Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20235/s767XMmnRyOcQaAWrT6qHr_la50.roa
File:                     s767XMmnRyOcQaAWrT6qHr_la50.roa (raw, json)
Hash identifier:          P0HQbZ1R4tJX7lXCSJZi4YUKawm7MVqeGTpBq7opsaY=
Subject key identifier:   B3:BE:BB:5C:C9:A7:47:23:9C:41:A0:16:AD:3E:AA:1E:BF:E5:6B:9D
Certificate issuer:       /CN=236A657667B784696D01BDEB916FAC61FB587F6A
Certificate serial:       10
Authority key identifier: 23:6A:65:76:67:B7:84:69:6D:01:BD:EB:91:6F:AC:61:FB:58:7F:6A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2pldme3hGltAb3rkW-sYftYf2o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/s767XMmnRyOcQaAWrT6qHr_la50.roa
Signing time:             Wed 02 Oct 2024 18:05:32 +0000
ROA not before:           Wed 02 Oct 2024 18:05:32 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     150369
IP address blocks:        103.26.26.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/I2pldme3hGltAb3rkW-sYftYf2o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/I2pldme3hGltAb3rkW-sYftYf2o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2pldme3hGltAb3rkW-sYftYf2o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=236A657667B784696D01BDEB916FAC61FB587F6A
        Validity
            Not Before: Oct  2 18:05:32 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=B3BEBB5CC9A747239C41A016AD3EAA1EBFE56B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c9:ac:5e:ab:b9:43:e3:27:17:66:ca:0a:8d:
                    cc:d0:9c:96:ae:e4:da:c6:af:d9:b6:95:5c:32:57:
                    d7:c7:3a:98:db:27:cc:96:88:da:83:26:9d:ff:89:
                    38:59:29:dd:46:a1:9e:24:1b:89:25:98:c5:c4:be:
                    5f:d0:11:75:17:87:dd:16:15:6b:40:87:c2:39:8f:
                    20:9d:ee:f8:8e:e1:16:24:94:76:60:04:e2:36:ae:
                    4d:14:18:47:98:0d:db:d1:ef:66:ba:a0:ef:15:2c:
                    da:b7:90:19:6d:f0:f9:a2:29:f5:22:3c:76:6b:cc:
                    57:c3:b6:4c:de:fe:28:22:92:48:e6:7f:aa:fa:22:
                    d2:e9:0d:c8:dc:e6:4f:7b:ec:c8:1e:cd:1c:de:b6:
                    1c:5d:fe:ff:f1:81:cd:f0:a7:d8:24:7a:3c:b4:25:
                    5e:d3:43:76:97:6d:51:f4:48:3a:1f:ce:64:a7:eb:
                    b6:c9:24:50:a8:78:51:fe:9e:9e:1e:fa:f0:45:8c:
                    3f:d1:0f:46:5a:0a:dc:5b:13:53:ac:f2:5f:5f:22:
                    d8:d1:fb:2d:31:03:1e:37:45:32:30:ac:d9:3d:9c:
                    f4:8b:33:cb:48:31:bb:ca:b2:51:77:c8:6d:0f:11:
                    fd:72:16:0a:33:47:b9:82:d5:19:c8:d9:33:40:2f:
                    85:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BE:BB:5C:C9:A7:47:23:9C:41:A0:16:AD:3E:AA:1E:BF:E5:6B:9D
            X509v3 Authority Key Identifier:
                keyid:23:6A:65:76:67:B7:84:69:6D:01:BD:EB:91:6F:AC:61:FB:58:7F:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/I2pldme3hGltAb3rkW-sYftYf2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2pldme3hGltAb3rkW-sYftYf2o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/s767XMmnRyOcQaAWrT6qHr_la50.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:f6:0b:bb:3a:ed:3d:92:43:01:2c:e5:3a:a2:58:bd:a8:4a:
         86:49:53:b1:0b:a6:0a:23:df:84:a4:98:94:8a:5d:b7:fc:0c:
         33:da:62:a8:d3:15:ee:de:7d:05:5a:b5:a8:9e:16:29:5f:57:
         e9:1d:97:43:48:95:48:7f:86:86:18:dd:ee:f2:40:87:cd:89:
         8d:69:00:c4:02:4c:b6:bf:95:ee:94:a2:2f:2b:52:0f:b5:a4:
         9e:5c:96:0e:d5:11:0f:a5:a4:9a:79:84:5d:c1:6e:fb:d5:88:
         78:9f:10:86:7d:66:21:15:42:b3:0f:f8:c7:f3:83:5f:67:5c:
         a7:dd:ea:f9:50:4b:e2:48:97:93:ab:8d:14:c9:e4:e6:06:79:
         de:76:fa:4d:69:cf:0a:fe:1c:fd:c1:c2:3d:04:9e:34:cd:87:
         48:26:76:45:40:5a:79:81:5c:83:07:66:e5:f0:5e:5a:e0:86:
         a3:b6:f9:90:8e:2b:e2:b5:2a:a4:8a:47:19:38:2b:e5:4a:02:
         dc:69:b2:dc:82:df:c0:2c:b0:3d:f6:38:97:76:34:c7:7f:72:
         a6:7b:9b:be:05:cc:21:57:bb:04:76:47:b2:08:63:79:a0:1c:
         c0:ef:e4:34:86:d5:a4:7a:c9:25:c3:01:23:41:d5:ff:a0:40:
         d3:6a:1d:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:33 2024 by rpki-client on console-ams.rpki-client.org