Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/O5ks47xx1tmD_JcUlNsw7284Mvg.roa
File:                     O5ks47xx1tmD_JcUlNsw7284Mvg.roa (raw, json)
Hash identifier:          9gt4WSG1eTEfayEEjl5E4eu4qDfC6H8qzPbZRuNfr9A=
Subject key identifier:   3B:99:2C:E3:BC:71:D6:D9:83:FC:97:14:94:DB:30:EF:6F:38:32:F8
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       5C
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/O5ks47xx1tmD_JcUlNsw7284Mvg.roa
Signing time:             Thu 29 Feb 2024 01:31:39 +0000
ROA not before:           Thu 29 Feb 2024 01:31:39 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9622
IP address blocks:        202.171.112.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Feb 29 01:31:39 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=3B992CE3BC71D6D983FC971494DB30EF6F3832F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4b:00:ec:56:bd:37:7a:03:88:40:39:b4:cd:
                    12:5a:21:31:94:ae:47:70:d5:67:cc:51:27:99:e5:
                    58:c0:55:77:61:84:de:2b:e0:7d:44:ee:cc:b4:48:
                    9a:c4:36:38:3e:99:85:79:b3:49:36:f2:83:b0:38:
                    24:64:e1:b5:ea:24:55:b0:41:6d:0a:36:76:f1:4e:
                    5d:29:b1:dc:36:cb:27:c0:6e:e5:9a:bd:a0:6c:b5:
                    f0:0a:69:d9:9e:46:57:aa:78:25:e1:db:bd:6a:1b:
                    ea:5d:7e:81:12:6d:b2:68:77:af:27:71:a9:09:e0:
                    5c:d5:c5:83:6c:52:00:b9:35:43:0d:15:21:55:b6:
                    f5:71:4d:ae:05:fb:f9:8b:01:d5:c7:0a:4d:b0:c3:
                    1f:db:76:1e:f4:41:2a:a5:3f:21:9c:e5:59:82:c3:
                    2c:83:5b:30:dc:52:af:ad:40:cf:9f:2c:0b:81:03:
                    87:3b:30:70:ca:02:7e:a0:c8:e3:d6:8f:f8:a2:08:
                    b3:69:41:8f:5f:21:43:c5:ed:65:21:cc:3f:97:3b:
                    31:c6:4d:72:c2:23:cc:39:5f:e8:0b:63:ac:23:77:
                    37:20:42:3e:6c:96:9c:13:3e:a2:f4:06:8f:84:56:
                    b4:85:d2:7a:66:3f:36:93:b8:52:55:0d:3e:11:6e:
                    84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:99:2C:E3:BC:71:D6:D9:83:FC:97:14:94:DB:30:EF:6F:38:32:F8
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/O5ks47xx1tmD_JcUlNsw7284Mvg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:fe:23:72:5f:24:ff:af:44:d2:eb:6e:ef:e2:13:60:3d:0a:
         05:a0:bc:5a:d8:cc:1c:72:38:b3:e4:81:cf:38:9f:64:65:33:
         a5:7f:87:ec:68:aa:b3:18:90:70:9b:5d:3f:33:0a:3a:58:21:
         bd:e8:31:b8:15:19:c3:ee:c8:9f:ee:e5:be:9e:57:af:6e:1b:
         4b:00:87:45:cc:07:35:ef:a1:8c:74:ea:e0:fe:8c:c9:9f:9e:
         a7:5a:da:2d:1e:3c:6e:eb:21:f5:78:45:cf:f3:25:e2:3f:e6:
         8e:2c:c6:fc:b2:00:fd:c9:3f:d8:15:d2:3a:e1:73:f2:4d:5f:
         6f:99:9b:f4:28:b7:91:30:1c:f6:7f:ce:5b:11:67:7d:e3:d1:
         2e:6d:39:a4:6e:cf:a4:fd:6a:44:55:80:60:83:52:b6:34:9d:
         03:61:d7:d8:5d:3b:c4:a6:c7:77:4b:8d:07:5d:19:71:ce:54:
         85:19:a1:ca:d1:5e:4c:a3:6e:16:e6:ce:7a:0b:1e:7b:c4:d7:
         a9:dd:34:0d:dd:5e:76:62:45:89:28:29:e4:ec:04:ce:ef:86:
         4e:d2:eb:3e:0e:c7:df:76:48:fc:f4:c7:0f:3f:d2:7f:b1:78:
         41:01:d8:a6:e2:f7:73:3a:bf:a9:60:78:8f:ab:10:14:47:0b:
         9d:12:a8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:03 2024 by rpki-client on console-fra.rpki-client.org