Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/rrCaRefywqSYDtgh_8_QGEByXBY.roa
File:                     rrCaRefywqSYDtgh_8_QGEByXBY.roa (raw, json)
Hash identifier:          6iv9BLqurakpDqLR8RiN2PYmA6H9GZuHAju8PHttf0E=
Subject key identifier:   AE:B0:9A:45:E7:F2:C2:A4:98:0E:D8:21:FF:CF:D0:18:40:72:5C:16
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04AF
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/rrCaRefywqSYDtgh_8_QGEByXBY.roa
Signing time:             Thu 29 Feb 2024 01:29:05 +0000
ROA not before:           Thu 29 Feb 2024 01:29:05 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        182.21.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1199 (0x4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:29:05 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=AEB09A45E7F2C2A4980ED821FFCFD01840725C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:6c:b7:b9:f5:d1:50:6a:77:ea:5e:cc:6b:
                    32:f5:97:fc:90:cb:36:2f:89:04:a8:a8:ee:de:15:
                    a8:a5:d9:f6:30:32:93:b8:65:84:6b:b1:0f:f3:d4:
                    16:44:3b:87:a9:5f:01:6e:d0:fb:ac:54:a6:20:07:
                    bb:59:42:e3:c9:41:de:18:82:98:83:1e:9c:93:bc:
                    e5:8c:55:c9:c9:3f:ef:55:d9:86:16:4a:f5:25:c1:
                    0d:75:2e:a0:c3:c1:84:ae:0c:b2:2e:66:e7:a5:e3:
                    22:ce:4b:e3:db:82:96:2a:50:5a:b8:7a:2c:50:a3:
                    7b:e5:1e:f7:74:da:a7:a9:4f:3c:e2:b8:da:3a:dc:
                    63:f0:48:ba:5b:b9:14:9c:1c:e9:14:b5:17:ce:af:
                    0f:9f:53:74:77:39:5e:03:5e:02:74:71:1d:7f:cd:
                    92:9b:92:82:88:66:5b:71:e5:05:c7:91:c7:75:37:
                    bf:a5:b9:b2:c2:76:39:58:12:f9:e1:c1:9f:0d:21:
                    a1:54:c9:89:1a:c5:2e:b2:09:b2:dc:c5:62:ae:a0:
                    6e:0f:d8:4d:37:87:fb:7e:7b:36:c1:7d:c7:e8:5e:
                    f4:9a:ed:9a:bc:d8:66:63:47:06:fd:40:7c:84:4c:
                    61:80:56:aa:b1:9b:00:70:48:29:bb:cb:73:64:93:
                    5c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B0:9A:45:E7:F2:C2:A4:98:0E:D8:21:FF:CF:D0:18:40:72:5C:16
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/rrCaRefywqSYDtgh_8_QGEByXBY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.21.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         29:73:56:69:a5:60:e2:40:3e:23:32:57:a9:93:af:63:f0:b3:
         24:cf:7e:16:e4:cf:f3:a2:eb:bd:15:a5:b1:6f:97:9b:1d:b5:
         3f:10:af:79:8a:e8:7b:35:e5:0b:b8:3a:7f:7f:81:18:66:ed:
         7d:83:b0:b0:54:6b:8d:5a:31:69:af:57:d1:c3:00:41:5d:19:
         24:32:9a:3d:d4:ad:2a:5b:7e:c1:92:51:6b:00:ab:52:09:89:
         c0:eb:39:c3:1c:4a:d8:69:e5:3a:36:09:2c:47:21:46:01:4d:
         51:c5:2c:c4:a4:40:f8:44:48:26:16:74:00:c7:2f:96:ae:01:
         f9:69:51:5f:46:58:3d:5b:fb:c0:40:9f:8e:93:c9:1d:69:e8:
         9f:db:93:54:69:f5:b3:36:8e:0c:dd:d0:9f:b4:54:08:13:5a:
         73:19:b5:5a:da:6e:a1:ed:2a:b5:0d:c2:81:9d:60:97:87:83:
         6f:3e:6e:43:f4:72:4d:92:dc:0a:ff:3a:b5:7d:d6:8f:a6:d0:
         00:80:e1:2b:9b:94:86:55:1c:e9:11:39:2f:5d:57:0d:56:e9:
         27:c3:9e:73:d4:a5:06:79:13:54:f0:24:5c:35:ad:ad:1e:f6:
         4d:6f:c9:49:a3:f6:79:c4:39:ab:96:47:6e:12:7c:7e:92:6c:
         4e:c3:b3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:47 2024 by rpki-client on console-ams.rpki-client.org