Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/AJNS6JfyFSD4mq9mATj6rNkxhmo.roa
File:                     AJNS6JfyFSD4mq9mATj6rNkxhmo.roa (raw, json)
Hash identifier:          Zu/040L3SU5C1ctqPZdDund0GrSSWLbFwK67wsM1Rh0=
Subject key identifier:   00:93:52:E8:97:F2:15:20:F8:9A:AF:66:01:38:FA:AC:D9:31:86:6A
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       2F
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/AJNS6JfyFSD4mq9mATj6rNkxhmo.roa
Signing time:             Sat 30 Nov 2024 01:29:31 +0000
ROA not before:           Sat 30 Nov 2024 01:29:31 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     131923
IP address blocks:        103.95.104.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Nov 30 01:29:31 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=009352E897F21520F89AAF660138FAACD931866A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:d6:bf:ce:7f:af:86:42:71:9b:29:6d:d7:
                    2d:fa:4f:d1:76:f1:cd:5b:41:2f:3b:83:d7:52:39:
                    46:20:77:07:cc:88:e8:6b:19:69:4b:07:99:a5:2e:
                    3c:5b:c6:35:7b:61:d7:9c:88:97:c3:cf:60:a4:25:
                    d4:02:28:06:ae:97:5d:f7:5d:da:16:19:cc:0a:4e:
                    57:9a:94:f9:ab:bb:5c:83:67:71:91:e6:f3:34:ad:
                    42:a5:6b:9f:1f:fa:87:70:fc:55:22:59:7b:d7:bd:
                    92:7c:43:71:f9:66:a2:43:d5:01:12:5a:5e:7b:c0:
                    06:7c:9b:47:47:42:21:3f:7d:1d:7d:ed:ea:a5:5b:
                    e3:e2:73:cd:f4:54:fe:dd:2e:1c:5f:35:d1:e8:36:
                    da:44:cf:f3:7d:88:75:43:ca:96:b2:32:e0:ec:fd:
                    62:b1:72:5c:91:0b:ae:83:3b:dd:24:6a:c4:85:b6:
                    44:f9:5e:b9:cc:f0:1b:8e:a1:9e:d1:f3:4a:db:12:
                    54:82:6d:0a:ce:d0:7b:2e:33:06:fa:5a:9c:07:2d:
                    77:c1:8d:0d:3f:20:42:c8:64:b1:07:34:c8:33:29:
                    e8:4f:4d:83:45:49:8a:04:36:ce:58:40:7b:88:3b:
                    8f:cd:57:05:ae:a4:0a:61:ff:ef:7a:a9:f3:82:6b:
                    f0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:93:52:E8:97:F2:15:20:F8:9A:AF:66:01:38:FA:AC:D9:31:86:6A
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/AJNS6JfyFSD4mq9mATj6rNkxhmo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:36:68:78:99:e2:cf:26:1d:d2:a2:a7:43:b8:3e:e6:81:61:
         60:11:97:db:f8:8f:89:10:8b:2f:96:66:d2:f7:33:6b:5b:6f:
         35:13:66:ea:f4:e7:5d:f0:d0:6b:d4:e3:d4:49:c5:1f:b5:e6:
         be:62:05:ac:3f:f5:25:77:3b:26:3c:61:e7:10:5a:87:78:72:
         8b:d0:4d:05:02:a8:4e:76:52:ea:05:e5:0b:d6:b3:8c:65:1e:
         53:93:a3:8b:aa:8e:3d:52:1b:07:72:6b:c7:5e:13:73:a7:87:
         0b:04:96:4e:dd:a8:3c:01:8c:21:45:fc:42:18:b9:14:0c:ef:
         d4:82:b1:ce:1a:e9:8f:7c:59:13:ac:14:80:7e:ba:7d:a2:91:
         d0:fc:ad:f2:a2:fa:ad:80:48:9a:11:5b:52:82:da:ef:03:48:
         ea:8d:be:1a:f4:67:61:f6:7d:cb:2e:92:7c:ab:55:90:79:d4:
         ce:4e:48:bf:d1:ca:89:d4:08:a4:9f:30:01:44:0f:7c:08:0e:
         77:77:c0:dd:8a:85:db:37:67:c0:ed:32:31:52:ef:62:21:4a:
         f5:e3:e2:95:2d:c7:b7:79:d7:b9:0d:bc:a4:35:6d:3b:85:68:
         54:1b:09:55:f9:02:69:18:56:1f:79:4f:3f:ae:4b:5f:a4:d2:
         9b:c8:7e:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:01 2025 by rpki-client