Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/sDimPANEMZWhZQeOXb9Q-o70x5U.roa
File:                     sDimPANEMZWhZQeOXb9Q-o70x5U.roa (raw, json)
Hash identifier:          As9fUJTpggcSTTG/XzKmcZvn0KtYC1fTA9rvxsST48A=
Subject key identifier:   B0:38:A6:3C:03:44:31:95:A1:65:07:8E:5D:BF:50:FA:8E:F4:C7:95
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04A9
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/sDimPANEMZWhZQeOXb9Q-o70x5U.roa
Signing time:             Thu 29 Feb 2024 01:29:04 +0000
ROA not before:           Thu 29 Feb 2024 01:29:04 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        202.226.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1193 (0x4a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:29:04 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=B038A63C03443195A165078E5DBF50FA8EF4C795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:45:a9:f8:7a:13:7a:07:87:b3:e7:14:65:42:
                    ef:d5:81:b7:b3:d3:8e:27:ba:25:0c:d5:11:ac:34:
                    46:bf:62:47:9e:2b:fc:4b:ef:01:b0:ef:44:f2:ff:
                    dd:3a:b8:1e:e2:23:26:c5:89:39:6d:57:ce:ce:c3:
                    35:54:1f:40:d5:1d:cb:f9:20:23:64:6c:97:bd:5f:
                    51:ef:0c:b6:96:25:7e:03:f8:0e:88:e7:32:93:75:
                    42:47:26:18:38:33:8d:2b:4e:d8:b9:b8:d1:f9:ee:
                    f4:e6:8e:85:34:1e:27:1e:ee:e0:35:e9:5f:49:e4:
                    0d:fd:2a:75:a5:39:89:70:0a:5b:68:7a:c5:16:d7:
                    72:80:ca:db:82:04:ef:cd:5c:65:d2:4b:6d:1b:64:
                    cd:67:96:4d:bf:8d:8e:07:bc:1f:86:2a:0c:83:c6:
                    fd:15:33:7a:bc:31:a7:3c:de:81:5a:dd:6d:0f:92:
                    ce:66:d2:54:03:70:72:0f:2d:b0:39:63:8b:e4:31:
                    a7:ca:22:3c:85:74:f3:c1:2d:1d:48:5a:29:a0:34:
                    97:fb:71:fb:68:ac:dc:4d:06:6f:99:d2:0b:dd:29:
                    f6:21:42:7a:7e:5d:c8:7f:a5:f8:14:d0:c3:d1:b9:
                    3a:b0:8a:6f:ef:07:2d:66:a6:b2:49:ad:59:c6:fb:
                    b3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:38:A6:3C:03:44:31:95:A1:65:07:8E:5D:BF:50:FA:8E:F4:C7:95
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/sDimPANEMZWhZQeOXb9Q-o70x5U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:58:56:ff:38:bd:be:73:2c:9a:0f:50:ad:6c:74:be:e5:77:
         8e:3d:2e:3b:08:4a:7f:c0:51:b3:e0:87:55:61:72:c0:e5:e9:
         16:db:9c:39:37:4f:80:72:8c:b0:bb:5a:60:a1:2f:fd:0c:0a:
         eb:b4:f5:d0:e6:98:a9:ba:44:02:be:ef:54:c5:9d:e6:e2:f8:
         fc:0b:80:3e:fb:58:ef:2c:e2:1e:06:6d:71:65:77:c0:23:61:
         be:72:1f:e3:5f:99:4b:a5:31:10:68:2a:b3:4f:8d:20:68:db:
         39:43:55:6c:f6:b8:e1:fb:55:38:f3:53:80:02:9b:ad:99:bf:
         4e:0f:61:80:7d:cd:48:1b:0d:26:7e:1a:a5:66:95:e7:4a:22:
         8b:c1:87:b3:fb:ae:cd:41:37:95:47:89:8f:64:f1:91:9d:68:
         16:8d:ee:bd:6b:83:ba:2f:76:9e:81:1c:8e:94:b5:a6:72:7f:
         f6:84:1a:d6:3c:f0:5d:69:b5:25:1a:9f:89:4a:2d:08:1c:16:
         b2:4d:dc:b8:41:00:f7:e4:b9:62:67:b3:9a:d6:e9:cc:c9:eb:
         ba:04:6c:b6:41:80:f3:61:f6:7c:5e:4d:8e:01:e3:d7:08:f7:
         1b:5e:a6:0f:df:68:35:42:16:0b:44:ea:87:1f:7a:79:1f:4d:
         a7:af:2e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:30 2024 by rpki-client on console-ams.rpki-client.org