Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/tu44eswNZGFYex5tK10QOJ433zQ.roa
File:                     tu44eswNZGFYex5tK10QOJ433zQ.roa (raw, json)
Hash identifier:          mEmufSIlHKCAaXCOwiKvsOOGAv1xUrJo8JS2arA75sc=
Subject key identifier:   B6:EE:38:7A:CC:0D:64:61:58:7B:1E:6D:2B:5D:10:38:9E:37:DF:34
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       C8
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/tu44eswNZGFYex5tK10QOJ433zQ.roa
Signing time:             Tue 01 Aug 2023 01:30:37 +0000
ROA not before:           Tue 01 Aug 2023 01:30:37 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     55898
IP address blocks:        203.141.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Aug  1 01:30:37 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=B6EE387ACC0D6461587B1E6D2B5D10389E37DF34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9b:99:6e:80:99:91:9e:da:c4:79:74:71:7f:
                    23:24:49:25:c6:8a:64:b7:e1:ad:e3:11:05:9d:0c:
                    23:e0:4b:c9:46:20:06:f9:92:59:3b:7f:c6:98:51:
                    fb:f9:61:03:87:09:08:0d:e5:af:2c:05:a4:60:43:
                    f3:e5:3e:09:39:a7:e9:37:e9:b7:a3:48:45:ca:68:
                    f8:89:84:51:47:80:cd:fe:5e:07:4c:b7:ed:0c:0a:
                    f1:82:f1:3a:e1:54:cd:e1:f0:82:c7:5f:33:14:05:
                    59:2b:bf:1f:fa:27:d6:9b:85:c7:c2:b8:75:05:e4:
                    7c:f7:a6:37:70:54:67:d7:6c:f0:ff:ba:f1:ee:eb:
                    6f:2a:b4:f9:51:27:5c:d8:a9:77:80:ac:ce:1c:8d:
                    e4:13:e3:71:63:86:b0:07:ae:3d:3a:02:99:a4:4f:
                    c0:7f:02:07:ba:da:c9:a9:25:53:c3:a6:99:6c:a8:
                    01:45:8b:fb:90:54:6a:a6:f2:bb:7b:e9:47:84:94:
                    77:4d:12:a7:fd:e6:a2:1d:50:2e:c9:e2:91:14:30:
                    48:0c:bc:8c:57:66:82:67:a2:43:4d:84:bc:ae:22:
                    ee:16:60:c2:96:64:f3:8c:5c:2e:2c:2c:bb:b2:2f:
                    21:42:70:50:51:23:b5:27:aa:c7:2d:44:24:06:db:
                    c7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EE:38:7A:CC:0D:64:61:58:7B:1E:6D:2B:5D:10:38:9E:37:DF:34
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/tu44eswNZGFYex5tK10QOJ433zQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:f8:f9:54:25:5b:80:f0:1d:3a:89:a0:7c:76:76:2e:91:90:
         2b:c5:8b:39:86:d4:9a:7b:d4:e2:0c:cf:d8:32:27:96:46:ca:
         89:14:fa:65:77:e3:9f:67:9d:55:b8:b2:68:5c:7a:d6:29:b8:
         0f:c9:b3:1d:34:7c:e8:b1:1e:65:01:be:c2:29:90:c3:39:79:
         71:ef:c0:0a:d7:e5:19:eb:97:ba:de:73:48:51:e7:79:ab:98:
         48:61:79:c2:6d:10:40:a4:32:f1:ef:b7:35:4a:53:ef:01:b8:
         cd:01:df:62:31:69:39:40:9a:2e:4e:dd:43:32:74:7b:7e:c3:
         e6:e4:64:22:b9:47:2c:42:8c:52:49:b1:3b:bb:d7:7e:21:8c:
         dd:8e:35:5b:89:8b:b2:c1:4f:60:b3:40:b9:19:ca:f3:4b:5c:
         3e:03:b0:36:94:c1:62:57:52:3a:25:2c:7a:41:c6:d1:ba:40:
         91:d6:1e:04:86:4f:80:27:45:cd:8d:1a:65:be:49:b9:5d:7e:
         a5:50:05:31:9a:8b:6a:d7:ae:ce:17:5c:17:9c:4f:12:cc:06:
         ec:2a:bc:d8:b8:b0:ab:52:83:fe:80:b0:a0:a7:75:5d:6c:a0:
         f5:9d:68:5f:a9:15:b1:e3:3e:40:ed:51:ec:97:7e:14:b4:82:
         36:b5:6b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:49 2024 by rpki-client on console-fra.rpki-client.org