Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13131/2Zqifuf0XDP7HFec3EcyhVRRpeo.roa
File:                     2Zqifuf0XDP7HFec3EcyhVRRpeo.roa (raw, json)
Hash identifier:          qQVb5ALEuKyh+nKH1gQLsyY51T+l7siZN3TK2eKrqHo=
Subject key identifier:   D9:9A:A2:7E:E7:F4:5C:33:FB:1C:57:9C:DC:47:32:85:54:51:A5:EA
Certificate issuer:       /CN=FD13D822A4DD7BA05078F9E60025F8BFF11BEF82
Certificate serial:       52
Authority key identifier: FD:13:D8:22:A4:DD:7B:A0:50:78:F9:E6:00:25:F8:BF:F1:1B:EF:82
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/2Zqifuf0XDP7HFec3EcyhVRRpeo.roa
Signing time:             Sun 30 Jun 2024 01:28:15 +0000
ROA not before:           Sun 30 Jun 2024 01:28:15 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     38639
IP address blocks:        103.2.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD13D822A4DD7BA05078F9E60025F8BFF11BEF82
        Validity
            Not Before: Jun 30 01:28:15 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=D99AA27EE7F45C33FB1C579CDC4732855451A5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:40:61:6c:e3:c8:04:b1:ef:e9:eb:13:11:56:
                    a5:bf:f7:2a:fd:20:27:53:da:20:8a:8f:e2:f2:79:
                    5b:e1:f6:72:72:91:9b:da:b0:97:f9:8e:71:d1:1d:
                    cf:23:69:47:35:10:be:5a:00:cb:4c:25:03:62:53:
                    ec:6a:b3:ad:c4:d2:9b:bd:c9:2f:2f:e0:03:f1:4d:
                    f9:ae:53:95:04:58:d4:da:d4:db:d5:9e:31:52:30:
                    1b:3a:96:a4:55:a2:09:2f:97:9b:8d:26:81:80:f8:
                    f4:69:2c:9b:ec:4c:fe:18:0b:bc:12:5c:7a:50:42:
                    69:77:52:96:df:c5:e7:77:11:6f:a5:31:32:76:3f:
                    f4:f4:0a:29:a4:11:7c:66:b4:5d:05:07:8f:5b:5d:
                    44:26:03:a0:67:8e:7c:86:61:d6:90:5f:8a:b3:69:
                    3c:76:63:99:d9:21:63:ad:ec:6a:cb:d8:77:3c:53:
                    97:9e:e2:47:a6:ac:28:b4:48:33:94:6b:92:8b:d7:
                    c0:94:c9:d2:d1:d8:2b:45:f7:3d:df:7e:3f:ba:8b:
                    8a:5d:fd:da:72:87:3e:64:da:a2:11:c1:68:09:05:
                    e8:c5:d4:4d:d3:53:a8:e6:3f:7c:7d:23:7c:78:5a:
                    69:53:fe:61:33:5f:df:76:01:48:cf:47:9e:29:14:
                    1c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9A:A2:7E:E7:F4:5C:33:FB:1C:57:9C:DC:47:32:85:54:51:A5:EA
            X509v3 Authority Key Identifier:
                keyid:FD:13:D8:22:A4:DD:7B:A0:50:78:F9:E6:00:25:F8:BF:F1:1B:EF:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/2Zqifuf0XDP7HFec3EcyhVRRpeo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:53:63:29:82:02:34:3c:f6:ea:54:96:e6:8e:ab:55:91:11:
         4e:a1:b7:a1:fe:d6:b8:f9:44:d5:b9:12:b4:0e:9b:25:e8:88:
         8c:08:a4:96:53:02:95:93:f1:a4:ee:a3:68:8e:a7:d9:6f:35:
         6e:3a:77:16:13:0e:6c:10:c8:51:c1:22:71:7d:a8:26:e7:73:
         2d:24:44:67:92:e9:d9:db:6a:eb:2c:ef:f8:24:01:fa:8d:d0:
         a2:27:29:e8:f5:a5:4f:55:86:c3:ef:4f:5b:59:cf:d9:2b:81:
         07:1b:36:e5:61:be:a9:ac:4e:8c:bb:16:75:84:ef:f5:9f:48:
         28:57:83:bf:dd:66:b8:da:45:76:88:fc:56:99:c5:cf:54:4e:
         ed:48:9a:3d:43:ea:7e:82:f7:2d:9f:2b:47:18:ea:e5:79:e4:
         a7:a7:4d:26:7c:15:12:f0:ee:ca:60:2f:3c:97:39:17:17:64:
         02:36:f0:43:ab:6f:92:0d:a1:f3:60:6e:50:a6:d4:8e:16:e8:
         93:f1:23:9a:3c:20:6f:91:0e:e8:52:42:01:32:c0:5b:95:e6:
         f1:3e:47:df:b5:56:64:3a:2b:a4:bb:4e:4b:64:4a:b8:b5:31:
         71:e3:f4:ee:76:6f:33:ff:19:35:5a:4c:b1:b7:53:ab:4b:25:
         36:2a:c5:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:02 2024 by rpki-client on console-fra.rpki-client.org