Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/2pwSxL04d4js0gSjEHAHJASy-tU.roa
File:                     2pwSxL04d4js0gSjEHAHJASy-tU.roa (raw, json)
Hash identifier:          lXmCJEtJ/e5xTGwMIY7ZRiRFUWm7TJvoPP9RGpuftYg=
Subject key identifier:   DA:9C:12:C4:BD:38:77:88:EC:D2:04:A3:10:70:07:24:04:B2:FA:D5
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       C6
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/2pwSxL04d4js0gSjEHAHJASy-tU.roa
Signing time:             Tue 01 Aug 2023 01:30:36 +0000
ROA not before:           Tue 01 Aug 2023 01:30:36 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     55898
IP address blocks:        211.14.26.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Aug  1 01:30:36 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=DA9C12C4BD387788ECD204A31070072404B2FAD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:10:a7:b5:e8:78:ef:49:54:1a:aa:5c:19:
                    46:bf:6b:92:4e:51:57:7c:3e:c0:1b:b3:6b:3d:f0:
                    bb:0e:ce:70:e1:12:a4:23:12:ec:92:49:62:10:ff:
                    c7:c5:53:1d:bf:f3:08:5d:b7:a5:cf:39:c5:2f:d5:
                    bb:01:e8:ef:94:e8:72:4b:5c:1a:bb:22:22:29:ae:
                    c3:a8:bf:1a:fb:2d:1a:e4:a2:6f:e0:c1:f2:12:55:
                    14:b4:bc:2f:21:1d:ff:80:49:50:5b:8c:ad:fc:d9:
                    de:f3:a9:b5:23:43:e2:f1:be:19:61:06:d0:dd:ec:
                    df:45:5c:da:48:fc:12:01:0b:8d:19:57:75:d6:de:
                    6d:42:e8:bb:7b:46:82:77:51:f7:6f:65:8c:95:41:
                    45:5c:51:cc:11:9e:79:52:bf:b6:71:d8:51:59:7b:
                    f8:64:df:01:d3:c9:b9:16:b3:97:29:63:92:4a:e9:
                    97:48:12:4f:c9:70:d2:5f:c4:11:bf:57:93:b2:10:
                    4c:f5:46:bb:02:19:c3:e1:51:a4:bd:2c:ee:d7:b6:
                    bb:5a:8f:4d:59:c4:d5:8a:06:2b:8b:eb:80:73:5f:
                    5e:de:35:37:ee:19:c6:1c:b6:36:a9:49:10:75:a2:
                    dd:fd:73:8c:36:43:43:47:b7:a8:f7:5d:ad:0f:8f:
                    56:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9C:12:C4:BD:38:77:88:EC:D2:04:A3:10:70:07:24:04:B2:FA:D5
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/2pwSxL04d4js0gSjEHAHJASy-tU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:49:3b:93:20:0c:71:cf:51:06:f0:23:f4:d8:51:81:30:9b:
         14:60:4d:ab:d3:cd:f7:c8:ca:b3:e4:3d:7e:c8:8b:bf:c8:9e:
         ad:2d:c1:0c:1f:96:0e:49:f2:43:02:ec:d0:05:e9:58:de:8c:
         9a:38:5d:4d:18:39:ef:fc:e7:d4:83:93:95:c7:20:41:c9:0a:
         89:02:ae:9b:76:ab:da:12:14:1b:3c:10:66:60:67:fd:37:42:
         95:33:83:d0:36:97:cc:a5:ae:58:45:32:57:57:40:13:2b:a8:
         ff:b3:70:16:18:19:0a:b5:f3:1b:a8:9c:30:5a:97:63:9f:db:
         0b:47:c6:ea:d6:9d:b1:6a:1f:70:ef:d8:15:ec:c2:ab:97:36:
         36:e9:43:01:35:8e:cf:3c:9f:eb:45:fb:8b:34:ea:5a:6a:3e:
         de:f6:f5:34:74:2c:5e:00:2d:02:87:f3:13:1b:d3:fd:6b:6e:
         64:62:5a:14:d1:d5:18:ad:f5:7f:d9:e8:89:e5:ce:2d:d4:74:
         42:f5:4e:39:31:a2:ed:bf:73:73:76:74:27:10:85:19:da:74:
         b7:67:48:c0:8f:6e:2e:26:1c:c0:99:36:f0:e7:62:b1:75:f9:
         21:44:33:a5:ca:45:13:e2:c6:50:2f:51:f6:d5:14:cf:0d:98:
         9e:f7:a1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:13 2024 by rpki-client on console-fra.rpki-client.org