Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/bSfZODLnUvhTm5WyWXtgugSWyxI.roa
File:                     bSfZODLnUvhTm5WyWXtgugSWyxI.roa (raw, json)
Hash identifier:          uR+AvSHJmW/XutCXKt4B3SklIlNOPupsI+dFUE3Wn5s=
Subject key identifier:   6D:27:D9:38:32:E7:52:F8:53:9B:95:B2:59:7B:60:BA:04:96:CB:12
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       B2
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/bSfZODLnUvhTm5WyWXtgugSWyxI.roa
Signing time:             Thu 29 Feb 2024 01:29:57 +0000
ROA not before:           Thu 29 Feb 2024 01:29:57 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18126
IP address blocks:        103.2.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Feb 29 01:29:57 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=6D27D93832E752F8539B95B2597B60BA0496CB12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:39:1b:5d:e3:f1:ba:a8:ca:a8:6c:bb:1f:
                    79:87:ff:80:2a:80:08:73:60:ec:b8:97:b1:bb:1f:
                    b8:c1:4d:5d:2c:a9:21:d1:97:c2:04:e8:46:19:f4:
                    b3:61:63:a9:05:99:3a:86:8f:98:de:1b:fc:ef:63:
                    05:4d:8e:bc:5a:d5:12:26:c3:90:e9:9f:05:e0:32:
                    00:61:6a:85:fb:fb:27:8a:73:83:3c:d6:25:f6:c2:
                    98:78:21:99:8e:3d:3c:ee:b7:82:7b:09:0d:d1:e7:
                    81:a6:c7:4c:f0:d8:8e:a3:7f:93:fc:28:9e:2d:3f:
                    4f:5c:4a:ea:e8:2c:10:a3:72:d6:56:a9:62:21:c6:
                    91:43:fe:b5:95:18:86:96:ad:e2:38:72:94:ca:e0:
                    86:f4:5d:d1:8c:bd:41:43:4a:31:b1:1d:16:63:bd:
                    d0:e9:f8:c1:6c:d1:dc:12:cd:be:74:56:42:33:4d:
                    fd:06:1d:94:0f:1b:64:7b:26:63:17:fb:45:58:11:
                    37:20:f1:75:da:e7:c5:46:93:fc:82:b6:96:2f:06:
                    21:77:70:52:be:0d:fc:ff:8b:38:6c:cd:ed:71:76:
                    96:73:d3:d8:65:73:69:09:39:ff:78:4c:ba:5e:e2:
                    4d:f5:f4:a4:2c:5e:70:21:7d:7d:a5:50:5a:e8:1b:
                    87:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:27:D9:38:32:E7:52:F8:53:9B:95:B2:59:7B:60:BA:04:96:CB:12
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/bSfZODLnUvhTm5WyWXtgugSWyxI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:e3:0e:40:5b:d8:19:5e:b2:d7:a6:dc:b4:28:bb:9d:b8:a0:
         00:d3:ba:b5:82:e9:33:87:8f:8d:ee:d8:82:bd:e6:f6:f5:ba:
         07:d2:5e:7f:b6:27:97:ca:d0:5b:07:83:e4:9d:04:30:54:db:
         d7:ea:7e:2d:de:62:0e:c2:8c:9c:8d:d6:40:56:fd:92:72:a1:
         d7:5a:bf:f6:32:53:a1:65:a2:ba:6e:03:8f:ac:16:2e:d6:9e:
         cb:b2:3e:de:3a:ff:e6:46:37:88:1e:49:c4:06:7b:6a:e0:b2:
         2e:2e:08:12:24:25:56:18:d8:bf:90:1c:46:2e:b4:c9:b8:73:
         81:68:62:bd:05:84:b5:f9:28:65:d7:82:ef:b3:44:a6:c9:c1:
         2d:08:f8:37:80:7d:a2:51:be:fa:25:2f:c4:e0:5f:ad:a8:bd:
         61:b9:07:c2:ff:af:5d:d9:36:d6:a7:9a:dc:8e:56:42:ea:09:
         3a:c4:fa:cc:57:86:03:fc:2e:21:26:1f:48:c2:24:a2:51:0d:
         d3:69:71:40:0a:74:c6:b8:a7:0d:5b:f8:e2:4a:e1:48:c9:d6:
         5e:d2:f8:71:e5:1f:6c:f3:04:a4:49:91:b7:bf:26:a0:38:3e:
         e7:b0:67:5c:03:ce:70:4a:5d:8b:8d:94:1b:93:92:08:34:9b:
         0c:31:0b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:10 2024 by rpki-client on console-ams.rpki-client.org