Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/QquElBQwba7bh6Pm37XaGcKuWDc.roa
File:                     QquElBQwba7bh6Pm37XaGcKuWDc.roa (raw, json)
Hash identifier:          /VcB6I0hZar4EeU7otc+4RANGf+m9sxI/AEGlDDsorc=
Subject key identifier:   42:AB:84:94:14:30:6D:AE:DB:87:A3:E6:DF:B5:DA:19:C2:AE:58:37
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       FA
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QquElBQwba7bh6Pm37XaGcKuWDc.roa
Signing time:             Fri 01 Sep 2023 01:28:53 +0000
ROA not before:           Fri 01 Sep 2023 01:28:53 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        103.2.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:28:53 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=42AB849414306DAEDB87A3E6DFB5DA19C2AE5837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2a:4f:07:6a:26:49:56:41:d3:6f:60:b2:58:
                    cd:fb:cc:61:b7:d2:f4:ff:c0:bc:16:cb:0f:3b:ff:
                    4e:12:2a:6f:db:46:43:46:8e:e4:9e:59:c7:62:8b:
                    f4:33:39:00:aa:1d:7a:a1:f9:b5:83:5d:4d:3e:e0:
                    6b:4b:6f:05:6e:0d:9b:ef:94:2b:4f:51:7e:3e:b0:
                    a7:41:67:f1:77:8f:bb:51:86:be:ac:74:6f:74:1c:
                    0c:78:bf:99:0f:6d:1e:93:48:d0:d3:dd:49:32:bd:
                    62:eb:96:49:62:0d:fd:e1:53:1a:f9:6f:24:8e:b2:
                    c9:80:8c:73:b7:2a:46:a7:0a:a8:36:5f:49:aa:36:
                    0d:19:c8:de:8f:17:d1:e8:19:d3:cf:d1:93:97:0a:
                    95:88:7c:da:76:70:76:be:9c:70:53:89:74:02:61:
                    9b:8b:b5:26:fa:75:c8:0b:4c:26:9f:2c:1e:cc:e9:
                    bd:76:0f:61:1b:46:62:13:aa:d0:bd:3a:c6:4b:43:
                    16:6c:17:6b:99:e7:f0:2d:ac:18:f9:85:b8:b4:da:
                    18:37:64:d8:2c:6d:b1:c7:80:f8:2d:1b:36:50:62:
                    45:ba:d3:e3:aa:ea:e3:1a:10:ce:0b:b2:f3:c8:0a:
                    bb:9b:24:b6:08:e1:29:79:02:a9:4a:68:d5:d5:09:
                    80:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AB:84:94:14:30:6D:AE:DB:87:A3:E6:DF:B5:DA:19:C2:AE:58:37
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QquElBQwba7bh6Pm37XaGcKuWDc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:e9:f6:22:ee:b2:1b:80:fb:43:30:3c:0d:be:65:84:f4:1d:
         ca:5b:eb:6f:cd:43:a7:70:fd:36:ea:d9:37:f6:63:bd:cb:4f:
         52:10:57:8b:e1:39:8d:06:bc:e1:16:b9:3c:30:98:12:c7:2d:
         bd:8b:64:ae:00:2c:b1:1a:c6:d7:9c:c8:c8:8e:87:56:11:b6:
         80:39:d0:f2:75:d6:03:14:f2:ac:fa:82:70:aa:c3:48:fe:5a:
         7d:3a:88:f4:ed:4e:a1:e1:e7:56:2b:be:a3:5f:2b:74:c1:cf:
         30:43:c2:4e:db:02:8c:f5:4a:9c:2b:e8:c4:58:08:c4:84:82:
         26:4b:a3:f2:8f:db:be:fa:80:0f:a3:13:f0:07:4a:35:1a:89:
         56:5f:aa:11:42:8e:fe:a0:82:f6:52:60:45:79:e2:cd:76:6b:
         88:62:ca:c1:b4:25:a9:b4:d1:c0:30:f1:a8:ec:a3:16:98:74:
         13:f5:0a:fb:9c:a2:d1:99:27:98:f9:65:15:6c:4a:2e:62:bc:
         cb:a7:1a:20:d2:fa:ac:aa:e5:b9:3b:af:68:6b:d6:0f:6a:36:
         18:06:8e:d1:15:23:65:bd:97:74:93:6d:4b:4f:a3:9d:77:44:
         68:32:56:ac:b2:9a:2b:86:38:45:8b:ee:7b:7d:ec:13:90:2c:
         7a:3e:1d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:47 2024 by rpki-client on console-fra.rpki-client.org