Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/K2dj9TpX9RyLNdtqZmTdDbj_qz4.roa
File:                     K2dj9TpX9RyLNdtqZmTdDbj_qz4.roa (raw, json)
Hash identifier:          yrtO12nmrP7PVYsxSaO8YsPM7KUKD2Au8wYCn66lQmI=
Subject key identifier:   2B:67:63:F5:3A:57:F5:1C:8B:35:DB:6A:66:64:DD:0D:B8:FF:AB:3E
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       64
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/K2dj9TpX9RyLNdtqZmTdDbj_qz4.roa
Signing time:             Mon 01 Jul 2024 06:19:30 +0000
ROA not before:           Mon 01 Jul 2024 06:19:30 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     38631
IP address blocks:        203.104.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Jul  1 06:19:30 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=2B6763F53A57F51C8B35DB6A6664DD0DB8FFAB3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:35:48:64:d4:50:48:61:2d:a7:ac:88:1b:
                    14:1a:58:e7:44:3f:e1:1b:00:b6:66:dd:8f:e5:ae:
                    ef:74:38:7c:64:c9:37:f9:a9:08:1b:5f:9f:87:21:
                    0f:7d:fa:d5:cc:ed:27:f3:55:17:92:19:d6:71:18:
                    f5:68:c5:e2:ef:24:bb:6c:b6:4c:bc:db:b3:10:51:
                    a4:40:be:02:6b:c1:5c:55:ba:45:58:b8:c2:6a:c3:
                    bd:e7:8a:40:10:1b:d2:86:77:04:2a:47:96:73:4c:
                    62:40:d3:d1:f8:c9:9d:94:52:76:93:88:30:2f:75:
                    d7:bc:90:58:36:70:30:60:f3:83:e6:cc:0b:f1:0d:
                    68:85:93:a6:72:2f:a9:b4:5c:c6:53:89:33:ad:23:
                    4a:84:a5:c6:9a:45:97:2a:19:bc:0b:fb:bf:f1:c4:
                    01:fe:3c:2a:7d:72:25:f5:01:f9:22:1a:60:11:58:
                    a3:24:d5:09:e7:bc:6e:49:99:3b:8d:79:d9:e2:4d:
                    aa:3c:b9:86:d6:c7:cf:33:e7:e9:1e:3d:1a:98:28:
                    fe:2c:95:b5:86:9d:c5:cb:81:70:4c:b7:52:04:50:
                    c0:05:31:1d:fa:bb:71:ba:e8:a4:84:a7:7b:28:c6:
                    7c:09:fc:49:e0:04:10:6c:52:87:98:89:32:29:8b:
                    4f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:67:63:F5:3A:57:F5:1C:8B:35:DB:6A:66:64:DD:0D:B8:FF:AB:3E
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/K2dj9TpX9RyLNdtqZmTdDbj_qz4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.104.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:e0:0a:be:13:3d:73:c8:68:d6:c0:59:d5:b9:3d:76:4b:7f:
         85:05:ca:5b:0e:29:ec:c7:45:68:71:59:1f:33:b0:01:d9:9b:
         40:30:06:f4:50:21:1e:5d:a9:ca:7e:29:11:e9:f5:84:49:95:
         8c:df:33:b9:19:e5:b1:15:39:b0:35:fc:f3:7f:39:90:6d:c1:
         6c:24:d9:7d:bf:32:f3:63:33:24:48:27:1c:09:9d:b4:9a:08:
         39:48:79:2e:a1:51:b1:dc:57:b2:92:7c:12:82:30:87:f0:16:
         76:63:ec:01:b6:fa:b5:bd:5e:f1:1a:4a:cb:66:08:d8:8f:6c:
         87:b4:3f:de:3e:83:a1:4c:3a:6e:36:7e:82:21:ee:45:a9:53:
         ef:fd:42:8b:1e:97:e0:54:52:88:78:09:b1:77:f1:00:28:a9:
         02:16:ae:8a:b9:29:b5:7d:c5:33:9f:37:7a:82:b6:85:ae:ce:
         4b:06:a2:1d:5c:a9:83:d5:ca:2c:6d:2a:f5:f9:25:8a:b9:68:
         f3:62:21:c2:7a:d9:38:b4:96:92:74:2c:47:f2:c3:c8:f4:9c:
         09:25:a8:ad:4a:69:73:53:33:cd:d0:b2:18:45:a1:be:c6:ad:
         59:b4:75:99:a3:c5:4e:d2:2a:c7:76:9d:6c:24:0b:cb:06:1b:
         e3:28:ff:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:04 2024 by rpki-client on console-fra.rpki-client.org