Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/0yRrXig3xIdcOJMvxg5wSrQbZNA.roa
File:                     0yRrXig3xIdcOJMvxg5wSrQbZNA.roa (raw, json)
Hash identifier:          LWfu1tWKr2XubGEOwgY7RY+sHnHQU51LlCuEoA7/xqw=
Subject key identifier:   D3:24:6B:5E:28:37:C4:87:5C:38:93:2F:C6:0E:70:4A:B4:1B:64:D0
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       CE
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/0yRrXig3xIdcOJMvxg5wSrQbZNA.roa
Signing time:             Tue 01 Aug 2023 01:30:39 +0000
ROA not before:           Tue 01 Aug 2023 01:30:39 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     23816
IP address blocks:        211.14.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Aug  1 01:30:39 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=D3246B5E2837C4875C38932FC60E704AB41B64D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fd:ca:0d:d7:d7:f6:01:cd:bc:85:b7:c6:28:
                    98:c8:6e:46:5d:34:e7:ad:16:8a:1f:c9:f0:cd:0d:
                    8a:9d:c4:3a:9a:26:a6:02:a3:3c:97:57:b2:b7:57:
                    37:f5:73:a8:b7:a1:f1:0f:a2:fb:9a:de:b4:ca:ff:
                    3b:cd:24:d8:04:42:9b:f2:31:70:5a:55:15:00:e4:
                    64:35:4c:61:21:4d:d9:88:52:eb:13:9f:d9:72:1f:
                    94:07:00:73:9c:df:10:47:28:51:40:8f:dc:84:55:
                    01:43:06:d1:48:93:92:a5:d7:29:4e:c9:a8:36:a7:
                    82:70:a1:23:d3:b8:5c:d8:39:a8:e6:51:ef:02:aa:
                    5b:e8:e9:a7:f0:25:31:a1:7c:35:c6:00:0e:42:2b:
                    26:00:17:c5:63:30:a5:36:b5:54:25:00:8c:30:d8:
                    c1:03:07:78:41:71:30:e2:92:f4:44:f4:05:16:fe:
                    33:81:e2:42:d8:4d:78:eb:7d:e1:80:ee:c9:55:d6:
                    d2:67:a4:b0:b3:94:40:dd:68:05:7e:c3:2a:dd:d8:
                    d0:c0:7a:bd:ba:92:a4:cd:2e:79:16:38:83:47:e4:
                    fc:bd:3e:e3:1c:c3:28:6f:ba:a3:96:d0:1d:78:94:
                    61:0c:66:97:6f:cb:25:a4:3d:9a:d7:bd:88:96:9d:
                    77:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:24:6B:5E:28:37:C4:87:5C:38:93:2F:C6:0E:70:4A:B4:1B:64:D0
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/0yRrXig3xIdcOJMvxg5wSrQbZNA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:9b:73:93:0a:08:69:f1:c4:04:5f:7e:26:63:77:a7:3e:80:
         fb:ed:0f:c3:4e:9f:f6:77:15:5f:52:18:13:8c:7a:85:85:86:
         c6:8d:67:ce:2d:b7:15:8d:b3:55:12:91:79:05:c6:54:83:f6:
         25:9c:bf:b2:ae:b4:13:10:0f:a9:14:e0:5c:0c:5b:3a:97:eb:
         fc:2d:56:71:28:73:5a:2b:75:86:0b:78:46:d7:a1:6f:6f:3b:
         e8:23:d5:1b:bb:ee:43:fc:02:b6:b8:90:ad:8a:c1:4a:bc:3e:
         29:b9:2d:f4:3b:53:f8:43:1a:9a:5f:84:57:5e:fa:68:0e:fe:
         07:a5:9e:aa:dc:8d:0d:56:07:a7:03:ef:7a:db:67:92:89:5d:
         cc:3b:49:d9:18:92:c6:5c:c9:5a:5d:0a:06:93:9b:83:93:de:
         be:68:ec:bc:18:bc:1a:d2:e3:49:2e:84:88:3f:58:07:07:bf:
         77:7c:9c:ab:80:0a:52:ab:f4:ae:77:3d:28:8a:0d:94:92:9f:
         e7:1a:da:b8:11:57:e9:b3:8b:9b:b4:a7:35:00:99:9a:a7:c2:
         3d:93:9c:98:18:01:dd:6d:f9:81:72:dc:cf:30:17:f0:b8:22:
         13:d8:ce:13:60:b5:ef:7d:30:53:e3:05:3f:41:eb:c7:7d:5e:
         f3:38:72:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:23 2024 by rpki-client on console-fra.rpki-client.org