Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/b126MigIR6pgrMexFFnsDvN3cRg.roa
File:                     b126MigIR6pgrMexFFnsDvN3cRg.roa (raw, json)
Hash identifier:          SXFrqayaBNKQ/2+zCLNTSfWpFa9P25vzy38YDaGCv1U=
Subject key identifier:   6F:5D:BA:32:28:08:47:AA:60:AC:C7:B1:14:59:EC:0E:F3:77:71:18
Certificate issuer:       /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Certificate serial:       49
Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/b126MigIR6pgrMexFFnsDvN3cRg.roa
Signing time:             Thu 29 Feb 2024 01:30:27 +0000
ROA not before:           Thu 29 Feb 2024 01:30:27 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     59125
IP address blocks:        103.246.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
        Validity
            Not Before: Feb 29 01:30:27 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=6F5DBA32280847AA60ACC7B11459EC0EF3777118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:5d:55:01:45:66:01:90:f9:ab:a5:6a:df:
                    a2:6b:f0:71:3b:c9:16:62:8d:2b:af:31:28:0c:60:
                    8e:f4:1d:de:02:67:57:87:9d:b6:39:fc:e5:0b:d1:
                    b7:be:04:d8:48:97:3a:f8:6e:e3:1c:bf:60:7d:36:
                    7f:c5:88:f0:92:dd:4f:d3:22:6a:e4:51:6c:3e:22:
                    8c:d0:fa:ed:21:3b:f6:e3:3a:f6:9e:a4:47:01:c7:
                    90:95:b8:98:88:1c:00:60:d2:c4:e3:d1:73:6a:29:
                    51:d8:38:3b:f3:ad:a2:e9:50:ea:24:f7:0e:b1:02:
                    58:1a:2f:cb:3a:6b:11:7f:f7:bf:d7:14:35:4d:bb:
                    a5:41:46:1f:81:ab:e3:9c:15:3c:a5:ad:c2:aa:0c:
                    da:bd:ea:a5:b6:6d:94:1d:29:95:d1:ce:d2:06:2e:
                    24:79:b5:72:f7:6b:56:9d:c1:df:59:78:9c:b9:52:
                    4b:f1:fd:74:6b:e3:3e:88:a5:30:ac:b5:04:3e:84:
                    4c:65:82:1e:b0:c9:f8:1f:c7:f9:6b:d8:b7:f5:77:
                    48:a5:0f:a6:e6:16:e5:bd:43:7e:4a:b6:79:2c:db:
                    d3:2d:c0:1c:94:14:1d:ae:7a:aa:ef:a3:da:3a:4c:
                    fd:ce:c1:8c:5a:35:f0:ae:89:d0:90:d3:fb:d3:9e:
                    d1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5D:BA:32:28:08:47:AA:60:AC:C7:B1:14:59:EC:0E:F3:77:71:18
            X509v3 Authority Key Identifier:
                keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/b126MigIR6pgrMexFFnsDvN3cRg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:46:5a:7a:55:7a:c1:fd:19:93:c2:13:72:0d:26:3c:7d:60:
         c5:5a:28:b2:34:f2:0b:b8:48:6d:d4:7f:df:33:d5:bb:8c:13:
         61:a4:b9:37:a9:9e:91:b8:f2:46:d8:6c:e6:47:70:68:82:0b:
         88:a8:7f:e2:2b:bf:2b:13:e7:29:4b:0e:02:97:1e:28:35:9c:
         74:9c:24:b4:d4:f2:35:f8:56:45:de:91:72:ed:fc:0e:79:32:
         34:b0:b5:98:60:da:60:1c:5b:f0:34:2b:18:1f:b3:fa:ce:24:
         1a:fc:22:66:e2:6c:da:00:1f:74:45:8d:2d:9f:35:fa:45:d7:
         a1:96:20:96:dd:3d:26:6e:0d:61:93:e5:51:cb:d5:2f:a6:09:
         f7:46:49:2d:09:b6:1e:df:0c:0e:8c:0a:d0:21:01:58:2c:df:
         00:53:79:0f:6f:6c:5b:c3:f4:4f:f7:d6:56:25:d1:33:54:3e:
         ab:a9:fa:ae:21:9c:09:c8:a2:66:3f:d3:36:4d:9a:38:e7:5c:
         ba:6b:f6:48:3a:3c:49:1d:97:09:01:b1:34:37:e5:f7:29:da:
         34:8b:a3:62:aa:de:72:85:0d:c8:a7:f4:10:42:49:57:80:67:
         18:69:5d:c7:b3:1b:65:e6:97:4b:22:02:a6:c0:bb:a0:e7:c1:
         1b:0e:df:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 23:50:30 2024 by rpki-client on console-fra.rpki-client.org