Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/yJJ2UWpqWAsSPQ6pQpRNUFlvtHg.roa
File:                     yJJ2UWpqWAsSPQ6pQpRNUFlvtHg.roa (raw, json)
Hash identifier:          +M5W1i7z5xQMXMu1AvAo3YCpHho3ztexsI89RTFXH3g=
Subject key identifier:   C8:92:76:51:6A:6A:58:0B:12:3D:0E:A9:42:94:4D:50:59:6F:B4:78
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04C1
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/yJJ2UWpqWAsSPQ6pQpRNUFlvtHg.roa
Signing time:             Thu 29 Feb 2024 01:33:09 +0000
ROA not before:           Thu 29 Feb 2024 01:33:09 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        112.137.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1217 (0x4c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:33:09 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=C89276516A6A580B123D0EA942944D50596FB478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:25:a6:e1:b0:26:f3:6f:01:84:cd:bb:a4:
                    70:37:6b:27:50:21:3d:cd:7a:71:d1:33:b5:d5:34:
                    99:f7:d2:06:fb:84:8c:73:6f:ed:5f:57:09:b5:c2:
                    00:95:35:f9:ea:2b:e8:6d:e3:1b:11:ce:31:cd:d6:
                    ad:18:d0:af:5e:7f:f0:d1:59:c2:2e:54:a2:59:b2:
                    9f:64:6f:52:5f:72:6b:a1:95:82:a8:f0:5b:68:68:
                    cc:0b:94:3f:47:5c:c5:71:34:74:98:0a:72:5f:64:
                    ac:c7:14:e9:ef:58:a8:01:2c:47:a0:ab:07:43:dc:
                    6d:b6:32:7d:7b:83:7e:50:81:15:2e:6a:9e:ea:d4:
                    ab:da:b8:57:e8:9d:79:e5:7b:43:d9:e5:13:29:17:
                    b0:d7:82:6a:49:12:ef:e7:76:09:5e:fc:67:d1:c0:
                    ff:dc:59:7e:53:af:71:7e:eb:0b:03:c7:e9:2a:49:
                    1d:1c:3a:68:9a:a7:41:c1:a0:c1:97:8d:23:d8:55:
                    29:1c:a7:1d:c7:b9:5b:a9:6e:79:dd:bf:ca:f3:74:
                    ab:cf:ae:9b:ba:7f:06:50:57:05:2f:1d:6d:9f:2d:
                    84:b0:ad:d7:88:cc:12:d5:ee:7a:f6:0f:88:0e:0c:
                    6c:85:8a:8a:0a:0d:93:6a:8b:85:fd:67:6b:75:61:
                    b6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:92:76:51:6A:6A:58:0B:12:3D:0E:A9:42:94:4D:50:59:6F:B4:78
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/yJJ2UWpqWAsSPQ6pQpRNUFlvtHg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         70:f8:16:f5:12:7e:7f:d6:e8:35:12:38:e6:92:b4:b5:50:c3:
         5c:a5:4e:98:62:0e:53:78:70:83:c1:ce:75:08:aa:22:f6:39:
         1c:4c:8c:b9:14:58:5b:5d:4c:75:aa:05:21:57:5f:37:93:3d:
         c2:d0:7b:f9:68:7d:ed:de:ec:b8:49:30:ee:85:10:9e:2f:77:
         b8:a9:9d:12:c1:b8:e1:b9:13:fe:a3:fe:2d:8e:a4:6d:a6:2a:
         67:c1:39:33:64:8d:91:c6:37:ec:cc:e3:39:92:06:e3:40:00:
         89:3d:66:f4:25:8b:a4:5f:0e:96:73:95:d9:3d:2a:ce:fd:17:
         06:ce:47:e1:e7:92:b8:a0:c9:66:69:57:8e:d5:26:27:39:d9:
         da:7f:4e:40:a3:cc:93:a4:27:dc:29:0f:7e:dd:7f:02:ad:b3:
         27:ca:ed:d9:d1:1c:28:46:48:83:82:70:02:f5:18:2f:da:42:
         9e:8a:93:80:5f:af:71:87:75:8b:e1:84:d7:5a:2a:8e:03:94:
         f7:11:8f:8b:da:da:c6:1b:7d:ee:a3:cf:a7:7e:fe:2d:b3:fd:
         8e:5e:2b:9b:a6:30:1b:59:77:de:1c:0b:31:be:26:96:16:33:
         8d:c3:87:3a:c1:aa:d5:8b:1a:4f:4d:2f:fa:ec:99:fa:bf:b2:
         81:56:e0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:41 2024 by rpki-client on console-ams.rpki-client.org