Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/QsajEbH_vncDgIqDC90Q4m8Svd4.roa
File:                     QsajEbH_vncDgIqDC90Q4m8Svd4.roa (raw, json)
Hash identifier:          3jBCP0pEX5o1QJTHsIOvsTaNMQhdQSSsUOXuTWEKs18=
Subject key identifier:   42:C6:A3:11:B1:FF:BE:77:03:80:8A:83:0B:DD:10:E2:6F:12:BD:DE
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       DF
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/QsajEbH_vncDgIqDC90Q4m8Svd4.roa
Signing time:             Thu 29 Feb 2024 01:29:40 +0000
ROA not before:           Thu 29 Feb 2024 01:29:40 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9607
IP address blocks:        203.141.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Feb 29 01:29:40 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=42C6A311B1FFBE7703808A830BDD10E26F12BDDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:82:50:aa:1c:94:b6:7d:85:3f:85:ed:aa:
                    e7:64:c8:c7:76:2a:d8:c2:f9:bb:66:f3:c4:d4:08:
                    8b:7f:d9:d5:ee:68:07:dc:27:5a:15:8d:6f:97:5c:
                    8f:9a:b2:8c:87:29:9f:47:af:a7:ef:15:4c:10:c1:
                    b8:76:ca:ec:5a:16:a9:15:f5:38:df:7b:65:70:b4:
                    a3:dc:40:f5:92:02:26:c2:b3:b2:c2:1b:dd:61:72:
                    bd:13:e4:e2:05:7f:09:ac:15:ae:df:58:a1:4d:21:
                    d6:0a:f6:17:78:9d:41:46:6b:5b:64:f8:d7:a4:f4:
                    22:69:41:62:89:d6:f3:e4:9b:82:0f:4d:82:ee:57:
                    e7:6b:2f:3e:93:11:88:b2:42:79:7e:bc:30:2d:77:
                    ef:9a:07:19:e1:d4:68:6d:f8:44:d2:df:4a:b7:23:
                    8c:da:f7:55:e8:b7:97:34:98:72:c6:5f:dc:41:93:
                    59:a8:ac:eb:27:33:ca:67:d9:68:84:20:64:5c:4b:
                    ae:d6:0a:d0:5b:d0:05:12:a6:90:a5:1e:a6:fd:84:
                    a2:40:66:da:97:43:93:3a:0d:e4:c6:36:32:7c:0e:
                    2b:4c:94:42:15:4d:29:25:9f:25:46:b3:2f:26:20:
                    72:69:03:31:d4:11:65:42:51:a7:a5:79:2f:f4:ca:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C6:A3:11:B1:FF:BE:77:03:80:8A:83:0B:DD:10:E2:6F:12:BD:DE
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/QsajEbH_vncDgIqDC90Q4m8Svd4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:98:13:77:6a:52:d3:0c:61:94:97:73:b1:1d:11:63:fe:ee:
         5f:73:75:fb:95:d7:7a:79:45:c6:b0:0a:85:77:92:0a:3f:53:
         b5:8a:a1:49:45:58:17:57:c1:55:4c:81:3b:0e:95:ff:5d:66:
         12:5a:31:a3:0b:76:63:d5:ac:5e:68:37:8d:09:c2:c4:d3:50:
         dc:ea:bd:93:43:f7:da:81:b3:7c:90:79:03:fb:2e:02:4f:a8:
         a8:cc:ca:f3:78:99:1e:02:63:2d:9a:a2:1e:0c:9b:8e:31:bf:
         a1:66:2b:aa:ea:62:a8:8f:4b:24:80:34:4c:73:a8:7a:db:3f:
         da:e4:c2:12:99:bf:86:8f:a6:58:c9:ce:9b:f3:30:a0:02:34:
         e1:d0:29:9e:0a:76:b0:cf:c6:bb:da:78:69:2f:9c:3f:77:3b:
         64:cc:ea:9f:b1:5f:36:10:1c:b4:cd:94:53:da:ef:6c:52:15:
         99:c1:09:ec:a8:4a:5f:37:6a:ba:4e:30:d2:e2:7b:bb:07:3c:
         3a:9c:c0:a5:5a:5f:89:22:3a:27:44:f0:1b:87:1c:67:c6:3a:
         ca:4f:b2:6f:ee:fb:47:4a:fa:ce:80:2b:69:9c:72:f8:26:54:
         10:e6:a3:1a:21:e6:da:7f:a7:4d:05:ea:08:37:94:10:1f:12:
         31:88:7d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:49 2024 by rpki-client on console-fra.rpki-client.org