Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/zZN7FY1kclS-V8_O8GYP38yygWA.roa
File:                     zZN7FY1kclS-V8_O8GYP38yygWA.roa (raw, json)
Hash identifier:          tapZjYt/Si1I404URLKZ47QBLCoFYD8iVCBWDBNxESE=
Subject key identifier:   CD:93:7B:15:8D:64:72:54:BE:57:CF:CE:F0:66:0F:DF:CC:B2:81:60
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       050E
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/zZN7FY1kclS-V8_O8GYP38yygWA.roa
Signing time:             Thu 29 Feb 2024 01:39:23 +0000
ROA not before:           Thu 29 Feb 2024 01:39:23 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        182.20.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1294 (0x50e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:39:23 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=CD937B158D647254BE57CFCEF0660FDFCCB28160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4c:90:df:b5:a6:b9:a5:bd:23:8b:ea:b9:cc:
                    66:f8:61:1b:5e:c0:6e:91:16:6b:c1:2e:5e:79:71:
                    be:c2:a4:55:62:f1:7a:25:22:7c:e8:6c:fc:e1:84:
                    b4:63:7a:ef:8f:e3:1d:b9:bf:80:94:44:9d:39:88:
                    df:2f:3b:02:84:6d:ef:49:a7:04:c1:bf:ba:b1:5d:
                    65:49:0d:37:1a:3b:a4:ca:f9:a1:a5:01:18:27:0d:
                    47:e5:4d:65:a6:d9:c7:05:22:c2:d4:15:fb:b9:ba:
                    c4:b2:51:a2:44:15:05:75:f5:34:cd:a4:79:9c:9e:
                    c5:10:61:dc:89:34:84:eb:1e:c6:d7:b8:6d:87:bf:
                    e0:2d:e0:af:05:cd:f5:e7:a5:0e:c0:21:4d:60:3f:
                    10:19:f6:af:79:42:3d:98:be:df:14:dd:ab:68:27:
                    44:69:c6:7a:3f:99:8c:71:58:50:56:97:59:7f:13:
                    1a:dc:a9:5d:1f:d6:de:02:2f:56:c2:2b:68:8e:b9:
                    fd:43:e4:83:09:17:46:55:44:d6:2e:de:1e:ac:ff:
                    1f:3f:66:90:97:03:10:3f:3e:59:15:02:62:cf:69:
                    53:49:69:c5:11:d6:f1:61:d4:63:69:e9:7c:0b:5c:
                    43:fa:c7:75:a0:e1:d0:eb:a6:5d:5f:e7:c1:a6:9d:
                    a4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:93:7B:15:8D:64:72:54:BE:57:CF:CE:F0:66:0F:DF:CC:B2:81:60
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/zZN7FY1kclS-V8_O8GYP38yygWA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.20.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:e6:9f:62:7c:c9:5e:24:c3:a8:23:9f:bb:c7:81:d5:41:aa:
         ba:a5:d9:9c:08:3d:48:ca:93:63:92:c2:4a:79:85:23:17:bf:
         99:f4:cf:42:d5:11:27:e0:a0:01:83:55:de:70:f4:55:86:fd:
         a4:24:cb:fc:ed:a1:dc:d4:0a:37:53:d6:88:49:3a:cd:3f:a4:
         88:b4:17:95:f2:da:67:42:7b:90:e3:39:22:9e:5f:8f:06:bb:
         2d:07:44:6f:48:c7:ba:e1:6a:8a:b1:5d:28:f6:1d:f4:6b:6b:
         2c:7c:94:46:c1:80:e1:8a:ff:5b:d9:cb:83:c7:dd:da:95:88:
         6e:6d:b7:13:f1:14:64:ce:e2:ef:d2:c5:90:c5:0b:bd:85:91:
         9e:49:50:84:d7:9a:6a:eb:38:00:25:82:92:00:9f:d6:f3:ae:
         30:26:89:ae:ad:1b:ee:48:de:72:76:00:51:ee:e5:8e:56:0c:
         18:3a:44:d5:96:b6:fe:31:85:a0:84:7a:1b:8b:ba:dd:6f:fe:
         bb:9a:41:2e:31:6c:67:36:b0:22:86:d1:06:d8:58:82:31:ee:
         8a:b1:fa:96:e1:af:bf:35:e8:16:b5:83:09:67:b7:06:6f:58:
         09:a6:df:b8:a6:30:c3:52:a9:5b:82:25:c4:d3:6f:af:17:e8:
         45:71:54:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:41 2024 by rpki-client on console-ams.rpki-client.org