Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/1S8pC5JIMPRfaI13O-IPCyiPBEc.roa
File:                     1S8pC5JIMPRfaI13O-IPCyiPBEc.roa (raw, json)
Hash identifier:          xFdbWjUyKRuJFd9nOQyuCvFs/NMZ+YxiYiLW5Tgg3uE=
Subject key identifier:   D5:2F:29:0B:92:48:30:F4:5F:68:8D:77:3B:E2:0F:0B:28:8F:04:47
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       5D
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/1S8pC5JIMPRfaI13O-IPCyiPBEc.roa
Signing time:             Sat 09 Dec 2023 01:46:40 +0000
ROA not before:           Sat 09 Dec 2023 01:46:40 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     7521
IP address blocks:        113.192.22.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: Dec  9 01:46:40 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=D52F290B924830F45F688D773BE20F0B288F0447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:85:2f:71:90:2a:ef:9b:fc:c7:64:d8:b1:f0:
                    47:f1:f3:bf:2e:21:69:b1:a0:9d:84:55:d3:ad:da:
                    76:35:5e:25:89:03:d5:33:6b:b7:48:69:df:a8:ad:
                    e3:d0:e1:9c:76:17:05:2c:02:dc:91:f6:6a:4c:7b:
                    0a:89:74:51:38:2e:61:8c:94:2b:83:1b:49:31:45:
                    46:06:98:72:96:f8:3c:77:7f:f4:57:e3:7c:1d:59:
                    61:52:c3:86:4d:b5:6b:ad:7e:17:cf:ab:0b:ed:64:
                    eb:e0:0a:92:e9:2a:65:8c:43:23:7d:11:41:76:f9:
                    8e:51:6e:45:b3:f2:a5:54:ef:75:1e:9d:68:8e:53:
                    22:c4:bf:5a:f3:82:01:8a:84:d5:02:71:02:3a:e0:
                    a9:2c:b3:9e:26:85:33:80:34:a1:c1:97:37:5d:8c:
                    3e:71:de:a0:45:7f:7c:70:a2:23:53:3b:55:b6:39:
                    a3:2c:ea:90:42:e6:d8:0d:8b:82:6d:79:7e:dd:f7:
                    74:0d:f6:8a:25:52:22:6e:c4:e4:51:c9:7c:c5:d3:
                    ff:85:7f:95:9e:ba:09:77:15:e2:e3:69:43:0b:53:
                    0d:80:97:66:0d:a8:32:5d:2d:8f:64:a2:28:5d:8b:
                    28:f6:98:85:38:6a:0d:71:58:a7:ac:ca:9f:0f:e8:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2F:29:0B:92:48:30:F4:5F:68:8D:77:3B:E2:0F:0B:28:8F:04:47
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/1S8pC5JIMPRfaI13O-IPCyiPBEc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:8b:69:95:8f:3d:d9:9b:ec:99:be:57:29:74:8c:e0:70:ee:
         2c:62:66:78:63:4e:ba:5e:1d:5c:ca:c5:41:a7:f0:7a:2c:4d:
         34:c5:b3:f0:84:ae:b2:be:bc:2f:ec:31:90:45:52:2b:06:7f:
         41:fa:7a:ff:35:f7:87:3f:71:7c:6a:85:32:07:08:eb:cc:52:
         46:4d:fb:3d:83:34:01:37:ce:8f:06:4e:cb:0b:31:84:0b:31:
         a6:cf:25:78:1a:e1:48:4f:66:c8:85:2f:85:df:1f:dd:b0:73:
         86:f0:b7:c7:94:b3:74:4c:e6:9e:71:4b:f4:6c:98:02:cc:48:
         ac:66:ee:91:35:b0:79:0d:bd:89:c6:30:0c:82:d9:f5:ce:dc:
         ef:72:e7:b9:7c:73:57:47:44:3f:49:84:e5:67:a3:0c:53:61:
         cb:bc:87:de:01:3a:0a:56:f4:a6:2b:c5:6f:a5:97:73:21:7d:
         98:1f:78:b2:ac:50:83:f4:6e:30:72:76:60:ff:fa:ab:b3:b9:
         73:73:da:54:b7:39:80:9d:e9:0a:2b:40:17:c2:fa:86:03:f2:
         ff:95:57:e9:04:c0:d9:71:52:b2:cf:79:57:82:16:b6:15:d8:
         0a:10:26:41:e5:95:62:d9:b1:29:58:45:54:e3:87:f6:57:2a:
         9d:41:25:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:12 2024 by rpki-client on console-fra.rpki-client.org