Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20245/eZ8LvpQXkQfvux6sPzTTTZeUaZM.roa
File:                     eZ8LvpQXkQfvux6sPzTTTZeUaZM.roa (raw, json)
Hash identifier:          1FMHjN1zsHtT7sO6QvKh/cB56E4t0trfoMAdoKLYwIY=
Subject key identifier:   79:9F:0B:BE:94:17:91:07:EF:BB:1E:AC:3F:34:D3:4D:97:94:69:93
Certificate issuer:       /CN=EC4B5C02A42E82DDAD39B6FAE6ECA0F33EF8CA6D
Certificate serial:       08
Authority key identifier: EC:4B:5C:02:A4:2E:82:DD:AD:39:B6:FA:E6:EC:A0:F3:3E:F8:CA:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7EtcAqQugt2tObb65uyg8z74ym0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/eZ8LvpQXkQfvux6sPzTTTZeUaZM.roa
Signing time:             Tue 20 Feb 2024 22:46:10 +0000
ROA not before:           Tue 20 Feb 2024 22:46:10 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     151375
IP address blocks:        103.250.100.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7EtcAqQugt2tObb65uyg8z74ym0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC4B5C02A42E82DDAD39B6FAE6ECA0F33EF8CA6D
        Validity
            Not Before: Feb 20 22:46:10 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=799F0BBE94179107EFBB1EAC3F34D34D97946993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:41:63:0e:e6:86:c9:f2:d3:01:81:32:5c:f7:
                    a5:cf:9b:69:83:de:65:2b:5e:eb:f3:ec:fb:17:72:
                    f9:d8:4a:1e:14:cc:c2:c9:df:40:fc:3c:57:80:35:
                    f5:de:d0:a6:74:cd:a2:93:40:cb:ff:44:0b:a6:6d:
                    78:7f:9c:50:80:5f:46:57:46:12:aa:fe:b1:69:b8:
                    ac:b6:55:af:8f:09:3b:3e:7a:d3:4d:55:1b:f8:6d:
                    bf:36:97:52:5b:37:b4:a1:74:0b:ab:28:6e:85:bf:
                    21:46:fb:68:e2:11:72:17:5b:2f:c6:a4:26:5c:34:
                    c2:b8:40:ef:2c:49:f7:1a:32:1c:26:40:7a:bf:bc:
                    35:a7:e1:3f:4c:d2:ee:59:f0:eb:cd:f2:c0:4f:45:
                    ec:45:b2:43:f8:77:2c:96:7c:01:5f:55:f3:57:f3:
                    01:2c:b3:19:f6:33:ce:bd:21:e8:aa:78:54:84:c1:
                    d4:9a:11:c1:08:1f:18:2e:a4:9f:00:e1:65:20:cc:
                    a3:3b:0e:d0:a5:16:e5:b4:3b:ec:cb:4a:85:44:dc:
                    f2:c0:db:42:ef:a2:5a:45:95:0e:da:4f:9e:40:89:
                    8a:c4:0c:14:88:4b:83:70:c0:bd:56:d6:48:69:f1:
                    12:33:87:90:f1:a8:86:97:29:df:8c:2c:52:9b:a5:
                    da:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9F:0B:BE:94:17:91:07:EF:BB:1E:AC:3F:34:D3:4D:97:94:69:93
            X509v3 Authority Key Identifier:
                keyid:EC:4B:5C:02:A4:2E:82:DD:AD:39:B6:FA:E6:EC:A0:F3:3E:F8:CA:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7EtcAqQugt2tObb65uyg8z74ym0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/eZ8LvpQXkQfvux6sPzTTTZeUaZM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:a5:0f:e1:ac:38:a2:26:76:ee:d1:8e:a0:bb:83:23:a4:52:
         ae:81:b8:c7:c9:ce:ef:3a:ff:42:2f:6a:5e:8a:7e:b7:17:44:
         3b:5a:55:83:0a:04:af:48:80:f5:c9:99:3f:ae:cf:26:9a:cf:
         78:b4:2f:fb:0a:96:47:0c:1d:57:ba:3e:df:90:85:49:c1:81:
         e3:9e:39:5c:ae:48:2f:4b:d6:04:b1:4a:e1:a1:a1:04:73:0e:
         94:be:1b:96:d7:a6:cc:8f:90:5c:61:d8:5c:1f:fd:05:eb:15:
         44:e1:97:a9:a6:56:bc:63:08:d4:72:25:82:6f:c0:3e:4f:36:
         ff:dc:e6:37:36:9a:59:c9:7d:81:12:6d:a2:c0:76:e2:6b:f5:
         56:fd:76:3d:a2:f9:d8:69:19:7b:d4:55:74:21:ba:e0:38:0e:
         44:a3:25:71:e5:cf:bd:73:f0:61:47:b7:56:26:f4:c6:ef:8a:
         6e:32:3e:1d:c2:a0:e2:a0:2c:75:8c:97:9b:b7:f0:17:0c:71:
         8b:15:71:59:a5:8f:f2:34:2f:ba:4d:e6:53:13:1b:ca:7d:7f:
         88:96:a9:39:e7:a5:9a:64:08:d2:44:b7:ff:44:7e:b8:f3:a6:
         64:81:17:9c:9b:30:e2:02:08:e3:ea:41:3f:c3:e2:aa:e5:bf:
         03:73:bc:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:43 2024 by rpki-client on console-fra.rpki-client.org