Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20213/rEiXRty8d456WOYbjlEIG6A76mM.roa
File:                     rEiXRty8d456WOYbjlEIG6A76mM.roa (raw, json)
Hash identifier:          jbPueqehBZWwE9kQN1JNpTgoVA0TIgbz7I9DQJXDLkE=
Subject key identifier:   AC:48:97:46:DC:BC:77:8E:7A:58:E6:1B:8E:51:08:1B:A0:3B:EA:63
Certificate issuer:       /CN=589062195FD91BE2C085C32E048E7BDC87ABE3D8
Certificate serial:       03
Authority key identifier: 58:90:62:19:5F:D9:1B:E2:C0:85:C3:2E:04:8E:7B:DC:87:AB:E3:D8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WJBiGV_ZG-LAhcMuBI573Ier49g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20213/rEiXRty8d456WOYbjlEIG6A76mM.roa
Signing time:             Thu 10 Aug 2023 05:46:55 +0000
ROA not before:           Thu 10 Aug 2023 05:46:55 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     63799
IP address blocks:        103.108.46.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20213/WJBiGV_ZG-LAhcMuBI573Ier49g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20213/WJBiGV_ZG-LAhcMuBI573Ier49g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WJBiGV_ZG-LAhcMuBI573Ier49g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589062195FD91BE2C085C32E048E7BDC87ABE3D8
        Validity
            Not Before: Aug 10 05:46:55 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=AC489746DCBC778E7A58E61B8E51081BA03BEA63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2f:aa:ef:cd:ca:3f:21:96:31:4e:ff:74:1a:
                    49:a5:b8:ce:1d:81:5d:07:be:ed:9e:a4:d6:61:85:
                    8a:62:85:08:1c:08:23:0e:33:5d:2b:9e:22:80:5d:
                    c8:e0:5e:68:fd:2d:f0:bc:d6:54:e3:ec:45:54:2c:
                    08:9f:2f:ad:91:39:1c:0a:fa:f3:d2:b5:92:ef:b9:
                    57:1b:8c:ca:1b:41:02:29:16:0d:3f:c9:60:27:23:
                    df:85:c6:f8:58:24:51:b2:fc:b5:ed:07:b9:de:e9:
                    fd:72:1a:0c:51:8d:0f:0c:33:94:95:c6:e3:02:15:
                    77:05:0e:03:79:8d:8a:2f:c1:21:e6:11:f1:a7:30:
                    f6:cd:c7:4c:7b:0a:d0:60:eb:77:2e:55:3b:bd:8c:
                    64:b3:8c:14:86:ea:fa:49:bd:2d:20:a0:40:30:62:
                    31:c0:79:06:80:c4:d5:b3:7c:7e:73:10:6b:86:e7:
                    69:59:d7:3c:e3:c3:c0:30:b1:4e:41:e4:f2:67:4c:
                    49:78:65:e8:5a:a1:bc:4e:65:48:ac:d4:7f:99:ad:
                    50:06:f2:e1:eb:1f:52:62:db:75:24:c0:71:12:5b:
                    81:be:d2:58:3c:a5:67:c9:b5:57:fa:a3:90:8b:65:
                    0f:09:0e:bc:fc:73:d4:1c:b6:d3:21:c2:89:c3:72:
                    7d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:48:97:46:DC:BC:77:8E:7A:58:E6:1B:8E:51:08:1B:A0:3B:EA:63
            X509v3 Authority Key Identifier:
                keyid:58:90:62:19:5F:D9:1B:E2:C0:85:C3:2E:04:8E:7B:DC:87:AB:E3:D8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20213/WJBiGV_ZG-LAhcMuBI573Ier49g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WJBiGV_ZG-LAhcMuBI573Ier49g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20213/rEiXRty8d456WOYbjlEIG6A76mM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:ed:c3:4a:33:a6:a7:88:09:2a:33:7a:2d:2b:e1:12:98:c8:
         91:b5:c9:de:e1:ed:c5:c7:29:c5:00:f9:68:21:44:ac:b0:1f:
         8f:a3:18:81:e3:f6:49:a9:d1:33:16:cc:34:b3:72:4e:ee:fd:
         b2:b5:59:8c:dc:1c:38:96:15:38:b6:b2:b0:42:e9:1f:75:aa:
         9c:8d:9c:a4:b3:16:83:ef:e7:1a:e2:b9:27:12:bb:13:5c:60:
         3c:c1:6b:24:ac:27:e1:bc:77:8e:dd:05:0e:fa:64:53:44:ed:
         3f:8c:0b:18:36:0f:82:a0:44:11:4e:3c:ff:ff:4d:7d:ae:29:
         ff:61:10:8e:55:af:30:7c:fe:52:f9:76:32:a5:90:ca:47:1c:
         4b:79:97:41:1d:86:73:12:a2:ab:1b:49:86:1d:ed:e7:1c:13:
         11:08:dc:56:4d:a1:4a:80:45:84:f2:8c:57:f8:78:a5:2d:03:
         cb:43:e0:e7:d2:4e:0a:80:58:ac:30:98:99:4a:2c:a0:d0:1e:
         1c:0d:e9:54:16:70:e8:01:ea:56:72:64:ec:f5:56:8b:0f:72:
         10:fb:31:63:bf:5e:51:aa:01:57:39:45:58:a8:b0:b2:91:15:
         82:d1:47:29:1e:be:4d:4a:25:c7:b1:1f:3f:7a:32:39:98:d2:
         f9:e2:cf:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:44 2024 by rpki-client on console-ams.rpki-client.org