Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/5S-dzfiHnLUGXUjcVxftetAM1N4.roa
File:                     5S-dzfiHnLUGXUjcVxftetAM1N4.roa (raw, json)
Hash identifier:          Z5bYx9sFSrwpZsDt6xEzmoRXTxiYtuqbYaEcvgacn5Y=
Subject key identifier:   E5:2F:9D:CD:F8:87:9C:B5:06:5D:48:DC:57:17:ED:7A:D0:0C:D4:DE
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0387
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/5S-dzfiHnLUGXUjcVxftetAM1N4.roa
Signing time:             Fri 01 Dec 2023 01:31:18 +0000
ROA not before:           Fri 01 Dec 2023 01:31:18 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        103.180.131.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:35:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903 (0x387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Dec  1 01:31:18 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=E52F9DCDF8879CB5065D48DC5717ED7AD00CD4DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:4e:59:d1:8c:6c:e4:24:3d:a2:9b:8f:1f:
                    4d:1a:5f:04:75:56:4e:a9:76:40:25:82:31:78:61:
                    bd:8b:2f:08:a4:85:04:68:66:5f:61:40:18:5b:c4:
                    aa:48:67:5d:59:04:36:f7:e0:fd:01:96:58:bb:1a:
                    23:f7:14:4d:55:70:52:86:0b:2a:24:78:b5:99:1d:
                    07:1a:1b:42:f1:a5:a9:5b:07:08:5f:d3:84:f4:38:
                    ec:98:58:5f:f4:4d:5b:6f:15:e6:67:0f:79:0c:ac:
                    ff:56:04:55:63:80:d1:42:5b:4f:ee:d6:3f:03:fb:
                    52:36:c0:1b:74:e8:44:e7:d8:16:17:45:f4:b2:9c:
                    25:c0:91:7a:8f:6b:59:27:d3:c5:05:a6:9c:01:3d:
                    29:90:1e:85:16:1c:62:ac:57:16:d9:25:ae:73:76:
                    1e:66:ab:7f:71:11:40:36:81:d1:b2:55:ac:36:9c:
                    65:18:17:f0:af:e5:6b:d4:43:e8:8a:23:44:e0:bb:
                    93:ea:4a:c7:8a:08:29:e7:5d:6a:da:d7:e8:7e:3e:
                    d5:03:de:e0:16:c4:15:fd:55:9a:d3:f7:54:6c:8a:
                    c7:48:d6:64:67:9b:21:6c:b9:9a:a0:e1:04:85:f0:
                    f7:9d:79:d3:bf:71:97:09:fe:00:60:cf:bd:f2:8a:
                    38:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2F:9D:CD:F8:87:9C:B5:06:5D:48:DC:57:17:ED:7A:D0:0C:D4:DE
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/5S-dzfiHnLUGXUjcVxftetAM1N4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:98:3a:bb:7b:e6:f5:a9:21:d9:9b:c9:d8:60:99:44:17:f6:
         67:36:95:88:9a:a5:92:e1:c2:0d:0a:f9:f4:29:94:2d:2b:4b:
         df:fd:a8:54:db:42:36:2a:0a:a7:91:cc:ff:11:da:69:0f:48:
         e9:92:e0:f9:4d:fc:40:d9:b3:2f:95:b4:f8:7f:bc:75:31:e8:
         1d:1e:f9:66:b2:40:ac:12:0d:d6:01:61:cb:db:bc:61:aa:0c:
         2d:3e:cb:02:52:ad:44:cb:af:d8:8e:b8:01:c5:93:60:a1:3d:
         c0:a2:bf:c4:51:f4:10:df:b3:b1:12:1f:98:a1:6e:ee:ba:10:
         6f:cc:e0:f4:fc:6b:86:0d:93:d7:6b:26:cc:b7:6c:e2:22:f3:
         75:8e:d0:34:1f:9c:0f:67:eb:8f:8a:81:79:69:8f:df:ba:12:
         39:77:f9:cd:3d:84:33:2c:30:32:04:e7:9d:01:ba:b7:72:4f:
         cb:ca:c4:76:36:1e:e8:f7:9b:fa:79:59:26:0b:0f:41:45:d4:
         97:aa:6d:b9:56:de:6e:a2:02:6d:25:98:6f:cd:7b:1f:ce:79:
         00:94:bf:17:91:71:52:ea:82:08:87:91:63:00:9e:76:66:e4:
         f3:d6:60:a2:79:a6:7b:ec:d4:46:bf:0a:57:7d:8d:b3:f4:4c:
         5e:16:f9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 02:37:14 2024 by rpki-client on console-fra.rpki-client.org