Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/224/sIJ78rORFfWUleDyPbr0hN7XZPA.roa
File:                     sIJ78rORFfWUleDyPbr0hN7XZPA.roa (raw, json)
Hash identifier:          2tJgb/qtgOlpIvXkYfoH7Tbghmrzi3K4bm2uyFprkEw=
Subject key identifier:   B0:82:7B:F2:B3:91:15:F5:94:95:E0:F2:3D:BA:F4:84:DE:D7:64:F0
Certificate issuer:       /CN=D623C38C2A127007F93E7C840DF875022E51C547
Certificate serial:       02
Authority key identifier: D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/sIJ78rORFfWUleDyPbr0hN7XZPA.roa
Signing time:             Mon 10 Jun 2024 02:09:38 +0000
ROA not before:           Mon 10 Jun 2024 02:09:38 +0000
ROA not after:            Tue 10 Jun 2025 02:00:43 +0000
asID:                     7668
IP address blocks:        202.245.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D623C38C2A127007F93E7C840DF875022E51C547
        Validity
            Not Before: Jun 10 02:09:38 2024 GMT
            Not After : Jun 10 02:00:43 2025 GMT
        Subject: CN=B0827BF2B39115F59495E0F23DBAF484DED764F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:36:7d:4a:3e:b1:a1:e5:e4:d3:b2:1f:5d:
                    98:34:9e:27:b0:cb:35:eb:a4:01:08:4a:a1:e3:cd:
                    e2:cf:b8:fe:80:62:da:2c:ae:06:16:b5:6b:4a:b9:
                    f0:44:65:6c:88:6a:fd:8f:b1:37:83:cd:63:c8:b8:
                    a5:47:72:03:45:71:57:49:e9:40:fc:6c:ac:57:fb:
                    90:a0:b7:e5:00:17:f8:0e:2d:a8:95:4a:0e:03:4d:
                    18:03:ae:24:9e:02:cc:e3:e9:65:5f:47:b7:d8:1f:
                    3b:79:36:32:8a:45:7f:b3:12:03:3b:5c:89:ae:05:
                    d9:a1:99:52:89:f8:76:96:af:ec:5e:0a:c5:19:b9:
                    c1:3c:80:8e:9b:25:c4:01:37:a0:11:d3:f2:78:67:
                    2c:9b:ea:bf:04:bb:0d:da:3a:f9:39:8f:b3:9b:46:
                    7d:2a:3e:f4:c7:fb:92:c5:57:46:11:79:65:6b:4a:
                    05:9a:48:63:30:88:c5:4d:42:50:b1:78:b1:1c:85:
                    fd:66:76:66:61:dd:51:62:a3:ca:10:f9:fa:0a:63:
                    d2:f6:ea:2e:02:a9:90:8e:24:c4:ca:c4:bf:3a:48:
                    32:c1:c2:01:2c:78:d5:66:ca:94:54:29:21:09:be:
                    ba:f9:08:46:7e:a2:d3:81:8c:3d:a7:ba:02:b6:67:
                    11:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:82:7B:F2:B3:91:15:F5:94:95:E0:F2:3D:BA:F4:84:DE:D7:64:F0
            X509v3 Authority Key Identifier:
                keyid:D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/sIJ78rORFfWUleDyPbr0hN7XZPA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.245.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:95:c9:7b:15:82:a7:67:3e:08:a0:9c:95:c4:35:b2:ca:e2:
         cf:59:f1:e9:98:81:b8:a0:c9:3d:ee:a5:e4:f7:f7:f3:00:de:
         bb:32:58:10:16:cf:7a:0d:62:7c:a0:76:f6:96:38:ba:dc:0d:
         c7:62:f0:04:6d:70:4e:9e:50:a9:aa:d5:3f:81:39:98:8c:5f:
         a3:bd:3e:25:de:08:53:fa:02:a7:b1:bf:a7:f2:6b:08:d6:03:
         aa:25:e7:92:6f:2c:3e:30:ab:8a:73:d2:de:9a:1e:ed:38:a2:
         bf:c7:b0:08:0f:ee:a9:3b:a9:70:5d:b2:c0:b1:3e:10:a2:c8:
         97:06:d2:33:3e:1b:8a:ac:69:f9:df:8f:27:fb:eb:01:21:56:
         33:8e:8f:e2:58:4b:c7:e3:fa:4d:99:36:44:f4:31:5d:d6:b0:
         01:19:eb:bb:b4:0c:11:cd:ba:cf:6a:60:38:90:14:15:7f:a9:
         3d:78:c8:4f:ff:ca:ee:f2:32:77:13:8d:fd:5e:e5:a2:c2:b8:
         19:e9:d2:e1:1b:f6:51:e8:af:61:68:47:e1:a2:be:92:c6:c0:
         b6:cf:7c:b7:f7:f7:c1:6a:b8:5f:a0:69:be:7b:82:9a:c4:da:
         11:09:b8:94:26:ad:30:26:ba:64:24:82:33:8a:bc:56:c3:63:
         0c:19:42:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:05 2024 by rpki-client on console-fra.rpki-client.org