Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20199/FTyrK1_gC-4iM8qYFgkiKp4ul7g.roa
File:                     FTyrK1_gC-4iM8qYFgkiKp4ul7g.roa (raw, json)
Hash identifier:          /VSE0E6osQ2Wq0U3hXz4tOH70j0VM6PhfLg5Mas6yP8=
Subject key identifier:   15:3C:AB:2B:5F:E0:0B:EE:22:33:CA:98:16:09:22:2A:9E:2E:97:B8
Certificate issuer:       /CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
Certificate serial:       1C
Authority key identifier: 8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/FTyrK1_gC-4iM8qYFgkiKp4ul7g.roa
Signing time:             Tue 30 Apr 2024 01:32:27 +0000
ROA not before:           Tue 30 Apr 2024 01:32:27 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     63801
IP address blocks:        103.37.88.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
        Validity
            Not Before: Apr 30 01:32:27 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=153CAB2B5FE00BEE2233CA981609222A9E2E97B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a9:22:4f:4c:e5:3d:66:14:a7:be:24:fa:90:
                    6e:3a:6a:26:54:a6:f3:1a:4f:73:b7:26:f8:a7:98:
                    47:c0:c1:74:48:05:75:07:cd:59:fa:93:c6:8d:63:
                    1e:64:5b:5b:b1:8c:53:be:77:af:76:7e:55:99:16:
                    3a:ea:88:4c:06:75:75:dc:f9:91:fe:18:5e:a2:09:
                    49:1c:87:26:0f:e8:5c:47:2d:b3:4e:b7:74:d3:ea:
                    92:0e:f4:e2:19:d5:30:84:57:ae:eb:25:90:d2:8a:
                    f4:10:e2:6d:98:85:27:c4:4a:a0:ca:d6:d1:3c:f2:
                    0d:94:9b:a8:a6:b4:21:b2:a0:85:e1:13:ee:d9:ac:
                    8d:7d:12:18:4c:08:f6:76:dc:ad:66:1b:b8:d0:b7:
                    b3:d5:05:ad:61:f8:55:58:ba:65:be:7e:5a:24:74:
                    af:30:fb:f6:5d:ed:6e:cf:22:9e:fb:9b:28:f3:c0:
                    1e:66:28:6f:01:f5:56:ee:be:1e:e3:5b:ae:92:11:
                    68:14:41:74:11:87:cd:41:1b:46:bc:84:1a:ae:1c:
                    63:4c:50:97:02:f8:5a:c2:47:31:70:d2:f3:6e:85:
                    77:a4:06:04:3c:e5:b7:be:a7:e0:23:13:ad:a8:7c:
                    b0:cc:0d:f9:b9:5b:50:f2:89:88:12:d4:e4:53:73:
                    84:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3C:AB:2B:5F:E0:0B:EE:22:33:CA:98:16:09:22:2A:9E:2E:97:B8
            X509v3 Authority Key Identifier:
                keyid:8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/FTyrK1_gC-4iM8qYFgkiKp4ul7g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:72:7c:c4:72:90:51:5f:c7:f1:a0:a6:de:89:91:0f:fe:ef:
         85:39:8a:a9:68:0b:32:22:4b:d4:bf:a2:54:b4:5b:43:9c:01:
         84:8c:2a:b0:9b:b0:76:29:0d:3a:f4:3a:62:17:a0:18:f7:61:
         4b:53:13:8c:ba:09:71:1f:25:bb:9d:6c:9e:65:46:ca:65:fe:
         26:7e:28:73:f8:02:97:eb:c7:11:a9:78:20:46:6f:2c:71:c9:
         82:64:9a:a0:d9:71:79:6e:95:b3:6d:32:04:b0:4a:de:25:61:
         f3:41:f3:9a:1e:37:ae:3a:40:1a:2f:03:2b:c7:92:a1:98:7f:
         d5:bd:5b:30:33:7f:4d:52:d8:0f:d4:36:de:c3:e0:c3:05:80:
         60:13:c7:e8:99:c8:19:fd:f2:21:ed:ff:33:c9:60:fc:62:74:
         7c:4b:4a:e0:5f:46:d7:ac:99:f9:0f:84:ce:53:ca:43:bf:58:
         af:97:29:22:04:ba:e9:6c:76:fe:85:ba:82:3f:33:28:c2:0f:
         85:c2:88:cd:c1:ee:2a:f5:84:3b:27:78:96:ac:9a:52:93:fa:
         93:16:7f:97:25:d2:1e:88:8a:c4:40:1f:dc:25:4c:c6:25:5e:
         2d:37:48:1f:71:e1:c4:29:b4:6a:46:dd:21:24:4a:1e:1f:cd:
         3e:2c:cf:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 25 00:52:44 2024 by rpki-client on console-ams.rpki-client.org