:6c:1d:ff:92:44:
                    e8:b4:30:90:10:f9:ae:09:ae:47:ca:34:a2:77:bc:
                    8a:60:f0:4a:7a:1f:3f:ce:b6:39:e1:50:d9:3a:3d:
                    5b:f6:f2:c2:f6:32:fd:72:86:9a:c5:40:9f:4d:86:
                    fa:32:39:7a:f5:f4:70:8a:aa:f6:82:21:23:ff:d4:
                    38:ab:ce:bd:a2:43:32:c3:8c:a4:77:ba:d2:5e:40:
                    2e:84:fe:69:1d:8c:49:ec:a7:09:6b:75:bd:b4:03:
                    ab:33:40:ff:bf:60:ce:3e:5d:72:28:24:d8:ce:4d:
                    da:a2:96:b7:0b:c3:69:b7:8c:08:fb:0c:a3:1b:00:
                    e1:2f:2d:8f:b4:fd:78:a8:b1:02:0b:b4:ed:fd:29:
                    49:63:8c:8d:57:af:f1:0f:d2:e2:ac:e9:d1:8a:03:
                    36:66:dd:36:eb:5d:18:e0:17:1b:a0:12:52:72:80:
                    37:05:c3:c4:c8:48:80:d9:31:86:84:07:dc:94:90:
                    71:06:8d:12:f2:ee:62:f8:d9:75:29:57:2d:9b:35:
                    c7:9c:65:2e:c9:34:ce:26:80:da:f6:03:a7:96:af:
                    05:28:29:93:c1:e7:12:c0:76:54:99:0d:86:ed:cb:
                    3a:6b:72:f7:be:67:40:c6:78:e0:a0:ff:a0:39:6b:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:21:4C:62:66:1A:32:30:79:D2:B5:4F:E3:7D:30:AE:2A:38:5E:D3
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/pCFMYmYaMjB50rVP430wrio4XtM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:8d:c2:a3:47:fb:48:15:d1:a7:af:8e:83:5c:2e:ef:f8:d2:
         94:7b:f8:ef:8a:bf:e5:c2:53:25:7c:20:1c:29:ec:35:ec:7e:
         e4:fd:05:23:89:25:fa:02:23:a2:ff:8e:6d:70:2a:ab:f3:90:
         4c:2e:a7:25:d4:dc:4e:32:6f:50:e9:b2:5d:c5:2e:7a:42:28:
         f7:e2:69:7d:3b:bf:cd:bf:08:31:92:b4:e8:3c:13:83:15:e5:
         7d:c4:22:e2:fb:8e:9c:38:72:80:f7:7f:c2:b3:61:c5:1f:6f:
         a5:b1:d2:89:5f:df:bf:b3:36:e1:ef:54:9d:43:7a:94:5c:31:
         b2:47:db:ba:e5:e4:79:6a:1a:38:a0:de:1c:b8:d7:da:ef:5f:
         f8:2c:79:c8:64:89:98:06:99:ff:7c:37:1b:6c:cc:9c:99:5a:
         ec:25:c9:66:34:1c:72:17:79:2e:f1:85:6f:90:03:62:32:99:
         07:bf:ab:1b:c4:b8:99:31:af:f1:f7:e7:8f:10:1e:b1:4f:2d:
         77:02:99:73:d7:a3:7f:21:a8:ca:f0:2e:c6:3e:7f:47:19:42:
         7c:7b:3d:78:58:7a:24:35:fe:57:83:e4:90:0c:df:88:14:bb:
         c4:fa:ca:98:c8:be:2f:5b:e0:5f:b7:08:55:17:ec:29:2a:7b:
         90:d0:15:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:47 2024 by rpki-client on console-ams.rpki-client.org