Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20041/jIvKfwKO44zzPNheOX54iBZgBwo.roa
File:                     jIvKfwKO44zzPNheOX54iBZgBwo.roa (raw, json)
Hash identifier:          fE4f4DduW7qYGMRR1FGuOdDE+OD/GHEagXJtazq3vjg=
Subject key identifier:   8C:8B:CA:7F:02:8E:E3:8C:F3:3C:D8:5E:39:7E:78:88:16:60:07:0A
Certificate issuer:       /CN=28E69152BA3F7A57A1B991000156E582AD0EC9D9
Certificate serial:       3B
Authority key identifier: 28:E6:91:52:BA:3F:7A:57:A1:B9:91:00:01:56:E5:82:AD:0E:C9:D9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KOaRUro_elehuZEAAVblgq0Oydk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/jIvKfwKO44zzPNheOX54iBZgBwo.roa
Signing time:             Sun 30 Jun 2024 01:28:49 +0000
ROA not before:           Sun 30 Jun 2024 01:28:49 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     63771
IP address blocks:        103.96.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/KOaRUro_elehuZEAAVblgq0Oydk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/KOaRUro_elehuZEAAVblgq0Oydk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KOaRUro_elehuZEAAVblgq0Oydk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E69152BA3F7A57A1B991000156E582AD0EC9D9
        Validity
            Not Before: Jun 30 01:28:49 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=8C8BCA7F028EE38CF33CD85E397E78881660070A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8f:f5:06:1d:2c:1d:5e:ea:97:dc:77:87:93:
                    41:18:66:ce:6a:a2:dc:e2:0f:c1:f5:18:52:8e:6b:
                    53:84:c0:a2:1c:b9:55:ad:e5:30:69:97:98:2d:fa:
                    56:16:f3:bf:99:1f:f4:7a:04:6d:a9:33:62:f7:d4:
                    20:49:d9:e5:e7:9b:02:84:3a:dc:d1:97:8f:70:c6:
                    71:aa:aa:6b:a0:0f:a4:bd:5d:66:cb:5a:58:12:c2:
                    a0:d3:2a:e5:86:17:33:0e:2e:2b:6d:96:c9:7d:91:
                    1b:41:fe:58:1f:e5:f8:ff:1b:99:aa:e7:2d:24:64:
                    12:f8:3e:20:41:c1:08:47:45:be:7c:61:b9:e9:c5:
                    17:dc:79:0e:90:c5:4e:45:47:e0:50:67:8a:6e:4c:
                    96:c5:ff:89:93:27:e5:c9:00:3d:83:3f:8a:04:25:
                    80:82:7b:0c:1c:bb:66:81:03:a3:16:6d:26:9f:62:
                    c6:7d:29:7c:89:69:93:50:68:4f:60:a9:55:6f:97:
                    78:f1:06:37:50:5b:20:78:3a:5d:ec:92:e0:ec:09:
                    d3:a0:ec:7d:58:d0:08:45:a1:c9:6d:e7:9c:49:f4:
                    9f:74:c8:75:9b:59:8e:a9:f5:c6:a5:7d:b0:7d:ed:
                    4c:18:24:46:b8:89:f2:1d:5c:aa:d6:ca:e7:e5:47:
                    f2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8B:CA:7F:02:8E:E3:8C:F3:3C:D8:5E:39:7E:78:88:16:60:07:0A
            X509v3 Authority Key Identifier:
                keyid:28:E6:91:52:BA:3F:7A:57:A1:B9:91:00:01:56:E5:82:AD:0E:C9:D9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/KOaRUro_elehuZEAAVblgq0Oydk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KOaRUro_elehuZEAAVblgq0Oydk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/jIvKfwKO44zzPNheOX54iBZgBwo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:87:08:c0:6c:45:86:a6:5d:51:ec:9b:eb:c0:8b:75:35:11:
         55:5c:00:d9:ef:8f:fa:37:29:5d:37:14:ed:04:ef:b7:d6:62:
         75:d5:a4:3c:7f:c2:05:56:7f:a8:b0:30:7e:5c:a3:d4:d1:6c:
         d5:a7:71:3f:5e:e4:cf:3f:51:34:0b:de:97:43:f0:0a:20:8f:
         b8:d6:de:7f:05:76:b5:9b:ba:1c:23:fa:eb:58:c4:52:81:3a:
         4f:bf:32:bf:50:4a:34:7e:fe:aa:95:8c:98:5b:1e:fa:f8:92:
         2a:4f:21:88:22:11:a6:d5:2e:0c:03:45:95:e2:2a:17:37:f5:
         ea:aa:d0:e7:01:a6:e7:8f:b4:3f:86:7c:5f:a2:6c:52:f9:d4:
         41:97:d9:37:56:48:af:c4:f4:fd:db:0e:85:c5:97:af:2c:06:
         60:aa:59:66:02:bb:a5:68:a0:f1:a7:e1:3b:33:fe:fc:4f:c8:
         65:f9:ed:a6:f4:87:9e:35:8c:f7:14:d4:a0:b3:34:13:69:bc:
         16:eb:9b:90:4f:8a:ea:bf:95:e0:a3:41:f8:31:c6:e6:6c:b2:
         6b:2d:7d:fe:3b:ea:ee:e8:18:fc:de:c5:49:95:d3:b4:6b:e9:
         e7:97:79:55:2e:82:48:a1:6b:97:69:fa:0b:ce:b1:e1:46:a5:
         a7:a9:1b:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org