Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/SE_DBdPFV18Fyxe7YImPIVi35vM.roa
File:                     SE_DBdPFV18Fyxe7YImPIVi35vM.roa (raw, json)
Hash identifier:          2thRFJOPOy2Y2OuZU47Q5IHnRzwQLQ8yi6VyLW1/a1s=
Subject key identifier:   48:4F:C3:05:D3:C5:57:5F:05:CB:17:BB:60:89:8F:21:58:B7:E6:F3
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       4B
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/SE_DBdPFV18Fyxe7YImPIVi35vM.roa
Signing time:             Sat 31 Aug 2024 01:31:32 +0000
ROA not before:           Sat 31 Aug 2024 01:31:32 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     10000
IP address blocks:        203.215.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Aug 31 01:31:32 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=484FC305D3C5575F05CB17BB60898F2158B7E6F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:aa:0d:7a:5b:4d:ca:61:22:2f:6e:05:b2:d8:
                    5d:0a:bd:fc:4d:0b:d5:b8:50:d3:7e:d9:5a:c2:bd:
                    a4:61:ad:c5:a3:dd:8c:be:52:b6:64:32:c1:c3:9f:
                    43:e2:bd:cc:38:53:85:57:03:88:75:f7:96:ee:ac:
                    2e:fb:1a:19:2f:93:da:85:fb:58:22:dc:dc:3c:af:
                    e1:1b:c4:70:73:af:53:cb:48:bd:bb:32:80:02:e1:
                    be:6c:ac:03:90:9f:e1:b9:cd:8e:cc:1c:f3:4a:3c:
                    55:c6:3f:6e:4f:7b:5f:59:80:80:72:fe:2f:2d:64:
                    41:10:89:88:de:f1:fc:57:12:c0:23:57:36:e5:b7:
                    34:57:a1:9e:0b:5f:53:79:f0:ff:ee:0a:c5:4d:20:
                    d9:a1:cd:99:ff:a9:26:ba:05:dd:5a:4d:2c:be:c3:
                    22:51:3e:99:b6:4e:c7:7e:45:38:4f:94:8a:aa:90:
                    dc:7a:1b:cc:ca:80:b0:4a:27:29:78:9c:e3:1b:78:
                    c3:b4:b1:63:15:02:33:80:05:f4:bf:da:0e:2a:2e:
                    77:d0:41:6f:e2:06:17:43:01:7b:f9:b9:05:1c:c3:
                    cc:cc:3b:6f:f4:c7:fe:b2:ec:8d:a6:52:b7:bf:b9:
                    cb:a0:67:30:3c:87:ea:cc:2e:1f:0a:28:a4:d2:26:
                    0b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4F:C3:05:D3:C5:57:5F:05:CB:17:BB:60:89:8F:21:58:B7:E6:F3
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/SE_DBdPFV18Fyxe7YImPIVi35vM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.215.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:01:39:f0:9e:8a:6e:b0:88:84:45:2a:1c:b9:0a:e9:4b:cf:
         d9:cb:1f:8e:b5:5a:e0:7e:22:d2:43:c7:be:97:74:1c:c3:f8:
         e6:07:54:0c:06:55:78:a0:e7:7a:2c:87:d4:83:86:db:8d:cc:
         f4:b4:9d:b4:8c:ef:69:39:4b:14:bc:55:ae:b4:68:43:09:7f:
         84:40:5b:73:8b:0d:5f:0b:80:ba:22:f6:e9:39:6c:0f:1e:ba:
         36:7e:01:e5:84:22:86:ad:4f:07:c5:cf:e7:79:82:17:2e:1c:
         85:f1:c9:62:e2:85:01:df:93:fb:18:fe:71:fc:ef:bd:f6:5e:
         75:84:a0:77:40:4a:9a:b4:24:6e:3b:da:8e:c8:14:0a:d8:12:
         fe:d2:d1:f2:d1:95:23:46:25:3a:5b:5b:61:ba:ab:38:19:a9:
         0a:85:fd:4a:b4:1a:70:3e:0b:42:ed:83:72:74:1c:96:c6:41:
         e2:e4:8e:67:c1:54:65:3a:91:05:2e:7e:79:69:64:8f:fa:b0:
         74:b6:c8:9e:dd:a8:69:88:fd:92:a4:cf:e0:6b:ee:9e:bf:8d:
         35:6f:dd:c1:48:ba:d1:a3:e7:bd:c7:5c:a3:9c:8b:fb:d0:f4:
         e2:b6:4c:4b:63:7e:af:0e:2a:cb:30:ee:59:c2:84:d9:3d:ed:
         dc:d5:90:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:46 2024 by rpki-client on console-ams.rpki-client.org