Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20202/PUTmDySBd8Z6x2M6bW3RG2brK8o.roa
File:                     PUTmDySBd8Z6x2M6bW3RG2brK8o.roa (raw, json)
Hash identifier:          /vVdPPiDLNSK6pNmeRRP8LOyh9GtqHE5wKwiHfSEYL4=
Subject key identifier:   3D:44:E6:0F:24:81:77:C6:7A:C7:63:3A:6D:6D:D1:1B:66:EB:2B:CA
Certificate issuer:       /CN=910C9B3C13DD668601F266B0C4C469FB57F4FAC3
Certificate serial:       1C
Authority key identifier: 91:0C:9B:3C:13:DD:66:86:01:F2:66:B0:C4:C4:69:FB:57:F4:FA:C3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kQybPBPdZoYB8mawxMRp-1f0-sM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20202/PUTmDySBd8Z6x2M6bW3RG2brK8o.roa
Signing time:             Thu 31 Oct 2024 01:31:27 +0000
ROA not before:           Thu 31 Oct 2024 01:31:27 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     63797
IP address blocks:        103.48.40.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20202/kQybPBPdZoYB8mawxMRp-1f0-sM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20202/kQybPBPdZoYB8mawxMRp-1f0-sM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kQybPBPdZoYB8mawxMRp-1f0-sM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910C9B3C13DD668601F266B0C4C469FB57F4FAC3
        Validity
            Not Before: Oct 31 01:31:27 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=3D44E60F248177C67AC7633A6D6DD11B66EB2BCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:03:67:7c:eb:6f:c6:f8:62:7d:fc:c7:55:d2:
                    bb:9a:66:68:65:f1:5a:22:19:00:6f:dc:ad:e8:fe:
                    68:0d:e6:4b:38:ff:70:14:48:ee:3f:2c:4b:8a:25:
                    d6:99:3a:c9:6b:81:ca:e5:c8:a3:0a:67:30:0d:67:
                    c9:d0:4f:ab:b6:2c:a6:16:74:9b:9d:9a:cf:14:1b:
                    fc:e9:0c:23:50:32:45:e9:dd:72:30:04:73:d4:a6:
                    3c:33:63:0d:b6:d5:91:21:51:5a:81:a2:d3:82:25:
                    03:0e:fe:fc:a1:42:7a:82:78:13:13:fa:c4:e8:9a:
                    3e:7e:6a:6a:e2:c5:fc:8a:f9:24:52:cb:3b:76:36:
                    52:cf:b4:b2:83:91:19:cd:4e:cb:cd:6a:03:29:68:
                    1c:0c:5c:ed:8d:9d:41:ed:d0:b8:c2:3a:ef:8f:d6:
                    fe:04:2f:46:20:17:bb:34:fc:db:cd:c3:a0:48:10:
                    0c:5d:10:35:30:78:7e:35:f4:2a:eb:00:71:76:49:
                    a6:90:30:e8:73:23:8f:93:a0:cb:ec:17:96:fc:d8:
                    c3:91:7e:31:fe:6f:d0:08:c2:13:8f:92:f1:63:22:
                    a4:9a:ba:a7:ec:eb:cf:29:43:be:c1:8b:f0:da:30:
                    9e:29:0d:7c:c2:80:32:1a:44:73:b6:08:68:fb:8d:
                    9f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:44:E6:0F:24:81:77:C6:7A:C7:63:3A:6D:6D:D1:1B:66:EB:2B:CA
            X509v3 Authority Key Identifier:
                keyid:91:0C:9B:3C:13:DD:66:86:01:F2:66:B0:C4:C4:69:FB:57:F4:FA:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20202/kQybPBPdZoYB8mawxMRp-1f0-sM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kQybPBPdZoYB8mawxMRp-1f0-sM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20202/PUTmDySBd8Z6x2M6bW3RG2brK8o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:0a:7c:d3:17:5a:f7:9d:70:c2:d0:6a:8c:de:4c:9b:b3:a4:
         f6:1b:37:f0:ee:aa:d5:a9:58:d7:6e:7b:5b:13:37:f8:a4:04:
         66:1e:a2:4e:9a:ad:75:2f:1b:5f:2b:77:be:8f:cc:d7:07:9c:
         0e:ce:d8:1f:6d:ba:7e:c1:88:91:c4:e7:20:d0:63:12:f7:bb:
         87:5f:67:ed:d5:26:57:95:be:49:79:de:8b:d1:82:17:f0:b2:
         0b:97:cd:f9:c8:fc:95:89:a9:fc:08:01:e7:2a:32:81:5a:c2:
         6f:b9:66:f5:4b:ec:1b:61:13:b9:cb:8c:9b:a2:45:89:76:2b:
         00:a0:53:b0:a1:c0:9a:8a:e3:0e:0e:6f:48:66:2f:1a:75:bc:
         4e:b5:de:e7:57:20:51:fb:b8:e1:93:fb:02:20:2b:27:b4:fc:
         ae:cf:f4:39:86:c1:08:71:79:22:24:79:62:1e:d3:c3:42:62:
         59:0b:a6:c5:a0:bc:c2:7b:5b:01:a4:7f:d2:71:ad:73:a2:b2:
         d1:25:49:ee:aa:e9:51:48:d8:5d:bc:d9:58:af:63:fd:cc:00:
         5e:9f:35:b4:ce:34:0f:2e:37:cf:d6:26:08:49:3b:43:25:9e:
         a0:9b:c2:7c:b8:90:b1:01:49:d8:97:d2:f0:89:c2:36:8c:0e:
         f2:1f:44:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:28 2024 by rpki-client on console-ams.rpki-client.org