Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20102/ZYFYjHaUfG6JP_g_oFbghAPKzRY.roa
File:                     ZYFYjHaUfG6JP_g_oFbghAPKzRY.roa (raw, json)
Hash identifier:          OoKULGgeFC8wJkc6xNKj481zjBdbCXgyh5G5wOy7mIc=
Subject key identifier:   65:81:58:8C:76:94:7C:6E:89:3F:F8:3F:A0:56:E0:84:03:CA:CD:16
Certificate issuer:       /CN=33D2C2C8816F30E6B58262B93C717C85513505C5
Certificate serial:       04
Authority key identifier: 33:D2:C2:C8:81:6F:30:E6:B5:82:62:B9:3C:71:7C:85:51:35:05:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/ZYFYjHaUfG6JP_g_oFbghAPKzRY.roa
Signing time:             Mon 03 Jun 2024 02:46:34 +0000
ROA not before:           Mon 03 Jun 2024 02:46:34 +0000
ROA not after:            Tue 03 Jun 2025 02:41:55 +0000
asID:                     131952
IP address blocks:        103.142.12.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D2C2C8816F30E6B58262B93C717C85513505C5
        Validity
            Not Before: Jun  3 02:46:34 2024 GMT
            Not After : Jun  3 02:41:55 2025 GMT
        Subject: CN=6581588C76947C6E893FF83FA056E08403CACD16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:60:0a:15:ac:d4:bc:a2:c2:a3:e3:0e:09:
                    40:a3:7f:a6:20:a6:6a:5c:a4:23:81:93:9e:aa:9e:
                    21:3a:e0:11:d8:f1:7f:c7:09:79:6d:9e:98:f2:e1:
                    21:e5:7d:bb:9e:ba:f4:0f:66:e8:39:1c:1f:c9:50:
                    27:1f:9e:f8:ac:30:96:cc:3d:bd:75:fd:6d:5b:d2:
                    1c:e5:37:5b:a9:0f:38:f4:78:ab:3a:e1:6b:86:21:
                    9e:1d:df:79:ac:0b:c7:b2:ce:0f:00:16:b4:0a:b8:
                    10:6f:9c:43:7b:1c:5e:3b:69:0e:6b:7e:0a:6b:ea:
                    ca:d6:b6:84:41:13:f8:23:0a:4b:1f:22:b4:5f:0c:
                    d0:1f:49:38:90:c2:66:f9:c5:2b:0f:ea:b3:fa:8b:
                    8f:a3:8f:f8:05:81:3b:4c:be:29:6b:2d:88:26:42:
                    40:6c:b7:92:6b:5f:72:2a:eb:e3:dc:b0:ca:9d:06:
                    8d:99:21:8f:dc:e9:f1:75:89:14:21:a0:73:40:7c:
                    70:13:30:9e:0f:89:12:7f:c2:75:a6:99:85:ed:43:
                    7a:03:f2:48:1b:b5:27:63:c4:2e:dd:8a:82:b5:f7:
                    5f:44:d2:e7:89:2a:02:41:fb:76:f4:0b:18:d2:13:
                    2d:83:75:a5:a2:6b:a7:a2:75:f9:ae:ae:47:a7:b3:
                    7f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:81:58:8C:76:94:7C:6E:89:3F:F8:3F:A0:56:E0:84:03:CA:CD:16
            X509v3 Authority Key Identifier:
                keyid:33:D2:C2:C8:81:6F:30:E6:B5:82:62:B9:3C:71:7C:85:51:35:05:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/ZYFYjHaUfG6JP_g_oFbghAPKzRY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:40:ff:b4:7e:af:f0:e8:67:30:e5:b2:aa:2e:56:fb:3a:4d:
         93:6d:f5:72:b9:04:db:b6:f4:4d:82:af:e6:ad:bf:b1:df:e1:
         1a:2a:c1:22:25:12:e3:66:aa:66:02:7d:fa:ee:6f:b2:86:2d:
         eb:e3:a4:25:41:5f:68:47:25:d7:a1:10:6c:ff:ef:84:e8:04:
         69:d6:72:4f:32:9f:a1:1b:48:a8:67:a5:f9:49:13:b7:74:c0:
         41:18:da:41:52:a8:2b:e5:4f:52:f8:8b:e3:fb:ca:c4:de:7f:
         a5:0b:36:ec:29:20:db:e1:af:3a:25:bd:bb:c2:7d:bf:34:2e:
         37:87:ff:d1:d8:3b:4d:c0:ba:16:e5:2c:a7:8e:bf:4c:9e:36:
         ca:c9:1f:d5:0b:b0:0c:e4:10:38:19:a2:c3:f2:45:5e:71:d8:
         21:e3:0f:b7:7a:76:85:29:a5:4a:78:b3:4e:67:56:c4:60:e6:
         cd:64:cd:88:4b:03:b8:65:fa:5a:44:a4:ec:0a:fd:cf:01:c1:
         23:32:42:d5:5f:96:99:cb:6f:fc:48:78:f3:6c:83:a5:a6:cd:
         7d:9a:08:42:ab:9b:58:32:ea:4f:82:6d:4a:f1:a3:11:b7:41:
         23:bc:32:a9:47:a2:4d:5e:2a:ce:c4:b0:ad:96:a2:bb:05:46:
         d0:0e:33:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:28 2024 by rpki-client on console-ams.rpki-client.org