Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/skR3qn_AQe9pdFXgeY5S6O2Pi_M.roa
File:                     skR3qn_AQe9pdFXgeY5S6O2Pi_M.roa (raw, json)
Hash identifier:          mspsiZwI3gPCy8A/B//VAoNIQenI/QLVWSwxy9qFNck=
Subject key identifier:   B2:44:77:AA:7F:C0:41:EF:69:74:55:E0:79:8E:52:E8:ED:8F:8B:F3
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04F6
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/skR3qn_AQe9pdFXgeY5S6O2Pi_M.roa
Signing time:             Thu 29 Feb 2024 01:36:07 +0000
ROA not before:           Thu 29 Feb 2024 01:36:07 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        220.216.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1270 (0x4f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:36:07 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=B24477AA7FC041EF697455E0798E52E8ED8F8BF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:d1:45:5f:28:e5:6a:f4:7b:fb:c2:2e:50:
                    42:f8:1b:ec:16:fe:a5:a4:22:2a:bc:a7:03:bc:17:
                    33:d5:ed:14:52:a5:5f:62:9c:e6:27:fc:f6:15:8b:
                    ac:85:41:6c:ea:ba:17:5f:76:89:89:5a:4f:ab:31:
                    8f:d3:52:f7:dc:ab:23:c2:93:c2:00:8e:34:a0:d4:
                    bb:96:71:4f:36:73:01:2b:38:9a:12:ed:dd:dd:96:
                    f5:8b:17:6e:e9:7d:d3:70:72:30:c4:61:0d:47:2c:
                    6d:14:78:85:2b:ce:14:5d:e2:92:36:89:e0:13:71:
                    ed:45:94:94:36:69:bf:92:ce:88:02:e9:21:da:3b:
                    37:cf:bd:67:48:40:6c:26:21:19:60:2a:c1:32:2f:
                    16:6a:5e:0f:8f:13:5c:74:32:2a:7f:27:ca:a7:57:
                    43:43:22:11:82:ff:62:d1:68:bc:cd:1b:f9:ee:d8:
                    d6:91:10:fc:38:e8:4b:50:95:ea:c3:79:f6:92:62:
                    9c:44:67:d6:14:e0:bf:d6:a2:2b:5f:b3:98:d5:16:
                    0a:e7:db:93:10:79:7f:a4:54:3a:2d:8b:f0:42:54:
                    c7:9d:60:ab:2e:3c:f6:bd:d9:bd:ad:ad:54:d6:0b:
                    ce:0e:c4:cc:3c:6d:e7:98:9a:18:c6:a9:94:31:70:
                    7d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:44:77:AA:7F:C0:41:EF:69:74:55:E0:79:8E:52:E8:ED:8F:8B:F3
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/skR3qn_AQe9pdFXgeY5S6O2Pi_M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a2:c2:21:ed:36:65:6b:91:96:8c:97:37:0e:1b:c2:7d:32:54:
         2a:a2:03:72:3d:6e:53:79:d9:a3:3d:f9:fe:ce:f2:28:df:83:
         7e:28:07:05:b1:b1:ca:f0:62:f7:b9:95:10:95:92:6e:15:12:
         8d:dd:8c:37:2e:4b:8f:7a:93:c6:b7:0f:53:f9:47:d2:a3:d0:
         78:63:dc:e3:27:e6:1a:03:67:0f:9a:36:2f:80:e6:c9:c7:6b:
         bc:eb:d7:eb:23:72:cb:72:8b:8b:db:91:92:a5:9c:df:6a:4b:
         8f:56:4d:d4:84:33:30:4d:3b:9e:5a:f4:ae:2f:96:24:e4:de:
         f0:4c:61:9b:40:fa:85:e6:eb:63:06:39:93:b2:bb:73:c0:20:
         48:06:d3:50:96:b4:50:ec:e7:2c:5e:6a:62:ba:59:c5:c5:8d:
         46:5c:5d:0f:99:df:66:85:6f:e0:de:fd:92:87:3e:de:82:42:
         b9:6c:66:6f:e5:78:fc:55:dd:7e:05:91:bc:8a:bd:d7:d2:f3:
         ac:8c:7f:7d:37:c1:ba:71:be:b0:02:8d:64:e2:61:b3:90:f1:
         a0:c5:f0:77:9a:3c:17:32:2a:81:40:7a:8a:15:bc:c6:b0:23:
         53:2d:b5:1c:c2:ec:87:54:e2:c4:c3:ab:5a:e2:c9:e8:b0:f6:
         74:74:55:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:47 2024 by rpki-client on console-ams.rpki-client.org