Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20202/MbV0qr-BhLNp4pElDVx69yYyTTA.roa
File:                     MbV0qr-BhLNp4pElDVx69yYyTTA.roa (raw, json)
Hash identifier:          KXbQgC6NNBx0iokKdTl9WVfSoRCQVfi27mUAMbCxd0A=
Subject key identifier:   31:B5:74:AA:BF:81:84:B3:69:E2:91:25:0D:5C:7A:F7:26:32:4D:30
Certificate issuer:       /CN=910C9B3C13DD668601F266B0C4C469FB57F4FAC3
Certificate serial:       0E
Authority key identifier: 91:0C:9B:3C:13:DD:66:86:01:F2:66:B0:C4:C4:69:FB:57:F4:FA:C3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kQybPBPdZoYB8mawxMRp-1f0-sM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20202/MbV0qr-BhLNp4pElDVx69yYyTTA.roa
Signing time:             Sun 10 Dec 2023 09:56:19 +0000
ROA not before:           Sun 10 Dec 2023 09:56:19 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     63797
IP address blocks:        103.48.40.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20202/kQybPBPdZoYB8mawxMRp-1f0-sM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20202/kQybPBPdZoYB8mawxMRp-1f0-sM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kQybPBPdZoYB8mawxMRp-1f0-sM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910C9B3C13DD668601F266B0C4C469FB57F4FAC3
        Validity
            Not Before: Dec 10 09:56:19 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=31B574AABF8184B369E291250D5C7AF726324D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8a:ae:ec:8f:c5:53:f3:50:f0:5f:b7:b1:2d:
                    ca:ee:09:c9:1f:b1:84:10:97:d8:75:ca:5f:d3:7d:
                    37:56:07:5c:7e:95:83:d3:7c:f5:81:33:c2:7f:4b:
                    40:f7:58:83:63:6f:bf:8f:f4:63:e0:32:36:a7:b0:
                    b8:1b:6b:4e:33:7f:26:f6:9f:8e:ba:db:4b:35:e2:
                    07:ea:43:24:28:20:f5:bc:5b:e0:83:74:82:37:32:
                    56:75:f6:3b:a5:e0:5e:f4:69:65:03:12:92:9c:0c:
                    44:4d:0c:66:05:a2:97:50:23:d4:fc:80:1f:16:bb:
                    a6:8f:61:e9:88:e3:17:57:d7:bb:49:9b:29:34:30:
                    01:cf:28:ed:a9:64:e6:90:cb:2e:e7:90:d0:55:23:
                    98:5c:c3:89:f8:26:e5:13:74:e9:00:43:42:29:2b:
                    74:57:40:51:ea:a7:bb:e8:d7:9b:ed:6a:4c:b7:dd:
                    80:1f:f7:07:32:c6:fa:51:2d:7c:1b:26:99:b5:a5:
                    ec:22:a6:3e:7a:7d:ca:21:8a:88:1d:47:76:84:72:
                    33:31:21:4f:c0:2c:25:1d:2b:94:3e:01:01:5c:d4:
                    6e:48:22:02:d3:1c:0c:fe:03:79:30:2a:ca:5b:d1:
                    52:e6:cf:2b:64:92:f3:11:75:90:39:e4:87:72:96:
                    d9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B5:74:AA:BF:81:84:B3:69:E2:91:25:0D:5C:7A:F7:26:32:4D:30
            X509v3 Authority Key Identifier:
                keyid:91:0C:9B:3C:13:DD:66:86:01:F2:66:B0:C4:C4:69:FB:57:F4:FA:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20202/kQybPBPdZoYB8mawxMRp-1f0-sM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kQybPBPdZoYB8mawxMRp-1f0-sM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20202/MbV0qr-BhLNp4pElDVx69yYyTTA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:f7:5d:5f:d5:d3:31:25:39:e5:53:a8:73:de:da:17:2d:4f:
         61:ba:28:bf:94:35:be:23:8f:bc:08:d5:6c:d6:50:dc:7c:19:
         5a:9e:1d:db:f0:39:58:03:58:18:25:bd:6f:dc:8d:dd:02:bf:
         f5:54:ec:84:dd:09:c5:59:8e:5a:f4:23:d1:78:60:98:06:ed:
         ed:f8:d0:8f:e0:e0:f2:d6:8b:1b:55:9b:82:74:05:2e:e8:7b:
         ed:3e:bc:c6:d9:62:5b:30:e3:48:1b:c3:6a:32:cb:5e:b0:91:
         54:1b:1a:92:83:47:02:c1:4b:a0:58:d8:df:49:9f:4c:3d:be:
         39:32:3c:89:08:72:a1:98:be:c6:e6:5c:e9:f0:a9:a4:ca:28:
         7a:4a:3b:e5:84:23:0d:d8:0c:dc:03:ba:9a:84:5f:e0:02:e7:
         32:8a:a1:36:f8:ed:c7:1d:19:87:3e:db:32:d1:b3:7c:4a:17:
         00:1f:f8:5d:da:a3:da:a5:f2:4e:13:f1:a8:3f:6b:e5:08:81:
         9e:de:a9:ef:0f:08:20:cd:33:c9:31:0a:b2:ae:58:1d:26:82:
         ff:a8:38:2d:3c:aa:58:bd:b3:4c:73:6d:ea:9c:b8:a7:1e:9e:
         cc:30:a8:b5:98:2b:42:84:61:e5:d5:63:d8:58:8d:00:4b:51:
         7c:01:a4:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 17 14:52:04 2024 by rpki-client on console-ams.rpki-client.org