Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20214/O5UU1rr-RcRFwoncEHbY25KTBOU.roa
File:                     O5UU1rr-RcRFwoncEHbY25KTBOU.roa (raw, json)
Hash identifier:          jcTCwziGVWd08n7Rk6Q2gQAr7zhy4H0ycesaFMzuTdI=
Subject key identifier:   3B:95:14:D6:BA:FE:45:C4:45:C2:89:DC:10:76:D8:DB:92:93:04:E5
Certificate issuer:       /CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
Certificate serial:       08
Authority key identifier: 25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/O5UU1rr-RcRFwoncEHbY25KTBOU.roa
Signing time:             Mon 13 Nov 2023 16:17:46 +0000
ROA not before:           Mon 13 Nov 2023 16:17:46 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     63800
IP address blocks:        103.131.151.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
        Validity
            Not Before: Nov 13 16:17:46 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=3B9514D6BAFE45C445C289DC1076D8DB929304E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:5b:26:b6:97:a4:37:f0:5b:7f:10:cd:06:
                    0f:af:f1:bf:30:b2:b5:d9:71:70:a6:04:a8:46:b6:
                    d0:f8:e0:02:f3:c5:1d:76:bb:d2:11:70:cc:3e:d5:
                    ee:9a:f1:69:8e:a4:02:89:7b:6c:bc:1c:62:90:7d:
                    6c:74:5b:6d:59:6f:ed:7c:90:3c:e4:8b:6e:0c:36:
                    99:0c:e4:50:17:e2:16:c6:61:aa:0a:b1:19:80:4d:
                    ed:8c:af:31:f8:ba:a5:87:1b:76:42:79:1b:27:1c:
                    af:50:5a:6f:51:1f:f1:1e:61:b0:ff:d6:db:b8:ae:
                    8c:48:83:ae:15:a5:30:f2:94:01:6a:a5:b5:df:0a:
                    48:ba:68:1b:b5:20:44:00:d6:7b:22:05:ce:4b:b9:
                    72:70:1c:02:36:f2:8f:fc:9d:ac:6c:bb:3d:b3:0a:
                    fa:4e:c2:16:5b:43:0b:b8:30:ab:a9:77:c1:d4:c7:
                    b4:39:7c:a9:00:f5:b0:6a:ef:ec:14:8f:5b:6e:10:
                    60:d3:1c:65:30:b7:19:74:35:ea:6c:e5:32:7e:40:
                    4e:84:87:49:90:b8:77:2d:8a:64:8b:b5:16:37:29:
                    c7:89:2f:1f:11:d4:80:fd:fa:cb:b8:97:eb:62:c7:
                    9e:cc:d8:be:a7:f5:b7:2b:c9:f1:44:e3:90:15:83:
                    20:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:95:14:D6:BA:FE:45:C4:45:C2:89:DC:10:76:D8:DB:92:93:04:E5
            X509v3 Authority Key Identifier:
                keyid:25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/O5UU1rr-RcRFwoncEHbY25KTBOU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:0f:e6:53:61:c2:2d:63:d4:c6:09:c3:cb:82:19:d5:9a:99:
         7e:3c:06:a1:d8:9e:5e:9f:69:19:dc:61:5b:15:95:a7:36:e2:
         b0:a7:5d:87:73:34:5f:26:a5:69:78:39:81:61:38:49:3d:14:
         55:2f:76:0d:3a:fa:68:bc:53:1d:f1:4e:7f:ea:38:b1:8b:29:
         1d:ba:02:0b:22:75:09:37:35:ab:1f:b7:f8:d4:94:01:f7:6b:
         ae:22:37:64:7d:48:d7:eb:7d:1b:2b:6a:5b:ef:9d:25:36:2c:
         4e:7e:73:b1:f2:57:38:63:27:30:2c:40:12:af:41:9f:7b:e2:
         b3:23:00:a8:6e:3e:8e:c3:75:51:35:a6:3a:d6:e4:7b:5a:eb:
         4d:f3:ed:e6:8b:33:e3:b2:77:5f:42:f5:5b:c9:15:38:d7:a7:
         e3:c3:4f:92:3c:8d:28:6b:19:09:cc:39:e2:a5:df:f7:fb:d1:
         2e:bc:be:de:2a:89:b1:f3:58:c6:27:dc:f7:9b:9a:2f:19:17:
         8e:40:2f:7b:75:59:0d:bb:c1:6c:10:dc:c5:09:4d:9d:cb:2a:
         b8:de:39:90:7f:a0:30:24:dd:57:d4:7a:ac:c6:c0:db:d0:73:
         f6:9f:c4:19:41:6b:05:f4:63:fa:db:86:ec:37:f0:34:e4:29:
         bb:2c:21:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:14 2024 by rpki-client on console-fra.rpki-client.org