Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/f95txCXVFZI1LBpVFmwRAf6BrC0.roa
File:                     f95txCXVFZI1LBpVFmwRAf6BrC0.roa (raw, json)
Hash identifier:          ooWDkP90q/x0biy/+MXCtr4sJju/bMfuF+num+i4Hbg=
Subject key identifier:   7F:DE:6D:C4:25:D5:15:92:35:2C:1A:55:16:6C:11:01:FE:81:AC:2D
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       CA
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/f95txCXVFZI1LBpVFmwRAf6BrC0.roa
Signing time:             Tue 01 Aug 2023 01:30:38 +0000
ROA not before:           Tue 01 Aug 2023 01:30:38 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     55898
IP address blocks:        211.14.28.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Aug  1 01:30:38 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=7FDE6DC425D51592352C1A55166C1101FE81AC2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:5e:b6:ee:b5:ea:69:2b:09:3d:aa:5d:e7:
                    f0:76:e3:10:82:00:e4:a7:05:6d:3f:85:9a:31:df:
                    83:7c:52:38:1a:5e:04:01:81:e0:a2:34:82:5e:fa:
                    f1:e4:43:8a:d5:fe:11:4b:0b:31:22:49:34:d0:ab:
                    57:ad:35:5b:bd:cd:a6:96:35:34:33:4e:31:89:4e:
                    5a:90:71:5d:f3:c6:c3:2b:5a:8f:5a:aa:49:ee:98:
                    16:32:3e:67:5f:6c:ad:df:6b:01:3f:73:35:f6:15:
                    06:58:a0:b4:e2:4a:a0:9b:32:5a:a1:50:1a:53:f8:
                    ec:9a:6b:4f:e5:a3:40:71:e3:81:c8:4d:c2:7c:5e:
                    32:ec:04:0c:52:d5:6a:a9:ef:ec:6c:3d:1f:b1:52:
                    f0:95:7d:df:1d:09:36:21:01:ac:0f:23:9f:a7:ef:
                    fc:f5:07:5b:61:db:e2:71:26:ae:48:72:6c:a6:ae:
                    77:46:af:89:08:60:f1:7b:26:3e:32:15:95:d1:0d:
                    da:5e:fd:85:1d:b7:a8:4a:75:4b:72:be:c2:2d:0c:
                    e0:f7:d8:a0:44:87:35:a5:77:b9:64:9d:65:de:41:
                    6f:7d:0b:d6:b5:ab:df:37:3c:a3:45:c6:62:0b:39:
                    03:b9:84:44:12:ac:ed:81:ef:d4:14:a9:82:c7:0d:
                    10:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DE:6D:C4:25:D5:15:92:35:2C:1A:55:16:6C:11:01:FE:81:AC:2D
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/f95txCXVFZI1LBpVFmwRAf6BrC0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:f2:63:c1:dc:67:e6:e9:64:e4:18:44:8c:f8:05:e2:79:b9:
         ea:68:a6:8d:69:d6:a5:0f:6c:a0:10:5a:b2:35:9c:09:8f:11:
         8a:2c:31:ab:50:1a:41:7e:39:66:de:43:53:4e:35:a8:28:e7:
         11:5d:cd:94:fd:44:39:43:2a:73:94:1d:b4:39:9a:59:28:7d:
         3c:c5:e2:4b:e4:78:d1:0a:91:6e:9a:57:d5:bf:c5:7c:9f:5d:
         a8:36:19:ea:58:93:4e:4f:09:3f:81:a6:eb:14:e7:2b:6b:60:
         f1:d7:47:e1:d3:b7:bf:f8:a1:da:26:42:56:b4:e8:90:6a:f8:
         42:57:ca:d1:b6:22:2b:84:b8:86:d3:ff:61:77:b2:6f:55:cc:
         c0:df:d1:bf:af:b4:72:a0:92:a9:6c:a2:1d:b6:6a:80:60:20:
         19:b6:2a:31:6c:65:90:60:0d:9d:0c:d7:d9:50:6a:ed:ad:d8:
         5b:af:17:a7:a3:b2:dd:a3:a3:bf:fa:ba:94:9c:ca:3c:ef:b1:
         1f:50:e6:fd:87:30:61:b6:d2:36:ec:6a:1b:b4:a2:69:b4:d7:
         6b:4c:6b:b0:7d:49:4b:0a:60:82:89:88:c7:ea:4d:0b:0f:26:
         e8:20:06:cb:36:33:dd:81:11:40:8f:d8:63:8f:bd:46:a1:eb:
         04:70:ed:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:49 2024 by rpki-client on console-fra.rpki-client.org