Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20074/p29xJ-f1R7shyyPghOZLIpVFzpg.roa
File:                     p29xJ-f1R7shyyPghOZLIpVFzpg.roa (raw, json)
Hash identifier:          9fY6Urik21Nu6aRiOWt7PVjFUIhWHebj0eFVG1IMVAM=
Subject key identifier:   A7:6F:71:27:E7:F5:47:BB:21:CB:23:E0:84:E6:4B:22:95:45:CE:98
Certificate issuer:       /CN=9E5004D44AF29AD1209AB85A95F160E83D24E588
Certificate serial:       20
Authority key identifier: 9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/p29xJ-f1R7shyyPghOZLIpVFzpg.roa
Signing time:             Fri 31 May 2024 01:29:01 +0000
ROA not before:           Fri 31 May 2024 01:29:01 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     63782
IP address blocks:        103.119.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E5004D44AF29AD1209AB85A95F160E83D24E588
        Validity
            Not Before: May 31 01:29:01 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=A76F7127E7F547BB21CB23E084E64B229545CE98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0a:f1:61:6e:29:7b:ce:46:1a:36:16:79:e1:
                    43:a2:17:7e:9e:3c:26:80:ee:26:3e:ae:3c:14:5d:
                    ad:50:69:67:41:12:77:5e:19:6a:ac:ac:b1:b1:41:
                    63:47:83:91:49:a5:bd:7c:d0:db:34:21:b0:54:1e:
                    4e:ee:3d:69:ff:7c:2e:72:f9:c9:c7:cb:8c:46:01:
                    78:1b:f3:26:9e:2c:56:9c:0f:70:22:63:07:05:95:
                    c4:ed:17:79:31:46:ec:54:20:1f:06:35:77:62:bb:
                    90:f4:68:d8:1a:d1:c0:0d:02:a6:ca:d6:ff:4d:0d:
                    c6:ee:70:57:a4:50:9d:9a:c2:ab:f3:63:4a:52:67:
                    8a:7a:fa:f5:41:0d:da:cd:d9:7b:5e:b7:d5:75:d2:
                    a0:c2:ed:11:74:d7:38:fa:22:9d:98:ee:cc:ac:d8:
                    b0:9f:75:ec:32:e7:ec:99:90:e6:62:de:41:ba:5f:
                    5d:ef:23:37:37:12:65:3d:fa:bc:fb:2b:b9:8a:81:
                    c0:1d:66:a7:cf:7d:86:d1:ec:0b:8a:3f:47:44:eb:
                    d1:8e:9e:0f:4b:e3:14:db:7b:69:6d:1c:92:07:8e:
                    e5:67:bb:73:76:67:f0:fb:4a:1d:11:ad:a3:b8:c7:
                    d0:93:31:70:39:fd:e4:2e:aa:82:13:ed:b4:6b:9a:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6F:71:27:E7:F5:47:BB:21:CB:23:E0:84:E6:4B:22:95:45:CE:98
            X509v3 Authority Key Identifier:
                keyid:9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/p29xJ-f1R7shyyPghOZLIpVFzpg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:21:ab:53:9e:18:21:7c:81:e2:3a:b7:98:a7:6a:96:b1:28:
         cf:4e:ff:2c:a4:1c:3b:db:7e:4e:53:ae:41:94:b3:fd:57:b6:
         b0:1e:bf:ec:c7:2d:5a:c1:43:b2:5f:85:65:89:15:7e:b4:29:
         bd:b5:b8:7a:1c:a9:fd:aa:74:57:79:fb:de:73:53:0d:b1:2e:
         3d:be:05:a6:41:13:b2:ca:f4:26:80:68:70:21:0d:7a:7b:0e:
         60:f8:0b:82:d9:f3:76:68:84:e6:bb:8c:37:02:8f:f4:d8:a1:
         ab:3f:35:96:5a:f9:b6:5e:46:97:12:55:56:d9:5c:6f:49:2c:
         bd:37:bf:01:3b:49:3c:a8:68:6a:e1:33:02:c9:a9:24:3b:2e:
         e8:67:9f:68:c7:f3:36:98:96:c9:e1:f1:d6:e5:ea:93:6a:96:
         12:b2:cc:c3:1f:ae:24:60:e1:5e:a0:75:84:86:ea:46:37:76:
         10:49:50:14:9d:a8:eb:4f:b8:ed:61:ab:80:b2:c7:75:84:e9:
         7f:fd:fb:3e:ff:b7:0f:38:34:db:ad:ce:9a:81:8f:1a:dc:5c:
         75:38:0f:c1:de:df:62:02:70:9f:49:58:6f:9a:33:b3:e9:a9:
         ee:2f:b0:e2:62:ce:83:b9:f2:f1:8f:e7:cc:0c:a9:b4:a7:96:
         7a:e2:b9:e7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:27 2024 by rpki-client on console-ams.rpki-client.org