Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/848/D7-hgd0749hqZeARfcRgeGp-f2w.roa
File:                     D7-hgd0749hqZeARfcRgeGp-f2w.roa (raw, json)
Hash identifier:          qHL6F9PAeSYVYlmb6KHFH0IQJrxdGTzyj9BxghGWiBE=
Subject key identifier:   0F:BF:A1:81:DD:3B:E3:D8:6A:65:E0:11:7D:C4:60:78:6A:7E:7F:6C
Certificate issuer:       /CN=55F35A82A236BCED819088D4D90887E0B965C7CF
Certificate serial:       02
Authority key identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/D7-hgd0749hqZeARfcRgeGp-f2w.roa
Signing time:             Fri 12 Apr 2024 05:43:38 +0000
ROA not before:           Fri 12 Apr 2024 05:43:38 +0000
ROA not after:            Sat 12 Apr 2025 05:36:12 +0000
asID:                     23775
IP address blocks:        180.235.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55F35A82A236BCED819088D4D90887E0B965C7CF
        Validity
            Not Before: Apr 12 05:43:38 2024 GMT
            Not After : Apr 12 05:36:12 2025 GMT
        Subject: CN=0FBFA181DD3BE3D86A65E0117DC460786A7E7F6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1a:e9:ca:17:2d:e1:8d:1a:4b:fa:36:c9:00:
                    01:9e:15:0b:f1:28:8e:ea:e4:6d:43:7d:cf:84:38:
                    22:df:af:4f:61:56:ee:72:a9:22:a0:f4:23:10:d0:
                    60:44:91:f0:24:78:8e:e7:27:20:2e:44:15:38:f4:
                    5b:bf:62:f1:14:43:6f:08:8e:21:f6:16:de:1d:a7:
                    a3:75:08:dd:e9:7f:31:f9:50:10:88:41:e7:43:99:
                    c4:4a:53:fd:2e:73:9c:04:2e:75:79:bc:41:f8:12:
                    98:95:8e:9e:fa:75:c9:a2:f7:9f:59:0f:4a:90:31:
                    47:e3:b7:18:cb:37:c6:bd:e8:00:ac:eb:06:6e:fc:
                    4c:f3:7c:13:32:c9:40:dc:b3:65:c6:73:ef:b7:07:
                    b2:48:49:d0:fe:0e:81:9a:5b:c4:f6:1f:d6:8f:12:
                    d9:cc:75:d6:ca:35:13:8d:82:31:29:6b:27:09:79:
                    d7:32:99:7d:a5:dd:e6:5e:81:b8:7d:ee:68:7b:b6:
                    f2:ea:c9:94:86:1c:00:ed:e8:6f:c0:e1:1b:a8:da:
                    5f:3d:85:a8:3d:ea:1b:73:65:fc:76:ec:cb:73:a5:
                    4e:81:f8:16:27:35:66:73:bc:e5:02:c5:c0:c8:40:
                    3b:b6:39:c3:d3:89:dd:e3:ad:d4:87:00:af:f8:cc:
                    2c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BF:A1:81:DD:3B:E3:D8:6A:65:E0:11:7D:C4:60:78:6A:7E:7F:6C
            X509v3 Authority Key Identifier:
                keyid:55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/D7-hgd0749hqZeARfcRgeGp-f2w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.235.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:f9:73:9e:aa:ca:0d:7d:69:3c:7f:c3:67:e5:96:48:8b:d9:
         ae:4c:3e:48:b4:9c:5d:80:5e:81:57:6d:07:fa:40:d0:c0:5f:
         a2:94:ae:3e:00:de:f6:78:92:af:4e:bb:7f:92:c3:64:10:92:
         ef:98:e5:e1:be:8a:cc:f0:65:27:ff:a4:f9:0e:9a:67:78:c8:
         66:55:88:d3:c9:df:92:9c:64:f1:28:51:bb:00:5e:39:85:84:
         ef:86:a2:23:d8:32:ad:6b:00:90:16:e2:2e:2f:62:17:9e:bb:
         4d:a4:27:57:80:50:cb:a0:0b:01:b1:3e:66:22:ac:a4:c9:e2:
         27:ea:58:ca:c1:cb:ad:17:dd:00:d8:41:d6:2e:fb:bc:a7:7f:
         62:1c:d3:33:83:bb:71:f8:fd:4c:13:0e:b6:e5:fe:86:34:24:
         9e:62:ec:f8:9b:d3:b7:b1:c4:a4:dd:7c:db:cd:5f:08:38:f8:
         ee:55:03:00:0e:8c:8e:c6:77:28:6a:b9:4e:34:3f:2f:f6:0c:
         98:53:81:9b:02:58:4c:24:fb:16:4d:d3:3d:2d:9d:2c:15:42:
         69:3d:89:b5:81:90:cf:db:9b:37:e0:c4:93:b5:81:b8:d1:74:
         c1:61:7b:f2:04:60:63:7f:ce:49:75:97:96:a3:3c:13:32:01:
         08:7d:52:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:44 2024 by rpki-client on console-ams.rpki-client.org