Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/klJO9bi11tHF8Gn4fEIeOiTrqws.roa
File:                     klJO9bi11tHF8Gn4fEIeOiTrqws.roa (raw, json)
Hash identifier:          8cV9gwjNmH9ax841U5qmbl7ppbPy8m8tAcB+r/vUKVk=
Subject key identifier:   92:52:4E:F5:B8:B5:D6:D1:C5:F0:69:F8:7C:42:1E:3A:24:EB:AB:0B
Certificate issuer:       /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial:       4E
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/klJO9bi11tHF8Gn4fEIeOiTrqws.roa
Signing time:             Wed 31 Jul 2024 01:28:08 +0000
ROA not before:           Wed 31 Jul 2024 01:28:08 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     17675
IP address blocks:        103.28.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
        Validity
            Not Before: Jul 31 01:28:08 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=92524EF5B8B5D6D1C5F069F87C421E3A24EBAB0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:c3:5f:ca:e9:96:03:a3:fb:08:b1:24:35:
                    c5:20:b7:23:92:67:68:9d:d7:39:0f:d6:d2:e6:06:
                    eb:df:5b:77:e1:88:b5:89:93:11:18:4b:ff:39:05:
                    6d:86:f2:42:19:2c:f9:2b:86:e5:80:e6:5d:15:b9:
                    0d:2e:a2:94:f1:23:3f:15:6b:ed:a8:35:fc:6c:3f:
                    c5:73:60:f3:98:75:34:2d:80:bd:54:6a:21:e7:49:
                    b5:6d:07:89:fe:50:c2:38:1f:b1:81:64:3b:53:49:
                    ef:56:d4:ba:82:4c:10:f4:ef:9d:2d:0a:6c:da:9d:
                    de:d9:32:69:de:a1:7d:fe:d5:73:98:f5:c5:1a:7c:
                    ad:e5:d3:d0:bd:26:5a:f7:ee:fc:43:30:01:ff:4f:
                    99:6a:3b:d5:6f:da:23:76:69:e7:54:b8:a2:56:2d:
                    4f:f5:10:09:bb:cd:7d:7a:56:46:1b:7d:c1:b0:13:
                    63:b6:f2:0f:6d:78:fd:3f:20:40:8c:b4:ea:ee:0a:
                    5d:48:f8:cd:02:ac:eb:02:f1:a5:e0:fa:7e:69:8b:
                    2c:01:6a:5b:c1:9c:5b:19:f0:48:30:7f:65:23:5e:
                    2b:db:dd:84:26:95:e0:1f:22:9f:6f:c6:71:f9:17:
                    9c:d6:1f:18:d4:02:d8:74:fe:c5:9d:d8:85:6e:38:
                    ab:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:52:4E:F5:B8:B5:D6:D1:C5:F0:69:F8:7C:42:1E:3A:24:EB:AB:0B
            X509v3 Authority Key Identifier:
                keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/klJO9bi11tHF8Gn4fEIeOiTrqws.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:36:90:eb:02:e1:5e:0f:27:b8:95:73:99:9d:dc:94:82:ef:
         95:b8:18:ce:93:c8:d8:ce:6e:82:4e:93:07:e9:5d:07:01:fc:
         c4:5a:2e:cf:3b:40:6a:ab:f5:c4:f8:50:ab:52:47:6c:74:b3:
         22:a6:61:32:1b:71:fa:e3:98:0a:45:ba:87:b2:64:6e:66:b8:
         64:96:52:5a:17:7d:62:1d:36:05:35:49:0a:c6:49:76:31:50:
         36:89:43:95:64:f8:d5:3f:93:3f:d2:03:41:38:f0:83:b0:97:
         b6:68:9f:fd:67:8a:85:73:10:26:54:24:32:04:ce:cc:5d:66:
         42:e4:76:fd:c0:55:db:51:cd:05:0f:f8:29:90:41:bc:f0:e4:
         db:31:63:eb:dc:cc:46:38:66:e8:ac:19:c2:01:74:0d:63:ed:
         21:56:f5:22:75:34:1b:eb:8e:84:4e:4f:6f:1c:0e:a3:4d:ea:
         90:af:39:6e:4c:87:f3:cd:e4:06:b6:68:09:e4:3d:30:8a:60:
         95:b3:2a:1e:c9:b8:13:22:f7:52:ad:6d:92:8f:9d:72:63:39:
         89:73:45:7e:27:f2:5e:78:1b:b5:08:f5:2f:79:15:f2:d6:a8:
         ae:24:03:8d:a7:10:94:56:72:e2:8d:73:ed:21:06:e9:cb:15:
         5d:1a:f3:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:08 2024 by rpki-client on console-fra.rpki-client.org