Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/cA4SA51tr5skaoJQL38Y9hCsG1A.roa
File:                     cA4SA51tr5skaoJQL38Y9hCsG1A.roa (raw, json)
Hash identifier:          qfvBEZhdA9ouYgV3lfMDAIRmQOxABFAuW+W98uMPM04=
Subject key identifier:   70:0E:12:03:9D:6D:AF:9B:24:6A:82:50:2F:7F:18:F6:10:AC:1B:50
Certificate issuer:       /CN=C3941FA221377E9A206102B848EBB972A8709DD5
Certificate serial:       4C
Authority key identifier: C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/cA4SA51tr5skaoJQL38Y9hCsG1A.roa
Signing time:             Thu 29 Feb 2024 01:29:22 +0000
ROA not before:           Thu 29 Feb 2024 01:29:22 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     55392
IP address blocks:        103.2.252.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 13:34:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3941FA221377E9A206102B848EBB972A8709DD5
        Validity
            Not Before: Feb 29 01:29:22 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=700E12039D6DAF9B246A82502F7F18F610AC1B50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:51:53:0d:e0:6a:cf:f1:b5:29:91:05:87:
                    8f:81:f1:79:21:cd:d8:5c:84:02:ee:37:98:f7:6f:
                    ed:ed:2b:a0:1f:57:f2:bb:0b:e1:00:e5:d9:5e:c5:
                    d9:b1:d7:de:87:c0:68:bd:e2:11:d6:a9:c8:8e:d1:
                    e6:c3:57:fb:15:ae:54:f2:96:b4:5f:b2:c1:76:37:
                    a5:48:b6:11:11:78:68:ec:c7:7f:eb:e8:dd:5e:b6:
                    35:5f:f4:de:f3:6d:92:09:f3:d1:35:2b:26:ce:47:
                    e1:7e:40:1a:27:da:09:ec:b6:17:71:d0:3e:b1:55:
                    4d:a8:35:05:57:f4:64:fe:c0:22:af:e6:51:85:6f:
                    98:58:5b:01:2b:fa:b7:0c:26:64:45:2f:c6:c8:2a:
                    66:cb:d2:f9:72:22:0a:cd:05:72:93:d0:fb:c2:8e:
                    96:a7:30:53:e8:ec:95:b7:6f:1b:25:c9:a4:08:7a:
                    7f:61:83:08:b8:d9:5f:21:c7:23:45:ba:ab:56:ee:
                    bf:da:26:98:26:f1:18:18:b3:24:7a:f5:7c:94:0c:
                    37:a9:49:a8:da:38:77:fd:3f:89:f0:4c:61:3d:ff:
                    8b:86:21:99:16:7e:3d:6c:50:8e:18:2f:11:8e:98:
                    ef:ae:83:d4:18:93:87:7c:12:b7:13:f5:ad:01:68:
                    04:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0E:12:03:9D:6D:AF:9B:24:6A:82:50:2F:7F:18:F6:10:AC:1B:50
            X509v3 Authority Key Identifier:
                keyid:C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/cA4SA51tr5skaoJQL38Y9hCsG1A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:ec:42:1b:d2:18:98:dc:bd:92:ce:5f:ef:7a:49:c5:72:da:
         15:56:ee:97:d3:b9:88:17:bd:be:fb:bc:42:c2:18:dc:15:3d:
         a1:0b:09:2c:2e:5a:d4:1e:f3:c3:a5:98:86:b9:f3:db:09:99:
         7c:05:c9:79:67:bf:15:6b:f6:f9:a5:43:8b:7e:1e:1b:16:3e:
         1f:53:5e:f8:c2:14:1e:8a:7f:3c:73:cb:23:25:51:e1:ff:24:
         99:af:72:ed:7a:85:86:a0:ed:38:44:dc:fa:50:03:15:ac:3e:
         6b:cf:33:07:d1:33:3a:3b:c9:c8:8d:e9:05:4c:ca:7c:3b:70:
         c0:7d:11:6e:11:79:4d:fe:d8:25:f6:e9:4b:ac:92:66:c3:e9:
         2c:a5:86:a6:0f:58:f4:68:fe:ac:07:b2:3c:8d:be:3f:93:99:
         39:fb:9b:21:d5:13:75:f7:3b:d8:07:7a:86:3b:6e:bb:67:85:
         ba:31:c4:71:ef:8e:97:f6:54:ba:6d:58:e3:27:d1:78:c2:65:
         59:c3:b5:43:fc:d6:b3:7f:20:45:7f:70:61:9b:70:41:b3:3e:
         c8:bb:3b:09:a0:02:e4:64:e7:e5:3e:f3:31:bc:01:b0:58:4e:
         e6:9c:f4:b7:a5:f3:36:70:44:74:65:f5:c1:45:32:f2:f0:3f:
         11:58:3b:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 13 14:58:53 2024 by rpki-client on console-fra.rpki-client.org