Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/sRJkTtcLNjA97gV0b9ep0JIYxdo.roa
File:                     sRJkTtcLNjA97gV0b9ep0JIYxdo.roa (raw, json)
Hash identifier:          PySxspuyX3tTfh7SOr78Gx2TN+2Yf9sDPAG35r2/pAE=
Subject key identifier:   B1:12:64:4E:D7:0B:36:30:3D:EE:05:74:6F:D7:A9:D0:92:18:C5:DA
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04CB
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/sRJkTtcLNjA97gV0b9ep0JIYxdo.roa
Signing time:             Thu 29 Feb 2024 01:33:14 +0000
ROA not before:           Thu 29 Feb 2024 01:33:14 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        61.198.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:33:14 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=B112644ED70B36303DEE05746FD7A9D09218C5DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5c:61:53:94:c2:64:ce:90:41:d1:64:01:6f:
                    a1:50:cc:2d:5f:49:f5:81:fa:a0:a8:58:9e:fe:74:
                    b9:77:67:7b:af:39:4b:63:ed:5b:a0:2d:5e:91:a8:
                    6b:b3:11:e8:a7:16:6b:21:0f:70:09:60:06:53:fd:
                    c4:de:67:97:f2:47:1b:21:91:a5:73:13:9a:93:d0:
                    04:3b:b9:20:25:72:8e:97:70:68:65:ee:c2:99:6d:
                    b9:be:b6:44:b2:c1:f5:9c:a6:d3:8c:dc:bb:dd:fb:
                    b8:ad:a8:33:20:9c:0b:10:77:e1:db:95:ce:91:63:
                    00:dd:08:73:e6:ea:e6:e9:33:1a:b6:e2:16:81:9c:
                    e5:ef:3d:56:c3:e4:fc:5a:ab:54:6d:90:bd:d4:54:
                    3f:c0:84:76:0a:25:b0:32:44:65:bb:72:7b:96:4d:
                    7f:ee:ef:00:7e:a1:a9:05:7a:90:29:2f:01:fa:ef:
                    38:f8:e8:25:37:51:d8:54:44:b9:3d:ee:a7:2b:dd:
                    78:e3:de:11:ab:57:3a:70:7a:a9:cf:27:55:ba:06:
                    98:e4:da:d7:99:b0:0b:95:09:81:82:54:3a:15:56:
                    3f:8c:5f:3f:5a:19:d4:23:89:71:1a:bc:b8:29:4f:
                    d3:a7:c1:1b:22:55:ce:7c:28:69:a7:52:7a:ff:79:
                    fe:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:12:64:4E:D7:0B:36:30:3D:EE:05:74:6F:D7:A9:D0:92:18:C5:DA
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/sRJkTtcLNjA97gV0b9ep0JIYxdo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.198.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:dd:9d:70:5c:9c:91:e8:f8:37:34:1b:49:7b:13:89:62:7d:
         64:0b:15:60:fb:d9:7e:ae:42:95:46:e6:5f:22:86:00:fa:6d:
         13:16:fd:be:ae:a3:a2:72:d0:d9:c2:c7:df:0c:3e:2d:7c:67:
         0b:5b:12:d0:55:fd:24:84:72:01:b8:29:5d:00:13:52:af:cf:
         d7:fa:8d:7d:43:5e:00:a9:9f:20:6b:c9:42:62:eb:b7:08:7a:
         7b:3b:6f:55:44:1d:66:4d:44:09:99:99:46:2d:9f:42:7b:20:
         36:a7:93:0d:76:9a:e6:1c:4b:b8:26:40:1b:53:86:be:d8:6c:
         c8:35:35:c3:fd:19:5a:49:14:44:58:d7:c6:45:7b:fc:6b:e0:
         fe:ea:02:29:66:62:30:ed:3d:03:c7:39:90:19:48:8c:e6:56:
         0f:1b:83:d5:ad:95:d0:37:0d:41:95:a9:22:4d:e7:75:bd:62:
         37:7a:29:62:e1:4b:24:d2:28:8e:73:6f:be:ad:2f:e0:87:86:
         29:91:92:69:96:9d:2f:91:96:53:f4:3c:fe:1c:d6:ac:51:ed:
         e0:1e:81:ac:c4:d3:a8:6a:04:19:06:2b:76:ee:a1:a4:34:ce:
         77:6b:51:c9:8f:93:11:5c:a6:0f:ae:d8:6f:f8:f1:2c:bd:1f:
         12:bc:70:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:05 2024 by rpki-client on console-fra.rpki-client.org