Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20199/88wm_fXvDEGDbLZ2xzsGjOMbcVY.roa
File:                     88wm_fXvDEGDbLZ2xzsGjOMbcVY.roa (raw, json)
Hash identifier:          AA1pHkHqG4OO72ztGjwmnuyn3WozPuAl8XSadGfkbkc=
Subject key identifier:   F3:CC:26:FD:F5:EF:0C:41:83:6C:B6:76:C7:3B:06:8C:E3:1B:71:56
Certificate issuer:       /CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
Certificate serial:       19
Authority key identifier: 8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/88wm_fXvDEGDbLZ2xzsGjOMbcVY.roa
Signing time:             Sun 31 Mar 2024 01:32:45 +0000
ROA not before:           Sun 31 Mar 2024 01:32:45 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     63796
IP address blocks:        103.37.88.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
        Validity
            Not Before: Mar 31 01:32:45 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=F3CC26FDF5EF0C41836CB676C73B068CE31B7156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:db:2b:1c:2b:68:34:5e:cc:c1:51:ea:b5:b1:
                    70:35:c2:13:aa:14:13:3b:8b:4a:c1:62:f4:e0:4a:
                    04:db:fd:6d:db:1c:50:09:a6:af:fc:fe:ad:ee:e9:
                    bd:06:78:e3:4c:b8:40:a8:7b:f9:10:9e:b9:4d:8b:
                    8f:1b:91:ce:6d:ed:98:af:7c:1f:36:32:c8:b2:8b:
                    6c:b7:ca:6b:3c:81:99:69:d3:99:1e:78:e0:3b:e7:
                    74:f5:20:22:4c:7f:88:8d:3e:94:13:da:6a:e6:97:
                    bf:ae:cf:52:55:04:08:37:44:61:07:8f:7c:45:b6:
                    58:cc:84:c1:a2:d2:26:49:d7:b6:d4:87:1c:7e:31:
                    b4:f5:2a:0e:18:31:7b:1a:65:6f:92:74:46:5c:6b:
                    b1:2b:ac:a3:27:64:34:9a:e2:78:69:fe:ee:e3:50:
                    f5:24:24:16:6c:ad:c5:07:88:fe:96:9a:eb:65:b2:
                    5e:07:4c:1a:24:ba:a0:d5:6c:1d:9d:f0:66:b5:55:
                    13:cd:0e:cb:97:a9:74:af:b5:35:35:8b:37:69:3b:
                    29:48:2c:fd:2f:fe:81:95:5b:e7:ab:d6:12:3c:2a:
                    eb:f4:f3:28:8c:a8:1f:6b:46:77:17:da:d1:13:3f:
                    42:96:e3:a7:60:bb:75:f9:5f:42:d6:26:2c:7f:54:
                    34:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CC:26:FD:F5:EF:0C:41:83:6C:B6:76:C7:3B:06:8C:E3:1B:71:56
            X509v3 Authority Key Identifier:
                keyid:8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/88wm_fXvDEGDbLZ2xzsGjOMbcVY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:78:c4:4b:e9:12:4b:b3:f1:8f:0a:bb:d6:6d:f1:e3:b9:08:
         7b:cf:19:55:86:e2:7b:b8:53:17:a7:ab:ee:b8:e3:60:46:2c:
         38:bd:75:86:56:d0:a6:c4:03:9d:29:44:95:a3:38:b5:48:ff:
         c9:67:37:1c:89:73:9d:20:dd:a2:c2:48:24:10:db:e5:d1:84:
         21:73:ee:da:63:0c:3a:8c:0a:9e:2a:bc:dc:50:67:5e:8b:91:
         54:23:2a:33:2a:79:e2:ec:13:9c:95:e0:a2:a4:e0:b8:a2:72:
         a5:90:7f:a4:fb:f1:18:2c:31:c3:0d:1f:bd:2d:8a:4c:08:22:
         6f:63:9f:07:0a:7e:90:af:ac:ab:d3:2d:cd:1e:38:27:fe:6a:
         bd:a4:2f:fc:f3:20:12:2d:47:4f:5b:b4:d3:3f:1e:4e:3f:9c:
         00:46:2e:b8:81:80:12:d0:a3:d1:e8:cb:90:04:5e:f8:63:a5:
         ae:66:05:9f:49:46:14:c3:92:89:2f:e2:8d:19:37:08:69:d4:
         c8:e7:70:3c:8c:b0:49:8e:27:41:51:49:e6:8e:be:c1:2b:da:
         de:bc:67:b3:34:96:07:90:3d:17:c9:f4:f9:03:87:65:3c:30:
         c7:c2:cf:cf:f3:fc:53:32:21:ba:57:11:cb:f6:5b:0e:3a:b7:
         4b:c1:46:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 25 00:52:44 2024 by rpki-client on console-ams.rpki-client.org