Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/J42LCE73pBwQIeYGMzyMiQsSSoE.roa
File:                     J42LCE73pBwQIeYGMzyMiQsSSoE.roa (raw, json)
Hash identifier:          FdicuIYshOVjNdLznPEyn6OwUTK6HjvQBdOdy7G2b10=
Subject key identifier:   27:8D:8B:08:4E:F7:A4:1C:10:21:E6:06:33:3C:8C:89:0B:12:4A:81
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       0A
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/J42LCE73pBwQIeYGMzyMiQsSSoE.roa
Signing time:             Mon 18 Mar 2024 01:21:37 +0000
ROA not before:           Mon 18 Mar 2024 01:21:37 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     17698
IP address blocks:        103.1.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar 18 01:21:37 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=278D8B084EF7A41C1021E606333C8C890B124A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:b7:73:df:f2:f1:e9:82:f3:42:b0:2a:01:
                    ed:70:41:b5:03:59:8b:92:ba:0c:f6:66:d4:a6:aa:
                    a4:24:d5:7e:11:36:4a:3a:c1:e4:5d:8a:e1:eb:58:
                    fb:6c:fa:21:5a:63:55:ed:a7:96:81:9c:a2:a9:b1:
                    c2:33:dc:0f:9b:2b:62:3c:8d:77:5b:82:f4:18:1c:
                    83:63:8b:64:c0:ca:6f:eb:74:51:e5:14:ab:22:76:
                    70:bf:a2:66:53:b9:b1:27:5e:94:95:f6:b2:4b:80:
                    7f:60:0c:16:2e:e7:d5:e8:1d:52:05:e0:a9:e4:f1:
                    6b:45:2e:e1:6d:ed:32:47:e5:11:d5:25:66:01:cc:
                    6f:37:d0:73:a7:1e:f9:22:36:ef:c7:1b:0d:c4:86:
                    b2:96:86:48:62:12:48:c8:ab:9f:48:0d:8b:ed:57:
                    d8:1a:60:d0:66:57:6b:05:bc:f8:52:69:f3:8a:37:
                    2f:d5:68:40:23:cb:2a:7f:75:2d:e9:23:62:e1:2e:
                    2c:ea:74:7a:40:eb:cd:c5:20:80:dc:22:ac:07:91:
                    5a:8c:9d:a9:69:4c:15:7d:7b:6b:be:99:83:1e:1a:
                    2c:7c:c8:a1:ca:76:8a:f2:2f:b6:e8:c8:55:18:90:
                    83:88:b3:14:6f:47:32:b9:e7:a2:f2:1c:63:a3:a5:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8D:8B:08:4E:F7:A4:1C:10:21:E6:06:33:3C:8C:89:0B:12:4A:81
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/J42LCE73pBwQIeYGMzyMiQsSSoE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:bb:66:06:7c:34:73:47:7a:89:27:50:92:13:68:a6:79:ba:
         87:c8:b3:73:57:0f:e0:e9:94:ed:bb:c0:8b:5b:d2:29:31:00:
         1b:7b:13:25:01:e9:23:fa:c1:32:96:cf:9d:dc:24:26:a4:19:
         4f:00:37:07:c4:93:a1:19:5b:d4:56:8b:3c:ea:fc:38:91:db:
         42:b1:dc:5d:cf:77:74:13:12:df:61:1f:45:b4:1f:b4:40:f5:
         64:69:ac:ab:40:db:7d:04:c3:2f:aa:0c:2f:e2:36:b3:92:29:
         7b:6f:04:9d:aa:b7:37:77:bc:5a:57:0a:5c:98:3b:ec:17:37:
         af:39:e1:43:7b:86:22:24:ac:4a:0c:a7:48:ec:9e:3f:3c:2c:
         8e:a6:86:7c:b8:28:81:52:1e:df:f0:a6:9e:5e:ea:58:24:9e:
         c6:d9:f7:21:82:6e:76:c6:7f:d3:c7:8b:2d:78:81:30:da:a7:
         89:84:37:69:59:58:9d:f8:43:83:ac:b4:75:f9:b4:29:dd:fa:
         a8:87:53:1d:c4:8c:b4:e0:d8:11:9f:ed:29:d1:46:85:9f:e8:
         52:a5:fa:da:0e:0b:40:51:80:79:a5:eb:eb:82:13:e1:52:19:
         3d:f3:f1:78:21:4f:df:ef:d3:2b:6f:ae:2c:f8:d3:93:ee:49:
         fb:43:cb:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:12 2024 by rpki-client on console-fra.rpki-client.org