Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/W1q5cQChtITrH_xgfadHWJCZzOg.roa
File:                     W1q5cQChtITrH_xgfadHWJCZzOg.roa (raw, json)
Hash identifier:          pT/9Dy/LAWAR61UwhwCJbA014E/qfL9bLnAZmnYJYeU=
Subject key identifier:   5B:5A:B9:71:00:A1:B4:84:EB:1F:FC:60:7D:A7:47:58:90:99:CC:E8
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0392
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/W1q5cQChtITrH_xgfadHWJCZzOg.roa
Signing time:             Thu 27 Jun 2024 04:00:26 +0000
ROA not before:           Thu 27 Jun 2024 04:00:26 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     146979
IP address blocks:        103.180.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914 (0x392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Jun 27 04:00:26 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=5B5AB97100A1B484EB1FFC607DA747589099CCE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:59:37:9a:02:d6:28:dd:9d:9d:42:c6:4a:
                    66:f8:f2:18:20:99:c0:62:f3:c3:a1:0a:60:fb:54:
                    11:a2:61:9e:3e:25:53:7d:f9:31:19:50:1a:90:4f:
                    1b:aa:d4:d3:f1:9c:25:fd:99:1c:82:a8:32:1f:25:
                    28:19:01:47:32:85:cb:04:7d:2d:43:d4:c6:fd:74:
                    af:98:c8:92:cd:6b:1f:33:b6:69:d0:13:b5:de:c9:
                    52:71:d3:5d:bf:64:03:af:5e:79:43:69:30:7e:b4:
                    b1:1d:05:e6:c6:0b:86:bc:0a:b1:5e:7e:13:0b:3f:
                    c4:22:c5:19:0f:53:a3:63:86:51:6e:88:67:e1:f0:
                    90:af:d1:5b:36:cb:2f:13:1e:da:fe:ac:ba:f7:a5:
                    59:c5:69:b1:88:bb:23:0b:ad:df:0f:f6:c8:99:34:
                    92:b5:b3:17:8a:6e:ec:b5:97:bb:55:2f:a4:b1:d1:
                    18:7e:1a:22:9f:51:09:36:5a:33:92:a9:58:2c:b1:
                    f7:47:23:8e:c8:e0:00:70:0b:0c:be:7d:02:c9:39:
                    4f:fb:0e:5d:aa:47:3b:42:be:14:68:b7:ec:b5:3d:
                    ed:b9:01:a8:77:43:8b:d5:13:3e:5c:7f:18:97:e4:
                    55:62:d1:2d:04:ba:b7:a5:63:7d:1c:25:9c:df:95:
                    56:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5A:B9:71:00:A1:B4:84:EB:1F:FC:60:7D:A7:47:58:90:99:CC:E8
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/W1q5cQChtITrH_xgfadHWJCZzOg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:ef:c3:72:2d:2d:f3:e8:0f:db:ac:4f:4a:8c:b0:c7:9d:97:
         cf:d9:c1:ea:ff:a0:fe:94:e0:35:aa:0a:78:99:f9:6a:d9:a5:
         08:66:7f:02:3d:2e:58:3b:a8:dd:73:12:59:aa:62:2e:71:26:
         6c:25:89:ed:0e:62:1b:9b:1f:22:fa:82:2b:06:59:c9:15:42:
         7c:54:e1:3a:e5:c8:dc:7f:9b:67:14:b6:b5:72:b9:8c:bb:07:
         fb:13:85:9c:db:a4:23:ae:cf:fd:fa:ff:df:5b:5c:34:7c:8b:
         4a:cd:17:fe:aa:8c:8a:68:53:fd:1e:78:64:46:da:bc:9b:ac:
         73:ad:45:bc:94:53:e9:4f:80:31:dc:05:83:f2:75:f0:3b:22:
         71:09:27:23:5a:86:c8:f5:23:b2:43:d4:bf:04:0e:ec:d9:a2:
         6d:40:a0:f1:5c:63:61:ca:cf:f3:88:ab:0f:35:4a:e3:f2:d7:
         fb:95:91:61:b2:3a:d9:5f:e8:32:fb:08:eb:6f:8d:d3:dd:92:
         0c:b4:7e:41:6d:08:0d:55:16:30:c3:b5:bb:01:00:98:58:71:
         c9:f1:b3:69:99:bf:75:f0:64:9c:e1:39:09:fd:f1:87:8e:2f:
         4f:32:0b:2a:00:c5:dd:09:e6:03:08:39:5e:67:73:08:5d:11:
         31:dc:9a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:28 2024 by rpki-client on console-ams.rpki-client.org