Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/5CN-QEluM2zWn6wK7hTs3B7wgb4.roa
File:                     5CN-QEluM2zWn6wK7hTs3B7wgb4.roa (raw, json)
Hash identifier:          LPV1ijID0bDNvyqnDDo5HEWe+yWjtd4yxK5VDDP8INU=
Subject key identifier:   E4:23:7E:40:49:6E:33:6C:D6:9F:AC:0A:EE:14:EC:DC:1E:F0:81:BE
Certificate issuer:       /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial:       03
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/5CN-QEluM2zWn6wK7hTs3B7wgb4.roa
Signing time:             Fri 17 Nov 2023 07:25:15 +0000
ROA not before:           Fri 17 Nov 2023 07:25:15 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     18278
IP address blocks:        103.92.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
        Validity
            Not Before: Nov 17 07:25:15 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=E4237E40496E336CD69FAC0AEE14ECDC1EF081BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:cd:44:4c:d9:19:43:99:f3:a6:b9:00:52:
                    3e:e9:0d:5d:44:85:f2:cc:56:2c:58:9f:40:7d:3c:
                    ed:66:72:37:25:f7:3a:53:59:af:81:e1:8d:bb:4d:
                    4f:17:80:a7:ed:9d:93:10:9a:27:10:94:dd:d0:6c:
                    9e:e7:21:b1:71:bf:c6:38:37:ac:39:80:be:27:d1:
                    a0:d6:4c:0b:3a:27:98:7e:9a:14:d0:52:58:44:b1:
                    1b:e5:7c:22:d0:c5:1a:06:0f:a0:f7:75:85:d4:a7:
                    6b:17:3c:ed:c1:96:dd:43:a7:92:f3:a5:76:73:5a:
                    51:e3:07:89:25:a3:cc:c6:77:22:68:5c:4d:76:e0:
                    61:03:f5:80:1f:a3:03:66:7d:eb:23:ab:7a:1a:4b:
                    69:05:f2:e8:67:8c:73:d7:db:dd:4e:96:2f:70:f1:
                    6e:0a:e2:e1:2c:c0:ad:3e:59:32:58:80:fc:a5:45:
                    43:05:3f:2c:45:2a:18:9c:d1:ca:3d:0c:2e:b7:b2:
                    57:a3:0f:34:d3:91:8e:f0:a2:d4:bc:ca:c7:54:d7:
                    77:c2:2c:0a:7b:f8:e6:cd:ee:7d:75:12:a8:e6:84:
                    8e:65:b8:a9:c5:1d:fa:3b:78:c3:37:21:74:bb:f8:
                    ce:21:93:5c:7c:cf:df:94:15:72:38:27:2b:c1:c3:
                    fc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:23:7E:40:49:6E:33:6C:D6:9F:AC:0A:EE:14:EC:DC:1E:F0:81:BE
            X509v3 Authority Key Identifier:
                keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/5CN-QEluM2zWn6wK7hTs3B7wgb4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:22:8c:5f:42:2e:16:14:2e:34:d3:af:8f:91:39:90:99:02:
         9d:15:0a:ed:02:fd:ec:ff:41:32:0a:26:c0:6f:3c:1a:f6:35:
         07:06:28:98:ea:17:47:0f:50:87:e7:4e:2e:aa:00:66:d0:d3:
         65:4f:97:f7:78:44:8c:aa:46:70:fa:14:be:6f:64:a3:1e:86:
         9e:fe:cb:e6:e9:d9:96:30:4d:e9:ae:6b:b9:9c:a6:47:a4:4f:
         8b:91:76:fb:37:66:66:d1:6a:6a:18:ff:7a:a8:fd:6c:5d:9d:
         4b:c2:c1:d5:b8:ab:65:06:f2:0d:d4:b4:ad:1c:9e:17:44:c8:
         60:4f:50:ad:be:c9:c1:41:fe:95:7d:7e:64:01:74:6f:d3:18:
         a2:bd:a5:94:67:47:07:d7:fa:b5:2f:89:75:f6:7d:65:88:15:
         23:a9:a2:15:26:3e:0a:2d:9f:3c:f1:76:a6:1e:13:b9:b2:28:
         20:2d:b9:21:07:f0:9c:e5:af:25:2a:de:79:56:1a:68:48:da:
         7c:3e:fa:75:77:35:0e:1c:fc:ed:7d:03:5f:41:91:97:66:ea:
         4d:8d:f9:d5:4d:14:44:48:ae:12:b6:ca:7f:c9:f3:97:a9:17:
         a7:32:26:86:1b:43:3b:66:ea:c5:35:a9:12:dc:61:d3:95:29:
         22:3c:cd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:52 2024 by rpki-client on console-fra.rpki-client.org