Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20084/Z0CYoZunawnB4JNcq4vnMSTIiVA.roa
File:                     Z0CYoZunawnB4JNcq4vnMSTIiVA.roa (raw, json)
Hash identifier:          nRn/O6NQbu93PtejuR6ZfyoKtFMuXdaY5fHNkpSQjF8=
Subject key identifier:   67:40:98:A1:9B:A7:6B:09:C1:E0:93:5C:AB:8B:E7:31:24:C8:89:50
Certificate issuer:       /CN=381CEBD5718139418E2BA504374D52816234E9EB
Certificate serial:       02
Authority key identifier: 38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/Z0CYoZunawnB4JNcq4vnMSTIiVA.roa
Signing time:             Thu 11 Apr 2024 05:35:27 +0000
ROA not before:           Thu 11 Apr 2024 05:35:27 +0000
ROA not after:            Fri 11 Apr 2025 05:20:24 +0000
asID:                     131943
IP address blocks:        103.126.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381CEBD5718139418E2BA504374D52816234E9EB
        Validity
            Not Before: Apr 11 05:35:27 2024 GMT
            Not After : Apr 11 05:20:24 2025 GMT
        Subject: CN=674098A19BA76B09C1E0935CAB8BE73124C88950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:d1:61:b6:99:4b:88:e5:4b:0a:00:b2:28:
                    c4:f6:50:65:e1:6b:55:5d:e1:25:90:ef:a7:1e:9f:
                    f2:8a:2d:8b:4c:24:3f:ce:29:ea:f5:3b:b3:25:d1:
                    0c:9f:e8:c5:d9:1c:05:d5:37:c6:bb:22:b8:a5:24:
                    05:81:da:55:1b:a4:c2:9f:c1:d4:cd:b7:d3:d1:b2:
                    05:1d:b4:5f:14:fe:a1:f5:31:53:36:e0:19:57:35:
                    a4:c8:bb:75:a1:a7:f3:e0:6f:aa:8e:8a:7d:68:36:
                    a3:08:28:38:d5:d5:98:29:fc:75:e5:00:8a:a5:67:
                    cc:b8:e5:6d:80:72:91:91:68:89:2d:12:7a:b7:43:
                    55:3b:12:ff:be:53:e0:5f:bb:32:a3:8e:85:ab:98:
                    39:ce:de:9c:f4:58:e5:a8:09:19:c8:1e:a2:61:24:
                    43:b5:5c:89:28:25:19:05:5e:b4:bc:74:7b:0a:ee:
                    c5:c2:0d:4b:33:e3:e7:e6:56:98:49:4c:51:b3:9a:
                    4e:3f:d1:19:6c:9b:88:27:7c:8e:6d:44:97:e5:82:
                    d5:bb:2b:d3:7d:dc:da:f9:f1:9b:b6:6d:09:fe:2d:
                    19:bf:7a:e7:09:9a:ce:d7:23:77:7b:38:c9:e0:df:
                    64:99:da:dd:c1:77:e0:f5:8e:90:d9:f4:ae:e3:ef:
                    0c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:40:98:A1:9B:A7:6B:09:C1:E0:93:5C:AB:8B:E7:31:24:C8:89:50
            X509v3 Authority Key Identifier:
                keyid:38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/Z0CYoZunawnB4JNcq4vnMSTIiVA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:f2:35:13:09:60:ab:de:43:3a:2b:f2:36:d7:21:39:0c:02:
         fb:76:35:f3:f9:db:97:c4:1f:04:17:9b:28:a9:b6:a5:a8:41:
         6b:e2:10:cd:1c:32:d4:63:3d:fe:a3:d7:d9:22:20:41:b5:a0:
         6b:71:dc:bd:14:e7:c0:83:f9:d7:5e:6f:a9:91:a8:fe:78:c0:
         b5:04:d0:93:36:14:42:52:1a:33:49:f1:5e:4d:1b:bf:66:1e:
         7d:a2:f8:61:9b:39:65:12:22:9b:68:51:27:07:08:1d:79:51:
         39:fe:d5:5c:80:c6:64:df:91:a6:fc:a5:50:c8:28:6c:f2:f8:
         c1:b2:91:c3:b3:96:a5:40:47:3c:10:90:49:f4:9e:0f:20:56:
         9e:d5:e6:e9:a1:ee:04:6d:de:ad:ac:5b:bc:25:d0:da:03:1f:
         69:79:c1:1f:bf:ba:71:34:ea:5a:fb:4e:d2:47:32:45:cb:2a:
         e0:b6:14:d2:d5:cc:15:83:7a:3d:eb:8d:ab:6b:ee:21:4e:8b:
         1e:55:10:35:e4:f0:87:b9:d2:d4:d4:7a:87:82:ae:08:f3:b6:
         8d:7e:67:c9:81:35:1b:7c:59:6b:78:8c:79:47:79:f6:9c:5c:
         c4:11:0a:f9:a9:03:92:8d:0b:36:ad:6c:93:d4:15:97:48:f6:
         cb:ae:2f:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:27 2024 by rpki-client on console-ams.rpki-client.org