Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/V995SinLV4DqgtY9obcAe2TYJz8.roa
File:                     V995SinLV4DqgtY9obcAe2TYJz8.roa (raw, json)
Hash identifier:          pSLNjcPnKkE+gdyPfgIKEHP4V1aEX1HkAXrog8SNMPk=
Subject key identifier:   57:DF:79:4A:29:CB:57:80:EA:82:D6:3D:A1:B7:00:7B:64:D8:27:3F
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       5E
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/V995SinLV4DqgtY9obcAe2TYJz8.roa
Signing time:             Fri 01 Sep 2023 01:29:12 +0000
ROA not before:           Fri 01 Sep 2023 01:29:12 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     55900
IP address blocks:        203.23.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Sep  1 01:29:12 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=57DF794A29CB5780EA82D63DA1B7007B64D8273F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:93:dd:3a:f0:8d:1c:99:fc:22:21:da:87:26:
                    c6:7e:db:7e:ea:5e:e2:80:ae:fb:65:1f:9e:bd:3a:
                    a7:aa:3b:f6:b3:e2:a9:91:90:b3:74:46:ad:bd:82:
                    0e:e6:6f:3a:eb:ac:fc:54:67:49:be:8b:a9:bf:2a:
                    12:e6:f1:96:bb:30:37:3e:88:79:b4:83:8e:e4:4f:
                    90:cf:45:86:36:17:ba:ed:7b:4d:19:70:66:ca:26:
                    f2:0e:0b:f6:70:9e:4f:1a:42:e0:c1:f6:d3:39:dc:
                    9f:e1:cd:ce:9a:ce:f8:2f:b3:49:72:d1:f0:7c:61:
                    ff:7f:a2:60:0a:b2:cc:50:1b:9a:2e:c5:7b:b9:f7:
                    db:91:a8:45:8a:4e:69:72:57:0e:0d:1f:f9:40:59:
                    ba:0f:3d:39:6e:0a:87:64:66:33:15:2a:20:18:e3:
                    cc:3f:fb:81:74:86:c3:e9:a9:b1:d8:53:d1:f6:9f:
                    79:24:fe:79:df:db:12:59:45:b2:58:69:09:ee:b7:
                    a0:69:d6:66:53:4b:d7:f0:e9:bf:41:c7:f6:e2:33:
                    43:c8:f7:72:2b:76:0b:d5:d5:9b:8f:61:ae:f9:25:
                    ab:38:59:33:86:41:c3:5b:b5:a0:b8:be:3c:b6:a8:
                    41:f7:a6:19:01:4a:13:c3:16:ec:f5:04:cd:5d:e1:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DF:79:4A:29:CB:57:80:EA:82:D6:3D:A1:B7:00:7B:64:D8:27:3F
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/V995SinLV4DqgtY9obcAe2TYJz8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.23.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:45:86:41:e0:92:e5:e3:cc:c6:b6:1d:01:6e:b5:a4:43:a6:
         5a:ec:69:df:44:1b:aa:fd:e0:14:94:75:0f:c0:db:45:2e:1b:
         07:78:7d:03:35:a5:0f:69:b2:8c:df:fa:d9:2d:e8:41:24:12:
         73:c4:4f:87:62:cf:a5:16:20:25:cf:7e:00:19:a9:f2:b6:90:
         53:7c:a0:c7:fa:ef:f8:b9:57:15:6b:9e:13:49:ce:4d:dd:89:
         38:fa:07:9b:0e:c3:af:b4:46:f1:25:21:45:97:71:71:90:0a:
         e1:b8:e7:57:d6:6e:5e:0a:4a:61:e4:10:b2:5d:33:11:ec:7f:
         b4:38:f0:1c:ef:98:3a:8c:c0:c2:8a:bd:94:d8:d0:6d:15:93:
         fc:63:0e:49:f8:fc:da:03:3e:e2:7b:b1:97:8e:d4:7a:b4:55:
         4a:5f:71:b3:c0:f1:24:e3:4f:ef:41:7b:f5:7b:35:2e:cc:f8:
         5e:b1:98:c8:73:30:1e:1c:12:6b:9c:9c:d6:ca:9f:5a:ec:c2:
         5f:85:df:d7:ce:4e:ad:c8:e7:0b:b0:37:e4:e2:f7:c9:18:fa:
         41:c6:02:dc:0a:c4:4f:77:60:22:ec:77:26:5f:59:03:fe:aa:
         45:29:04:ef:09:13:cd:ed:bb:54:f2:fa:0c:7f:73:12:c7:fd:
         c6:aa:3f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:45 2024 by rpki-client on console-fra.rpki-client.org