Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/RPMONOLNHIlaU0E7nMfOfY73qJQ.roa
File:                     RPMONOLNHIlaU0E7nMfOfY73qJQ.roa (raw, json)
Hash identifier:          TWZ9Ac+MKN6ertGvphHRsgkqV3QN/JjpO8Xt9bBur90=
Subject key identifier:   44:F3:0E:34:E2:CD:1C:89:5A:53:41:3B:9C:C7:CE:7D:8E:F7:A8:94
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       C7
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/RPMONOLNHIlaU0E7nMfOfY73qJQ.roa
Signing time:             Tue 01 Aug 2023 01:30:36 +0000
ROA not before:           Tue 01 Aug 2023 01:30:36 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     55898
IP address blocks:        103.2.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Aug  1 01:30:36 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=44F30E34E2CD1C895A53413B9CC7CE7D8EF7A894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:19:26:ba:65:18:a4:9c:8b:13:1f:94:7b:da:
                    70:ed:14:1d:4a:f0:8b:cb:6c:a2:23:01:c3:89:f9:
                    8e:7f:ea:4a:12:b8:49:f1:c2:42:b4:36:95:f1:f2:
                    b6:e5:c6:6a:63:27:4e:f7:f1:0c:30:26:5b:c6:ef:
                    db:a4:24:b2:8c:66:47:fb:15:ca:f0:b1:93:8d:b2:
                    75:f3:8f:41:3e:7d:ec:1f:26:0f:81:aa:59:9f:b0:
                    6e:eb:15:12:56:70:75:7d:9e:9e:17:21:02:1c:84:
                    ea:81:59:d7:79:58:5e:fb:e5:c3:01:a1:84:31:a2:
                    ac:f8:bf:28:d8:41:79:69:1d:f5:d1:81:e8:8d:76:
                    45:e9:d8:23:8c:7a:e0:01:45:fa:cb:8c:b5:55:fe:
                    42:2e:76:68:28:dc:e0:3c:1e:58:7b:27:ca:0f:ce:
                    5e:7d:40:87:90:45:cf:ee:43:36:ad:8b:99:92:8d:
                    cf:23:6f:55:cd:29:76:38:15:0b:ee:e9:e5:60:9b:
                    91:ab:fc:0a:4d:ba:df:04:4f:4a:5c:a3:12:e4:3e:
                    c7:9d:3f:91:43:50:8f:49:99:f6:99:8c:91:aa:dd:
                    76:1a:c9:2b:59:c2:44:58:b7:60:83:43:b9:8f:8a:
                    6c:b9:a6:26:96:27:97:f5:0e:de:f1:b7:f1:cb:77:
                    57:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F3:0E:34:E2:CD:1C:89:5A:53:41:3B:9C:C7:CE:7D:8E:F7:A8:94
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/RPMONOLNHIlaU0E7nMfOfY73qJQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:ba:18:ee:0e:76:f0:16:27:c4:ab:9b:8e:ce:28:f7:9f:a0:
         cc:de:5e:bc:a4:e8:e3:f3:1f:ef:53:e2:4f:a8:c8:16:f5:21:
         5d:9f:77:27:d6:56:93:a4:0d:c2:38:ad:e0:52:45:6e:49:1a:
         19:05:0b:54:b4:18:4f:0e:9e:dd:cc:82:23:62:5b:14:e1:b0:
         27:e0:c8:cf:9e:65:23:a3:78:c7:98:9d:47:6c:e8:ff:76:8c:
         cb:77:cd:95:9f:7b:68:70:5c:44:6b:c8:9f:b6:ba:b2:04:93:
         32:d4:9a:41:8c:a0:c6:b6:ee:63:5d:70:e4:22:b8:e3:aa:41:
         7c:4e:d2:be:7d:33:95:1a:09:40:75:3e:8e:0f:a2:9b:63:f1:
         ae:c6:18:87:f2:e8:1e:f0:fa:0d:81:d7:3b:65:98:30:91:dd:
         15:4c:ac:b2:75:6e:0c:64:5a:0d:8a:85:b7:ed:51:52:f2:68:
         98:c8:73:c2:0b:e0:4b:77:b1:6e:b6:1b:62:2a:fd:7d:8c:cd:
         d0:52:bf:af:48:68:7c:14:1e:3e:fb:f2:40:a3:d3:0c:e1:03:
         f1:c2:ad:90:f6:66:03:2c:65:af:96:2c:fe:2e:8c:89:7c:46:
         8c:5c:7e:03:b1:50:55:27:28:fb:a2:dd:93:3f:9d:98:64:cf:
         ee:7e:d7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:49 2024 by rpki-client on console-fra.rpki-client.org