Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/22042/fMcva7fNNdDgL0HYDCERjMzvv54.roa
File:                     fMcva7fNNdDgL0HYDCERjMzvv54.roa (raw, json)
Hash identifier:          re890hrAuaxrAAiNHUBi3AiacSNYYmE6QaoLTtXRTE8=
Subject key identifier:   7C:C7:2F:6B:B7:CD:35:D0:E0:2F:41:D8:0C:21:11:8C:CC:EF:BF:9E
Certificate issuer:       /CN=48DB89621D264C51723DBC3518BA222BC71FDBF1
Certificate serial:       10
Authority key identifier: 48:DB:89:62:1D:26:4C:51:72:3D:BC:35:18:BA:22:2B:C7:1F:DB:F1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SNuJYh0mTFFyPbw1GLoiK8cf2_E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/22042/fMcva7fNNdDgL0HYDCERjMzvv54.roa
Signing time:             Wed 11 Sep 2024 05:42:45 +0000
ROA not before:           Wed 11 Sep 2024 05:42:45 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     55889
IP address blocks:        103.10.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/22042/SNuJYh0mTFFyPbw1GLoiK8cf2_E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/22042/SNuJYh0mTFFyPbw1GLoiK8cf2_E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SNuJYh0mTFFyPbw1GLoiK8cf2_E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DB89621D264C51723DBC3518BA222BC71FDBF1
        Validity
            Not Before: Sep 11 05:42:45 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=7CC72F6BB7CD35D0E02F41D80C21118CCCEFBF9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:6b:43:69:46:e8:82:88:6f:4f:bb:52:41:
                    f5:73:fa:6c:bf:c1:86:dd:f4:c0:bf:dd:79:88:28:
                    ff:21:6a:76:43:67:78:da:9d:3d:52:be:02:ac:ff:
                    2c:8a:94:02:df:73:d1:13:6b:34:10:12:80:a1:95:
                    cc:47:17:46:2c:73:a3:d3:d8:a3:7f:32:36:f6:63:
                    59:da:34:f6:b7:a8:cc:c6:73:36:16:7b:d1:c6:bb:
                    ee:13:c2:ba:9b:c7:41:ac:06:00:32:be:59:40:35:
                    26:62:9f:14:44:2d:30:5a:49:93:72:e3:63:99:33:
                    94:f0:ac:2a:a3:67:e7:96:65:03:34:58:ee:23:16:
                    22:90:88:92:fb:bf:38:51:4d:32:e9:f2:74:32:ff:
                    82:fe:b2:53:41:d8:f2:be:e7:8d:75:74:e7:d0:05:
                    f6:5d:55:5f:cf:56:47:cd:19:15:ca:ab:98:23:e4:
                    a2:a2:a4:e6:68:52:12:91:45:61:31:28:86:42:03:
                    1a:5b:cf:f9:d5:3e:6f:4c:06:48:4b:06:f4:a5:8e:
                    86:e3:dd:a0:49:c0:7f:02:20:de:1a:73:4a:32:83:
                    75:03:bb:99:92:e2:20:76:e7:04:a9:cf:d3:9c:17:
                    0c:45:f3:29:8c:85:4a:0e:60:15:d4:c0:1d:d7:4c:
                    4a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C7:2F:6B:B7:CD:35:D0:E0:2F:41:D8:0C:21:11:8C:CC:EF:BF:9E
            X509v3 Authority Key Identifier:
                keyid:48:DB:89:62:1D:26:4C:51:72:3D:BC:35:18:BA:22:2B:C7:1F:DB:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/22042/SNuJYh0mTFFyPbw1GLoiK8cf2_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SNuJYh0mTFFyPbw1GLoiK8cf2_E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/22042/fMcva7fNNdDgL0HYDCERjMzvv54.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:a6:3a:48:e7:09:04:f1:3d:91:f6:12:f8:ed:cb:60:b0:46:
         0b:5c:53:4d:97:53:70:7e:88:92:bd:de:a2:40:89:23:c8:8e:
         8d:17:61:51:7e:5f:09:e1:1c:b6:70:bc:2f:52:b5:9c:d1:57:
         40:72:b1:97:66:10:14:8f:6f:78:19:5f:79:ee:69:3c:dc:2e:
         dd:f7:02:dd:5e:66:58:d1:7a:3f:5e:35:c6:f4:39:6c:d5:09:
         4d:e6:a3:4b:88:c5:c8:ab:cf:28:5d:10:e2:bb:14:e8:0d:ac:
         a8:0c:cf:2a:f4:ec:30:c0:56:0c:70:bd:b0:ac:e6:83:6e:68:
         8a:46:47:cc:c5:03:4a:87:a7:48:2a:34:60:be:77:78:c9:27:
         dd:2f:3c:a1:18:a6:ad:4a:7a:7d:e0:1d:0b:a8:1a:03:7e:5e:
         0d:1e:ab:89:39:da:e4:61:4d:a3:9c:4c:56:62:4e:3d:1f:1d:
         73:87:9d:20:d4:e6:06:73:68:a7:85:b2:29:35:ff:c5:35:28:
         20:4d:bc:78:ec:d8:64:1f:8f:d7:6f:d8:c4:fe:ab:94:85:bb:
         c6:db:08:02:29:98:4f:d3:b4:0f:08:e5:a4:86:3c:1c:0c:77:
         45:5f:c5:83:b5:fe:95:61:a1:86:70:41:99:c8:4f:88:92:53:
         4e:e6:fe:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:05 2024 by rpki-client on console-fra.rpki-client.org