Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/4anhyE7-8a504z0qlWykmXrajaA.roa
File:                     4anhyE7-8a504z0qlWykmXrajaA.roa (raw, json)
Hash identifier:          SKmeryYWMhdBoZ69dMR8NMCjuZPyC2Rg3ezfiPvfDrU=
Subject key identifier:   E1:A9:E1:C8:4E:FE:F1:AE:74:E3:3D:2A:95:6C:A4:99:7A:DA:8D:A0
Certificate issuer:       /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial:       49
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/4anhyE7-8a504z0qlWykmXrajaA.roa
Signing time:             Fri 31 May 2024 01:31:34 +0000
ROA not before:           Fri 31 May 2024 01:31:34 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     24295
IP address blocks:        103.28.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
        Validity
            Not Before: May 31 01:31:34 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=E1A9E1C84EFEF1AE74E33D2A956CA4997ADA8DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:bc:01:75:c8:3b:80:06:89:b5:8e:30:ca:2c:
                    10:72:8f:c0:cf:a4:7a:c2:a2:4e:fa:5d:6f:db:e2:
                    6a:94:70:85:df:17:b6:7a:1b:d3:77:2d:d2:00:bc:
                    c8:42:da:9e:4e:00:c7:8a:ff:e0:fc:c1:4a:73:25:
                    78:11:5e:7f:34:0c:62:b4:4c:c1:c8:fd:ac:b4:7e:
                    a8:77:d9:1d:14:8f:8f:e4:89:fb:1d:29:04:25:e4:
                    4e:a1:3b:22:b3:37:b9:37:5a:54:f1:c4:e4:98:b9:
                    21:62:8f:26:cc:27:65:c9:f8:de:0e:d7:2c:d8:17:
                    93:a3:04:a5:0f:32:61:37:5d:6b:53:64:7a:68:ef:
                    83:cf:49:04:d8:60:24:f0:8d:2c:b5:21:77:a8:ef:
                    89:d1:c9:03:26:ba:90:0f:34:40:f7:46:10:d7:e1:
                    57:68:87:55:5f:10:4f:a8:0f:77:4d:99:84:0a:e7:
                    ee:ce:f6:c3:a7:70:b1:c6:de:1d:bf:a3:04:d2:47:
                    42:96:57:5d:77:8d:70:77:c1:38:b0:c2:1f:65:d6:
                    29:58:0a:1e:31:b8:04:58:b4:c4:29:9a:50:ee:e0:
                    b0:fc:25:01:11:0d:c5:c4:36:41:a4:1b:fc:98:0e:
                    11:9f:69:e7:58:a0:c2:9e:ac:a4:42:65:13:8c:47:
                    29:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A9:E1:C8:4E:FE:F1:AE:74:E3:3D:2A:95:6C:A4:99:7A:DA:8D:A0
            X509v3 Authority Key Identifier:
                keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/4anhyE7-8a504z0qlWykmXrajaA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:ff:2c:b8:36:ed:d8:4e:62:6b:1f:b1:4f:e4:20:c3:ed:d7:
         d9:ef:bb:44:8d:99:9b:e1:be:93:3c:ad:cc:05:17:5f:65:e6:
         a2:31:64:ba:5e:29:2f:01:43:86:cf:c4:72:72:13:f6:c0:b4:
         14:f8:33:8a:9d:86:69:8e:7a:8d:e3:ff:d5:53:91:00:32:19:
         e6:27:bb:ff:ac:56:fb:68:64:a4:4a:d7:02:7a:17:4b:39:53:
         6b:78:3b:60:3d:63:08:3d:c0:8c:8c:70:0f:cd:8f:b1:93:af:
         31:99:a3:98:6e:00:22:1f:df:05:61:45:49:0e:ec:76:2b:b9:
         e0:18:da:a6:56:4b:dc:0b:28:bd:48:43:61:41:8c:df:f9:4e:
         2e:34:69:19:90:ad:c6:95:93:2e:03:e9:fe:4a:b2:4d:de:f7:
         ce:67:a6:64:12:4b:a6:94:97:da:fb:e8:84:dd:8f:61:d2:42:
         af:47:6e:e0:80:08:01:45:42:fb:da:6e:29:66:75:82:7e:e6:
         ad:b4:d4:10:f0:59:6d:25:d7:bb:58:78:4e:5d:86:dc:0d:26:
         8f:46:df:12:fc:4d:43:6d:3e:54:71:91:52:76:7c:53:a1:da:
         d3:4a:d7:9b:8a:ee:b3:ea:87:b9:f1:9a:df:49:ef:e6:70:74:
         50:ea:9c:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:08 2024 by rpki-client on console-fra.rpki-client.org