Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20040/V-geydNIUg1Y9Uk41Sp9HFBWXs0.roa
File:                     V-geydNIUg1Y9Uk41Sp9HFBWXs0.roa (raw, json)
Hash identifier:          lpmVG/Ffyai+Gjcaq1Q7bu4D1SKoGUuVIFDtUzhG+gE=
Subject key identifier:   57:E8:1E:C9:D3:48:52:0D:58:F5:49:38:D5:2A:7D:1C:50:56:5E:CD
Certificate issuer:       /CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9
Certificate serial:       1D
Authority key identifier: 5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/V-geydNIUg1Y9Uk41Sp9HFBWXs0.roa
Signing time:             Fri 31 May 2024 01:29:02 +0000
ROA not before:           Fri 31 May 2024 01:29:02 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     7514
IP address blocks:        103.96.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9
        Validity
            Not Before: May 31 01:29:02 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=57E81EC9D348520D58F54938D52A7D1C50565ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:af:85:b9:a6:bc:3f:41:a8:eb:f1:cd:ed:
                    64:9c:5f:43:7a:54:fd:84:cc:4b:a7:f2:1b:15:4f:
                    28:de:be:4e:4f:fe:3d:bf:03:05:ce:47:d3:69:04:
                    67:1c:59:1f:43:78:40:c3:ce:b2:c0:86:16:f5:19:
                    98:1d:70:14:6e:51:d3:81:fa:e0:bd:26:c5:9f:5e:
                    ad:03:66:7d:2a:d9:7c:8a:2f:32:6a:06:c2:ea:e1:
                    bf:1e:7a:6a:db:58:ad:b2:fb:e1:f8:f4:02:46:fa:
                    71:3b:56:67:bb:c6:53:98:dc:52:54:59:9c:c4:c5:
                    f5:b4:af:73:14:62:fd:65:bf:2f:78:b6:e2:22:d3:
                    8d:4d:a2:ab:12:be:80:a0:7f:f4:6b:7e:ec:4f:67:
                    6b:71:59:1a:04:31:e1:bc:4e:0a:96:70:1c:ba:59:
                    c5:d1:d7:b4:5d:55:a1:88:36:3b:c5:d4:ac:d8:3d:
                    a4:d3:a7:b2:28:4d:9b:e5:e0:62:73:6c:29:3d:69:
                    d4:b1:f4:df:3a:63:69:72:cb:7a:6b:21:96:34:2c:
                    c9:a6:7f:84:a5:b9:34:f4:ba:2d:44:e0:2f:e0:ea:
                    0e:ea:a6:01:ee:b1:75:e1:a8:f2:39:8c:fc:96:98:
                    f0:78:70:c6:94:04:2b:32:d3:22:a0:4f:f0:a9:36:
                    92:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E8:1E:C9:D3:48:52:0D:58:F5:49:38:D5:2A:7D:1C:50:56:5E:CD
            X509v3 Authority Key Identifier:
                keyid:5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/V-geydNIUg1Y9Uk41Sp9HFBWXs0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:be:23:58:10:1a:d7:23:c7:4f:0c:22:b2:ea:56:4a:66:3d:
         e8:a1:ed:55:c1:f0:d2:38:b1:d0:fc:95:d3:fc:17:db:d3:da:
         3d:b9:a1:19:f0:a7:c4:c0:29:9a:e9:73:df:ab:60:64:d3:be:
         15:73:6c:fa:24:df:77:b5:86:fd:9f:b6:a4:d3:b4:75:54:83:
         a4:1e:53:c9:a9:9a:46:77:c6:60:f1:a2:bf:6c:1b:39:c1:f6:
         01:92:15:19:9f:f0:c7:d8:a5:7b:31:82:6a:7a:11:75:5e:ba:
         fa:63:c6:08:28:31:87:a9:cd:21:97:da:ad:dd:a8:bd:d8:32:
         51:9d:1e:16:ca:e4:81:dd:e1:f2:5f:d8:04:d2:ab:9d:33:6f:
         fb:a5:ad:c7:b5:37:08:f3:2e:21:ff:56:95:07:13:bb:6f:3e:
         80:87:c2:58:e0:1d:20:42:63:c4:08:65:09:c8:28:3c:24:62:
         dc:6b:d9:dd:b8:da:ad:ff:83:86:b3:d9:40:d3:5e:a5:61:3e:
         26:85:e4:2e:f9:c1:ea:67:52:19:27:7d:66:bd:19:04:f7:2d:
         05:fb:b1:bf:70:98:0d:66:e7:59:c3:8f:f3:7b:52:1e:af:ec:
         0a:e2:c7:3d:2b:de:30:f6:cf:6d:95:eb:76:b1:23:10:cf:0b:
         16:83:2f:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:13 2024 by rpki-client on console-fra.rpki-client.org