Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20044/gAXCPWZiO-ySIbAVc8W-BgtAWsA.roa
File:                     gAXCPWZiO-ySIbAVc8W-BgtAWsA.roa (raw, json)
Hash identifier:          7M6uGVELVQTJRgtcsqLNDzI//CARlbMp0yLfBWlYI8w=
Subject key identifier:   80:05:C2:3D:66:62:3B:EC:92:21:B0:15:73:C5:BE:06:0B:40:5A:C0
Certificate issuer:       /CN=26F775BAC748E9582AC68A36AF57544FD74D8525
Certificate serial:       12
Authority key identifier: 26:F7:75:BA:C7:48:E9:58:2A:C6:8A:36:AF:57:54:4F:D7:4D:85:25
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/gAXCPWZiO-ySIbAVc8W-BgtAWsA.roa
Signing time:             Tue 17 Sep 2024 01:08:53 +0000
ROA not before:           Tue 17 Sep 2024 01:08:53 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     63772
IP address blocks:        103.99.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F775BAC748E9582AC68A36AF57544FD74D8525
        Validity
            Not Before: Sep 17 01:08:53 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=8005C23D66623BEC9221B01573C5BE060B405AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4c:d9:06:07:85:67:f0:cb:6e:4f:a6:01:e1:
                    69:72:57:2c:0e:a3:3b:c5:0f:2d:12:e8:04:59:7f:
                    24:cc:ae:87:76:5a:da:2e:58:5e:dc:8e:e0:ee:a9:
                    4e:df:a0:87:26:39:a3:f9:0b:c4:6c:a3:72:74:8d:
                    0d:f5:f0:cd:5f:8d:1e:c8:1d:ef:5c:5f:eb:a5:00:
                    9f:9b:f3:f9:b3:02:10:f6:79:01:1c:e6:4b:cd:81:
                    d3:26:9b:64:41:25:79:c2:e3:9a:74:45:11:ce:73:
                    3d:27:42:d2:a4:ff:c4:1d:c4:5d:a8:41:fb:61:f3:
                    92:fe:0f:f1:3c:21:1f:48:d5:46:b2:f3:a9:ee:d7:
                    c0:41:dd:2d:53:78:c0:ea:7e:dd:80:82:86:c8:b0:
                    5f:52:79:83:38:96:5e:f1:eb:54:b9:11:38:55:3d:
                    f3:e8:7d:cb:fc:81:a5:f1:91:70:13:ca:58:26:45:
                    db:6e:7c:62:16:0d:71:75:ab:77:c9:05:fb:1a:bf:
                    e2:aa:05:9d:a2:4c:a0:c6:64:9a:5c:f9:99:2d:c2:
                    4e:1d:f4:ec:31:d5:99:18:71:07:80:f5:fc:53:db:
                    0d:2d:4d:34:8c:3f:24:40:df:a3:2a:20:9c:21:fe:
                    45:7f:0d:3f:a6:ab:20:79:ac:2d:40:49:ab:eb:f9:
                    a7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:05:C2:3D:66:62:3B:EC:92:21:B0:15:73:C5:BE:06:0B:40:5A:C0
            X509v3 Authority Key Identifier:
                keyid:26:F7:75:BA:C7:48:E9:58:2A:C6:8A:36:AF:57:54:4F:D7:4D:85:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/gAXCPWZiO-ySIbAVc8W-BgtAWsA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:b9:ad:00:9b:0a:0a:26:36:0a:c4:70:12:40:7b:7c:ae:d2:
         eb:ca:11:32:25:78:c5:a5:83:81:8b:0a:83:36:2a:92:e1:9f:
         d1:93:a2:9a:f7:79:37:21:32:5c:c9:7c:9b:c2:3d:d7:d5:2c:
         3b:f3:3d:05:09:8e:55:84:78:67:19:81:bd:be:d1:b5:e7:f5:
         88:47:d4:5f:50:f0:68:54:6e:9e:ca:1b:70:a1:8d:f1:4d:9c:
         b4:0b:4a:ee:2a:72:1a:41:84:12:29:33:fc:b9:aa:85:aa:52:
         a0:57:d0:68:04:f7:45:bb:ef:98:ab:e1:9e:76:e4:0f:a0:5e:
         40:24:99:39:34:81:6a:cb:b3:bc:bf:02:b2:6d:22:7f:64:db:
         c7:ce:b2:65:d2:35:7a:0f:6c:36:c2:28:66:d0:8b:f6:a5:2b:
         0d:2e:d3:4c:c0:f1:74:7f:d7:94:b1:56:23:73:7b:56:1c:8e:
         75:66:a5:fa:d6:8e:14:a5:f4:68:6a:96:e7:32:32:3b:50:06:
         b9:5d:29:bc:cb:4c:ef:7f:a7:54:1f:51:c1:e9:11:a3:d3:9c:
         a1:9e:94:c7:4c:d0:fa:6d:2d:25:49:dc:c1:df:7f:a6:97:30:
         a9:72:9c:54:c7:04:76:aa:b8:f7:ea:cb:62:65:a0:78:e2:d0:
         35:5b:f9:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:10 2024 by rpki-client on console-fra.rpki-client.org