Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20080/do6U9DwlNnxz6Ro_InHcKFJALm4.roa
File:                     do6U9DwlNnxz6Ro_InHcKFJALm4.roa (raw, json)
Hash identifier:          iVAz7cEawNVe4t1bVNdfkKdgSxctbYTgRHhY9VqhsUk=
Subject key identifier:   76:8E:94:F4:3C:25:36:7C:73:E9:1A:3F:22:71:DC:28:52:40:2E:6E
Certificate issuer:       /CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
Certificate serial:       46
Authority key identifier: E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/do6U9DwlNnxz6Ro_InHcKFJALm4.roa
Signing time:             Thu 07 Nov 2024 11:04:54 +0000
ROA not before:           Thu 07 Nov 2024 11:04:54 +0000
ROA not after:            Fri 07 Nov 2025 10:27:51 +0000
asID:                     396982
IP address blocks:        103.123.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
        Validity
            Not Before: Nov  7 11:04:54 2024 GMT
            Not After : Nov  7 10:27:51 2025 GMT
        Subject: CN=768E94F43C25367C73E91A3F2271DC2852402E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:92:c8:e6:6a:28:a9:56:35:00:14:8b:ca:58:
                    35:94:89:01:44:8c:d7:12:fd:b4:b2:0a:2c:28:1f:
                    53:6c:aa:03:60:ef:f2:60:d4:0d:6b:89:52:66:80:
                    cf:bb:f7:27:76:34:74:95:a7:49:bc:39:97:3a:71:
                    78:3a:95:ac:d9:c0:d0:25:9e:22:84:b8:0f:7e:e5:
                    ea:69:19:e2:20:8c:71:49:65:1e:85:1a:a9:03:4b:
                    5e:aa:87:ca:85:71:5f:f7:0a:e9:e9:ec:2b:be:97:
                    8e:39:cc:87:c9:45:c9:06:96:53:4c:d8:45:97:27:
                    b8:2b:0d:1a:37:c9:34:6a:07:f8:1e:7d:93:1e:57:
                    56:36:c1:05:5e:10:26:d9:1a:bb:a9:d2:53:42:5e:
                    33:12:35:98:15:78:4f:7f:60:84:e2:d9:ce:2c:60:
                    45:f9:43:ea:be:6e:29:1b:b9:7b:57:59:f9:29:9b:
                    5f:89:2e:3b:96:e7:e4:5a:71:0c:43:1a:d2:d0:f0:
                    69:fc:29:ca:4e:4b:50:c5:4e:74:00:69:9f:e7:73:
                    87:93:fd:b0:ac:53:00:f8:f0:7a:c8:84:50:1c:4b:
                    96:f7:5e:65:1d:e1:f4:71:95:8e:a7:dc:8e:74:0d:
                    03:dd:bd:45:b0:b9:6b:9a:d9:98:50:89:91:0c:77:
                    4a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8E:94:F4:3C:25:36:7C:73:E9:1A:3F:22:71:DC:28:52:40:2E:6E
            X509v3 Authority Key Identifier:
                keyid:E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/do6U9DwlNnxz6Ro_InHcKFJALm4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:80:cf:b6:a7:24:22:f3:1f:69:64:b3:b5:ef:a7:64:a3:06:
         c4:91:25:a7:ab:80:10:20:4d:57:f4:dd:74:2f:a2:34:ca:b1:
         e7:39:63:b9:98:17:1b:b8:c3:3c:d4:56:22:98:db:7c:93:95:
         e0:95:6d:25:5e:c4:6c:a0:33:69:b4:80:52:55:1f:d1:b4:86:
         4c:0a:1f:15:9a:7f:b6:65:5b:cf:8c:14:0b:d1:a6:d6:db:8c:
         a3:c7:ee:1a:80:23:75:bd:35:dc:87:b7:79:b2:26:9d:8c:6b:
         7c:f9:d1:7e:00:97:91:f4:a0:6b:f9:bc:14:3c:a2:b7:4b:cc:
         b5:e3:09:08:97:fc:52:43:9b:16:ba:8a:1e:f8:1e:98:e9:48:
         50:06:40:02:f4:b9:90:0b:27:8e:96:81:f3:9a:cd:65:a0:86:
         10:e2:5a:a6:c9:0c:a0:3a:8d:28:1f:0c:77:3d:df:09:12:c8:
         15:2c:df:c2:e0:c9:27:d6:61:e0:70:5d:e8:45:de:b7:56:87:
         02:4f:fd:e2:35:9a:a1:80:af:1c:55:cd:0e:eb:93:51:d9:55:
         5d:3b:a1:d5:1a:08:5f:cf:43:2b:93:ba:18:b6:90:fb:63:f9:
         9f:64:61:90:e6:2c:60:95:56:25:f2:bb:80:ac:d6:bd:06:52:
         83:c9:9a:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:17 2024 by rpki-client on console-fra.rpki-client.org