Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/K5UTPUL8fsFXTueEf20DPv-WX-E.roa
File:                     K5UTPUL8fsFXTueEf20DPv-WX-E.roa (raw, json)
Hash identifier:          WQmXDJoDIge3zkv7wWhpGpqZw8cYs/Lny5OI09Q6gCw=
Subject key identifier:   2B:95:13:3D:42:FC:7E:C1:57:4E:E7:84:7F:6D:03:3E:FF:96:5F:E1
Certificate issuer:       /CN=B79C47CD54D327D3C1777CF5E41F162C9876BB65
Certificate serial:       4E
Authority key identifier: B7:9C:47:CD:54:D3:27:D3:C1:77:7C:F5:E4:1F:16:2C:98:76:BB:65
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t5xHzVTTJ9PBd3z15B8WLJh2u2U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/K5UTPUL8fsFXTueEf20DPv-WX-E.roa
Signing time:             Thu 29 Feb 2024 01:29:18 +0000
ROA not before:           Thu 29 Feb 2024 01:29:18 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     55391
IP address blocks:        103.2.248.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/t5xHzVTTJ9PBd3z15B8WLJh2u2U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/t5xHzVTTJ9PBd3z15B8WLJh2u2U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t5xHzVTTJ9PBd3z15B8WLJh2u2U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B79C47CD54D327D3C1777CF5E41F162C9876BB65
        Validity
            Not Before: Feb 29 01:29:18 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=2B95133D42FC7EC1574EE7847F6D033EFF965FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a9:c5:43:74:47:dd:be:d3:5d:99:1a:41:72:
                    d9:4b:18:f3:ec:1d:bd:31:7f:cf:93:e5:43:7f:77:
                    c5:9a:ae:c5:52:e2:91:6c:f4:a2:37:71:10:da:d1:
                    08:26:b6:57:2a:f0:c4:e4:c8:98:70:8f:30:7b:5f:
                    af:d9:ec:06:2f:d3:0c:32:59:b3:9f:6f:70:91:20:
                    d8:0b:14:f7:7e:b2:42:47:c1:23:8d:e9:4e:20:45:
                    04:ef:fe:06:7c:c8:db:8d:56:96:97:11:f5:c4:3b:
                    22:b4:68:84:c3:ed:a7:4f:86:e2:eb:73:8f:7d:29:
                    96:2d:05:27:65:ee:02:c2:75:fb:7d:fe:63:82:74:
                    76:e0:b0:b4:c8:10:9c:1c:ee:d7:60:d9:49:9f:44:
                    fe:f1:84:b9:ba:fc:94:c9:fc:ed:22:87:4d:30:ce:
                    41:43:22:d4:c0:23:81:13:07:c1:41:1e:ed:11:00:
                    74:2e:00:06:60:12:4f:70:b9:da:66:c6:cd:3c:19:
                    2f:33:d1:ab:8a:7d:56:8d:49:51:50:c2:fd:69:4c:
                    57:c0:e5:48:61:ce:34:02:74:d4:85:8f:fa:91:84:
                    83:4b:0b:5a:29:be:96:a0:77:ac:fb:07:9d:ef:2a:
                    9b:73:81:ea:db:e6:b0:91:98:ff:dc:57:b8:c8:18:
                    dd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:95:13:3D:42:FC:7E:C1:57:4E:E7:84:7F:6D:03:3E:FF:96:5F:E1
            X509v3 Authority Key Identifier:
