Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/1E2xqk2DllGv88xEUlROUnCIUPc.roa
File:                     1E2xqk2DllGv88xEUlROUnCIUPc.roa (raw, json)
Hash identifier:          J3n1c7lQOtCWGpQVE5Wc6WM+hisXlQitKBss2XzxmFo=
Subject key identifier:   D4:4D:B1:AA:4D:83:96:51:AF:F3:CC:44:52:54:4E:52:70:88:50:F7
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       0E
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/1E2xqk2DllGv88xEUlROUnCIUPc.roa
Signing time:             Fri 17 Nov 2023 17:55:12 +0000
ROA not before:           Fri 17 Nov 2023 17:55:12 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     7511
IP address blocks:        103.53.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Nov 17 17:55:12 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=D44DB1AA4D839651AFF3CC4452544E52708850F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ad:dc:4a:fe:f3:21:fc:d4:68:3b:ea:f9:77:
                    7e:a2:92:13:ab:8a:e4:2c:4d:04:87:e6:92:48:4a:
                    09:be:e3:bd:f3:02:bd:d2:0f:71:c9:6b:5e:ef:53:
                    7a:cb:38:dc:f7:61:59:f8:d7:2c:30:da:3c:d1:d3:
                    2e:21:7b:52:39:71:5f:52:1b:6a:7f:91:4e:31:29:
                    da:d2:aa:a8:94:e3:be:28:d7:ec:72:5d:12:b2:75:
                    1a:b1:4b:2d:c4:f7:7b:b6:54:87:78:6b:34:1c:8c:
                    2b:ba:17:30:2b:bc:84:f5:35:28:c0:ce:1d:42:c1:
                    a4:0a:16:1c:91:52:91:a6:6a:b9:8d:d5:96:ab:60:
                    aa:91:28:41:28:c8:ad:55:61:f4:e5:f4:22:03:c7:
                    df:c3:08:5b:0f:4f:90:2b:cc:ea:91:24:d0:27:c9:
                    f1:14:16:28:07:b2:9a:0f:e2:fe:1d:e9:78:bb:02:
                    fe:3f:38:dc:4d:db:8a:a5:e6:66:d6:a6:ae:c3:7b:
                    12:f2:78:d1:de:cc:b2:98:25:20:a4:5f:5a:0e:62:
                    57:9c:38:3c:0a:59:b9:9e:15:63:36:68:fb:f0:e7:
                    37:3d:0c:ed:da:93:86:f3:81:74:f6:ee:2b:4a:25:
                    db:35:09:0e:bf:32:b1:0f:dc:a8:e1:cc:30:70:7c:
                    a0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4D:B1:AA:4D:83:96:51:AF:F3:CC:44:52:54:4E:52:70:88:50:F7
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/1E2xqk2DllGv88xEUlROUnCIUPc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:40:b0:09:fc:98:f3:d2:c1:2d:2e:5d:f2:88:c3:3a:39:b7:
         a3:89:8c:77:ce:27:0b:bb:77:b5:79:42:e4:e0:91:ee:f1:42:
         f6:73:36:3a:ee:32:55:31:77:28:d7:0d:bc:bd:5b:dd:45:5f:
         27:42:73:86:c8:1d:60:44:51:99:9c:34:07:96:65:da:19:f2:
         51:ae:a1:b5:76:ed:be:cc:5f:44:aa:be:76:4b:66:a3:e4:95:
         03:03:ff:50:d8:04:2a:a5:f5:7b:56:bb:af:07:bb:23:ff:d5:
         7f:6c:8f:1f:16:bc:9a:8c:59:3d:4a:99:13:cc:0b:9e:cf:b1:
         71:6d:6b:ea:5b:2d:d6:41:a5:ff:46:85:70:1c:5a:c0:b4:68:
         2f:23:03:55:37:81:95:78:9f:dd:75:c0:f1:ca:93:ef:10:71:
         f2:22:21:22:1b:d3:fc:13:7e:79:84:a3:37:23:09:36:4a:9f:
         03:f3:94:a0:14:9b:49:10:58:53:a4:60:9a:f9:8c:9b:08:1f:
         dc:11:35:7f:a2:bc:b7:53:f3:b5:75:92:37:d1:a4:84:0d:19:
         61:46:7b:de:e9:df:0a:ab:f4:05:c9:41:91:80:4c:78:37:c3:
         64:4c:8a:a2:e8:5d:63:5c:74:88:69:09:65:94:b8:a2:08:00:
         97:72:2f:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:17 2024 by rpki-client on console-ams.rpki-client.org