Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20080/U-Ea3FwO4mR_R7-3n7iICzdQE84.roa
File:                     U-Ea3FwO4mR_R7-3n7iICzdQE84.roa (raw, json)
Hash identifier:          tKkDSaPNrX2cyLlfflPi6slv6h4fLoXidZGSKHBRCW4=
Subject key identifier:   53:E1:1A:DC:5C:0E:E2:64:7F:47:BF:B7:9F:B8:88:0B:37:50:13:CE
Certificate issuer:       /CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
Certificate serial:       3A
Authority key identifier: E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/U-Ea3FwO4mR_R7-3n7iICzdQE84.roa
Signing time:             Thu 29 Feb 2024 01:31:49 +0000
ROA not before:           Thu 29 Feb 2024 01:31:49 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     63786
IP address blocks:        103.123.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
        Validity
            Not Before: Feb 29 01:31:49 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=53E11ADC5C0EE2647F47BFB79FB8880B375013CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:48:05:df:40:de:ae:60:ce:05:c1:4f:b3:e1:
                    e6:ed:c8:41:14:fa:51:06:3e:50:80:e8:de:f7:2b:
                    4f:95:8f:65:0f:0e:12:da:7a:b7:6e:00:68:6f:8f:
                    8a:44:26:92:bf:ca:82:c1:36:73:62:d3:24:86:a5:
                    dc:bb:ba:9c:84:78:93:0a:7a:6a:1d:24:8d:ed:81:
                    84:ab:a5:e8:e4:5c:57:20:82:3b:ab:ee:00:db:c7:
                    60:43:3b:69:9a:ec:97:58:60:80:87:79:59:7d:d6:
                    56:ae:d5:91:a5:eb:45:68:f1:8b:ab:e4:e1:0a:69:
                    76:7d:2c:fd:6e:2b:c6:fa:0a:11:4d:1c:12:0a:f7:
                    a4:cb:36:a6:fa:b3:70:22:ac:ce:a1:22:c5:15:14:
                    95:76:e7:17:94:43:81:98:f0:57:f7:f4:6d:70:a3:
                    32:11:c0:0a:6e:8b:0b:92:b7:a8:d3:44:30:a4:cc:
                    a9:30:11:2b:d6:6f:dc:ec:d2:bf:bc:e7:e6:b3:62:
                    39:53:5a:fc:c1:0e:f2:7c:b7:28:ff:93:7c:fb:93:
                    58:4e:90:6b:90:8c:60:90:61:ef:40:07:32:62:6f:
                    62:fb:31:49:70:c7:f1:16:d8:aa:e1:48:95:bd:9e:
                    d7:41:9b:07:01:27:79:1f:14:6d:6d:bf:87:75:30:
                    4d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E1:1A:DC:5C:0E:E2:64:7F:47:BF:B7:9F:B8:88:0B:37:50:13:CE
            X509v3 Authority Key Identifier:
                keyid:E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/U-Ea3FwO4mR_R7-3n7iICzdQE84.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ed:0b:a7:6b:3b:a1:e2:93:e6:c6:bc:02:7e:e7:51:4b:44:
         31:3e:6a:d5:97:ff:6e:69:29:e6:a5:7f:28:0b:e2:c5:ef:08:
         b7:0f:b6:47:04:0e:3e:b4:95:1a:ec:72:35:10:21:3c:3b:48:
         b2:2b:44:30:c9:b1:44:1b:0e:4f:72:98:e4:e0:25:96:46:0b:
         d7:67:11:c9:c3:7e:f8:6f:f8:74:a5:99:84:4e:e9:91:e4:a6:
         1d:f0:c8:0a:76:e9:ce:ff:68:64:fd:7d:b6:30:d5:48:0e:ba:
         fc:05:ed:76:1c:c2:18:a9:5b:d6:3b:80:0a:95:70:11:af:62:
         cb:7c:bf:9d:9e:23:02:22:b0:62:8b:4e:dc:bb:04:2d:64:21:
         a0:96:72:87:99:ec:b0:fe:39:de:df:e7:af:ad:ca:e6:cc:14:
         88:16:6d:d1:3d:ac:ba:4c:a6:4a:99:5b:3c:d8:19:3f:68:be:
         69:6f:5b:23:22:13:cc:e0:98:d1:ac:65:88:cf:4e:a7:92:43:
         91:11:05:89:bb:04:35:14:2e:fa:f9:63:0f:5d:3d:51:db:c3:
         f4:7d:11:17:99:8c:19:e4:2e:8b:ef:7a:f1:2e:8a:28:d0:9a:
         45:eb:b1:ed:ba:de:fc:a0:8d:a4:c0:a6:60:66:fe:5e:e1:91:
         4f:b5:1b:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:35 2024 by rpki-client on console-fra.rpki-client.org