                keyid:B7:9C:47:CD:54:D3:27:D3:C1:77:7C:F5:E4:1F:16:2C:98:76:BB:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/t5xHzVTTJ9PBd3z15B8WLJh2u2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t5xHzVTTJ9PBd3z15B8WLJh2u2U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/K5UTPUL8fsFXTueEf20DPv-WX-E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:b8:e4:8a:31:4f:9a:31:64:a6:4d:27:97:53:50:fa:01:c7:
         9d:ff:29:9a:7d:28:0c:b3:55:13:0a:08:ab:76:14:f7:ce:7b:
         21:ca:da:e3:3a:b4:67:27:0d:a8:32:74:ce:72:9e:53:96:cf:
         2c:92:79:ff:01:b7:84:47:62:81:d3:cc:28:ee:d8:fb:f2:cd:
         34:a1:1f:5b:86:a6:9b:a1:0e:af:75:9c:9a:1b:3c:2b:03:cb:
         70:4d:28:50:41:1a:34:f2:cb:0f:90:54:c2:d4:25:3e:b2:db:
         4d:07:56:81:68:da:31:3b:46:cf:8f:50:3c:6c:31:59:9d:6e:
         70:48:d4:40:25:de:2b:6a:f5:46:2e:73:bc:7d:ec:92:0c:49:
         ec:cd:6a:d5:fe:8f:91:b3:8b:32:bf:44:9d:d2:61:21:15:43:
         b0:03:56:bb:e5:36:7e:b7:a1:7f:22:19:5b:18:e8:12:9c:cb:
         21:8b:88:e4:92:a0:a7:ff:db:e4:a5:1b:7b:c0:37:78:97:f7:
         dd:c0:e9:75:32:8c:52:dc:31:d7:e3:c4:da:bf:f8:19:85:25:
         01:65:b0:c2:34:94:ce:a8:c5:56:89:14:99:fa:04:f5:8c:19:
         59:63:30:ac:b7:e2:5d:c7:11:f9:95:35:ab:b6:4e:ec:f4:64:
         a8:2e:e3:b7
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCNzlD
NDdDRDU0RDMyN0QzQzE3NzdDRjVFNDFGMTYyQzk4NzZCQjY1MB4XDTI0MDIyOTAx
MjkxOFoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoMkI5NTEzM0Q0MkZDN0VD
MTU3NEVFNzg0N0Y2RDAzM0VGRjk2NUZFMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM2pxUN0R92+012ZGkFy2UsY8+wdvTF/z5PlQ393xZquxVLikWz0
ojdxENrRCCa2VyrwxOTImHCPMHtfr9nsBi/TDDJZs59vcJEg2AsU936yQkfBI43p
TiBFBO/+BnzI241WlpcR9cQ7IrRohMPtp0+G4utzj30pli0FJ2XuAsJ1+33+Y4J0
duCwtMgQnBzu12DZSZ9E/vGEubr8lMn87SKHTTDOQUMi1MAjgRMHwUEe7REAdC4A
BmAST3C52mbGzTwZLzPRq4p9Vo1JUVDC/WlMV8DlSGHONAJ01IWP+pGEg0sLWim+
lqB3rPsHne8qm3OB6tvmsJGY/9xXuMgY3XMCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQrlRM9Qvx+wVdO54R/bQM+/5Zf4TAfBgNVHSMEGDAWgBS3nEfNVNMn08F3fPXk
HxYsmHa7ZTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyMDcvdDV4SHpWVFRKOVBCZDN6MTVCOFdMSmgydTJVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdDV4SHpWVFRKOVBCZDN6MTVCOFdM
SmgydTJVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzExMjA3L0s1VVRQVUw4ZnNGWFR1ZUVmMjBEUHYtV1gtRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnAvgwDQYJKoZIhvcNAQELBQADggEBAAa45IoxT5oxZKZNJ5dTUPoB
x53/KZp9KAyzVRMKCKt2FPfOeyHK2uM6tGcnDagydM5ynlOWzyySef8Bt4RHYoHT
zCju2PvyzTShH1uGppuhDq91nJobPCsDy3BNKFBBGjTyyw+QVMLUJT6y200HVoFo
2jE7Rs+PUDxsMVmdbnBI1EAl3itq9UYuc7x97JIMSezNatX+j5GzizK/RJ3SYSEV
Q7ADVrvlNn63oX8iGVsY6BKcyyGLiOSSoKf/2+SlG3vAN3iX993A6XUyjFLcMdfj
xNq/+BmFJQFlsMI0lM6oxVaJFJn6BPWMGVljMKy34l3HEfmVNau2Tuz0ZKgu47c=
-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org