Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20053/MzL2w-fOogmBDVjBtK9dP6bk5uY.roa
File:                     MzL2w-fOogmBDVjBtK9dP6bk5uY.roa (raw, json)
Hash identifier:          oDTeBznF2ixTFgMlCHgAbhn4d8b/jugb7G1iXmhiqak=
Subject key identifier:   33:32:F6:C3:E7:CE:A2:09:81:0D:58:C1:B4:AF:5D:3F:A6:E4:E6:E6
Certificate issuer:       /CN=151B1BA80303A776F3F7B431110766C66671EC16
Certificate serial:       02
Authority key identifier: 15:1B:1B:A8:03:03:A7:76:F3:F7:B4:31:11:07:66:C6:66:71:EC:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FRsbqAMDp3bz97QxEQdmxmZx7BY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/MzL2w-fOogmBDVjBtK9dP6bk5uY.roa
Signing time:             Thu 18 Apr 2024 07:56:43 +0000
ROA not before:           Thu 18 Apr 2024 07:56:43 +0000
ROA not after:            Fri 18 Apr 2025 07:41:21 +0000
asID:                     131926
IP address blocks:        103.104.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/FRsbqAMDp3bz97QxEQdmxmZx7BY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/FRsbqAMDp3bz97QxEQdmxmZx7BY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FRsbqAMDp3bz97QxEQdmxmZx7BY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151B1BA80303A776F3F7B431110766C66671EC16
        Validity
            Not Before: Apr 18 07:56:43 2024 GMT
            Not After : Apr 18 07:41:21 2025 GMT
        Subject: CN=3332F6C3E7CEA209810D58C1B4AF5D3FA6E4E6E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bc:eb:6d:e0:dc:cd:fc:0f:d0:a4:6f:e1:df:
                    1c:68:a1:cb:31:3b:39:c1:e2:5b:c3:f2:43:ed:27:
                    55:5c:5d:be:75:c0:c4:ec:c1:44:37:cf:b8:ef:26:
                    fd:55:21:d5:d2:4f:ec:9b:63:4c:a1:4e:19:4c:00:
                    ce:0f:a5:5b:37:ec:32:99:e4:f3:41:ac:8a:9a:ae:
                    35:71:f8:84:ad:e4:aa:14:72:72:08:72:68:3c:d2:
                    87:80:8e:52:e0:f6:a5:42:5f:88:d6:61:c3:74:6d:
                    85:83:45:70:d8:c8:7b:67:d5:01:ce:9e:cb:e9:9d:
                    53:15:e6:e0:e6:a1:67:48:55:45:15:6c:d8:24:86:
                    99:ef:ca:91:cd:a0:07:01:bc:5e:2e:df:5e:2b:a9:
                    ff:63:6a:f2:f2:df:34:f2:31:45:f1:63:29:fa:d9:
                    f3:f1:1c:a5:f4:11:be:8f:54:1a:0f:59:73:b4:a7:
                    c3:20:e9:54:45:b4:0b:3c:c3:f0:d8:c9:6c:e2:98:
                    e8:25:d5:93:e3:3b:3e:1f:f7:e8:c8:92:0f:bd:1d:
                    f0:08:c7:b7:17:cf:9a:c2:15:a2:3e:61:a2:fe:93:
                    68:a2:92:bc:ac:95:72:46:ee:b0:c2:63:da:9d:2e:
                    a7:d7:e7:d1:06:17:bd:04:3b:6e:51:72:00:97:69:
                    34:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:32:F6:C3:E7:CE:A2:09:81:0D:58:C1:B4:AF:5D:3F:A6:E4:E6:E6
            X509v3 Authority Key Identifier:
                keyid:15:1B:1B:A8:03:03:A7:76:F3:F7:B4:31:11:07:66:C6:66:71:EC:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/FRsbqAMDp3bz97QxEQdmxmZx7BY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FRsbqAMDp3bz97QxEQdmxmZx7BY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/MzL2w-fOogmBDVjBtK9dP6bk5uY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:f6:d0:2c:f4:df:af:66:00:7d:20:a2:95:f7:33:9b:3a:46:
         a1:bb:d8:07:55:ba:57:6f:f4:8a:e5:e4:27:db:9b:de:e8:99:
         86:24:b5:ca:69:1c:b8:87:18:e1:8d:e5:a9:1d:40:db:d2:7c:
         45:25:a1:c7:28:27:6b:3a:25:6c:a1:36:4a:59:4a:14:ab:e4:
         54:47:ef:45:e3:9b:80:b1:f8:ad:3b:77:b6:23:6c:2f:62:c8:
         ef:44:22:08:e3:03:6a:87:29:d4:de:23:f0:2c:aa:78:4c:92:
         15:13:e3:b8:41:47:8d:4e:42:06:c7:93:75:a6:ef:02:69:f9:
         90:27:8e:70:7d:22:8c:35:b3:b2:b4:50:d6:71:db:24:11:14:
         21:ad:c9:db:ed:bc:2b:89:81:62:52:2f:a0:1e:0d:51:2a:3f:
         8c:49:31:b7:de:ec:86:66:14:74:d5:41:3b:69:35:32:a2:1c:
         17:d2:6e:a8:22:10:54:f8:df:8d:a4:f0:28:ee:18:6d:9a:42:
         0c:78:b5:d4:b7:cc:7c:51:84:7a:29:80:71:54:32:e7:6b:e9:
         86:cc:e1:59:b8:56:1f:57:73:3d:73:0b:df:97:0a:41:73:b6:
         24:39:a7:ce:e7:e5:f7:39:7d:0d:cf:28:2a:3a:a5:01:94:17:
         21:f8:a6:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:10 2024 by rpki-client on console-fra.rpki-client.org