Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/RBP74tkbd9Chm8mPFBZYSJR4wgc.roa
File:                     RBP74tkbd9Chm8mPFBZYSJR4wgc.roa (raw, json)
Hash identifier:          JoluxqScXU0M4T4mS2w35jvf1jXOVJbyv+L9RmjLj00=
Subject key identifier:   44:13:FB:E2:D9:1B:77:D0:A1:9B:C9:8F:14:16:58:48:94:78:C2:07
Certificate issuer:       /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial:       1E
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/RBP74tkbd9Chm8mPFBZYSJR4wgc.roa
Signing time:             Mon 20 May 2024 06:51:53 +0000
ROA not before:           Mon 20 May 2024 06:51:53 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     7672
IP address blocks:        103.225.120.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
        Validity
            Not Before: May 20 06:51:53 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=4413FBE2D91B77D0A19BC98F141658489478C207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:6d:14:36:7d:9c:47:d4:20:1c:00:cd:32:
                    d4:03:e8:73:28:57:4d:8b:84:62:21:3d:c7:46:79:
                    a8:c6:b7:5d:1d:0e:59:1e:f2:5e:0e:df:9a:08:3f:
                    1b:6f:58:8f:ea:32:e9:8b:3f:2e:c4:71:f4:0e:62:
                    b4:c9:15:52:98:4a:95:56:0a:c6:f3:21:a6:04:f9:
                    09:37:6f:2b:0c:17:cb:28:97:28:51:6c:bb:2e:16:
                    35:d4:a3:0c:9b:e5:a6:53:cd:2e:95:b6:0e:d1:06:
                    1e:ab:fc:82:5d:41:33:d8:af:96:1c:ba:51:0e:0e:
                    87:2a:01:28:54:9c:58:c8:d9:d2:88:23:7a:bf:00:
                    7f:fb:19:31:7d:14:0e:7d:00:3b:ee:66:00:7e:24:
                    2e:80:ef:68:61:c5:ed:07:3e:6c:5a:c5:7f:cc:65:
                    cf:2b:44:80:38:b7:d9:75:b6:fd:a0:da:ac:66:a5:
                    04:e1:88:d0:71:c2:f9:ce:d9:5e:8a:ca:a1:98:80:
                    35:6f:81:0c:ee:92:ac:8c:58:43:10:eb:be:10:0b:
                    00:93:aa:48:c3:e2:e5:45:9a:4c:9d:19:bd:e5:74:
                    2b:3a:35:62:6e:c6:29:e0:c0:80:fa:5b:5b:09:7a:
                    36:49:0b:74:eb:92:0a:68:b0:b1:35:a0:e1:fb:72:
                    bc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:13:FB:E2:D9:1B:77:D0:A1:9B:C9:8F:14:16:58:48:94:78:C2:07
            X509v3 Authority Key Identifier:
                keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/RBP74tkbd9Chm8mPFBZYSJR4wgc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:d9:18:6c:d7:46:9b:db:35:11:f1:32:38:48:17:b2:f4:ff:
         82:62:af:cd:29:b6:d7:8d:90:cd:bc:9b:fa:0f:d8:2e:08:cd:
         bc:33:1e:5e:f6:9e:ba:3a:98:2a:8d:7e:b7:5c:fb:9a:d9:fb:
         ef:04:62:c1:ea:c7:5d:fc:be:61:07:5e:8b:5c:8c:ff:ea:c8:
         79:26:63:61:a0:52:fd:f5:84:d9:76:73:98:28:8b:90:05:5b:
         9e:7f:82:e7:27:b6:c2:5e:44:57:a3:cc:ca:95:9e:fd:d7:82:
         f8:9f:e3:5d:54:6e:8f:7e:bc:6a:37:1c:f8:5b:33:13:e6:63:
         94:3e:f8:32:da:b7:8f:82:00:90:3c:28:8b:94:63:57:fb:85:
         1a:cd:40:9b:df:84:f3:57:d0:3a:9c:27:5f:03:c8:f6:92:fd:
         da:7c:8e:23:12:6e:b7:69:81:68:7c:9d:03:b9:fb:aa:e1:2b:
         10:66:22:11:ad:64:12:9e:27:22:97:8b:3d:b1:e3:0e:03:ed:
         6f:3c:03:ca:04:aa:21:35:fb:e3:69:6a:58:cd:cb:5a:29:b8:
         b6:69:35:7d:e9:7c:69:99:7c:fa:db:6f:9e:af:7f:6d:01:67:
         ce:94:3c:f8:23:72:53:c3:5a:46:c6:18:a0:b5:e1:72:7a:73:
         51:fe:b4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org