Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/UlZ7n04RDiD-2bzl5ZcwceQi54A.roa
File:                     UlZ7n04RDiD-2bzl5ZcwceQi54A.roa (raw, json)
Hash identifier:          5aEclSdl3lkm8YskmVTxsiF91w22SDctKtdru9mEo0g=
Subject key identifier:   52:56:7B:9F:4E:11:0E:20:FE:D9:BC:E5:E5:97:30:71:E4:22:E7:80
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       09
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/UlZ7n04RDiD-2bzl5ZcwceQi54A.roa
Signing time:             Tue 22 Aug 2023 07:12:14 +0000
ROA not before:           Tue 22 Aug 2023 07:12:14 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9997
IP address blocks:        103.2.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Aug 22 07:12:14 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=52567B9F4E110E20FED9BCE5E5973071E422E780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9f:0b:d8:aa:39:23:d4:6b:08:ca:50:f0:d7:
                    ff:77:e0:8f:ab:b2:39:b1:c9:7d:86:b8:51:13:99:
                    92:94:4d:c4:89:30:87:b0:b9:48:bb:e9:51:0d:a9:
                    d7:68:df:35:66:30:6b:2f:30:2c:14:5f:86:42:1f:
                    ef:16:0f:7d:1f:c0:3d:e8:b0:b6:74:c5:6a:b4:98:
                    4d:19:3c:10:e5:00:d7:2d:a2:88:2d:85:74:09:c9:
                    4f:6b:a7:cc:b5:53:71:e9:0b:0c:4f:03:b3:64:c6:
                    16:44:15:f1:9e:0d:d0:12:cf:25:1a:39:26:55:8f:
                    db:b3:12:6e:f7:20:b6:5a:1d:c6:21:5c:43:fc:e1:
                    d3:0c:04:81:c0:3d:80:17:a6:84:a6:40:d5:2a:a7:
                    4a:6d:37:77:53:52:16:6f:ab:1b:07:2e:51:41:10:
                    fa:aa:23:a0:40:2c:2a:67:98:2c:17:01:76:d2:12:
                    24:c6:7c:05:c8:14:5e:ca:e2:38:df:64:6d:18:d0:
                    f9:e5:0b:a3:07:12:5d:28:b1:7a:6f:b8:cc:2d:cc:
                    d2:e5:51:0f:17:d8:c5:b8:ce:46:35:ee:ae:35:b5:
                    80:54:29:06:ac:86:9e:90:08:db:b3:8f:8f:6e:45:
                    2e:8b:2f:42:e0:e4:89:62:66:cb:28:bc:fd:d8:6d:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:56:7B:9F:4E:11:0E:20:FE:D9:BC:E5:E5:97:30:71:E4:22:E7:80
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/UlZ7n04RDiD-2bzl5ZcwceQi54A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:c0:35:39:a7:34:86:25:05:13:c4:a4:53:e5:06:dd:b4:d8:
         0d:d7:74:9e:60:f5:0d:20:f8:e8:1a:f9:7b:27:f0:cf:95:f3:
         c8:b9:59:56:e9:02:a4:1e:6b:78:40:37:b9:b0:4a:ca:27:01:
         6c:51:6a:28:26:a4:55:6c:ae:ef:34:84:13:09:43:a2:51:cb:
         e0:1e:51:83:fa:c4:b2:e0:e2:ca:43:5b:66:91:7e:89:1e:1b:
         72:fc:25:d3:bd:bd:f3:c0:af:2f:62:c7:a7:35:3d:b1:8c:a0:
         24:52:09:15:b6:2c:e8:2f:5d:53:ec:36:d7:df:e4:e5:c4:64:
         cc:44:17:d3:cf:fa:ab:ec:5e:eb:0a:2c:55:7e:9d:a3:62:97:
         f2:9e:70:3b:74:23:86:ed:d8:90:23:6e:94:fd:fa:78:93:1a:
         1c:97:d4:31:01:5c:0b:a9:88:d3:4c:6f:70:c7:79:69:a4:8c:
         42:63:e1:d4:5f:28:3d:0c:59:2f:02:c7:9f:70:ab:1d:91:b1:
         a7:fb:bf:3d:4a:8b:79:d8:43:e2:da:d6:8d:86:4d:3b:61:8b:
         f7:2c:aa:6d:2f:50:06:e5:9b:88:63:6e:68:46:5e:ff:37:2e:
         02:31:ca:54:8a:6d:8d:a7:9f:1e:ea:83:c5:a3:d5:a4:b3:17:
         0c:92:ad:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:27:10 2024 by rpki-client on console-fra.rpki-client.org