Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/TWYHy3LvEWn3BWW7glrpCGcelzo.roa
File:                     TWYHy3LvEWn3BWW7glrpCGcelzo.roa (raw, json)
Hash identifier:          ihvbCCwCJo8YtmsW3FFsHIUX0j2YhiGWyqZ6/RaNccg=
Subject key identifier:   4D:66:07:CB:72:EF:11:69:F7:05:65:BB:82:5A:E9:08:67:1E:97:3A
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       19
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/TWYHy3LvEWn3BWW7glrpCGcelzo.roa
Signing time:             Wed 06 Dec 2023 01:40:37 +0000
ROA not before:           Wed 06 Dec 2023 01:40:37 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        103.2.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Dec  6 01:40:37 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=4D6607CB72EF1169F70565BB825AE908671E973A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5c:ce:35:98:51:2f:c0:0f:7b:35:e1:da:b6:
                    bb:fb:30:85:db:b0:7d:df:ea:17:fe:79:27:3b:d7:
                    e4:a0:50:92:31:f9:34:7a:5b:71:9b:a0:88:d0:4b:
                    0c:f3:66:8b:c9:3c:82:3b:e2:8c:0f:a8:fe:40:aa:
                    5a:b3:0b:1c:57:c9:f8:e2:81:d1:d8:41:49:58:5e:
                    f7:be:86:14:a1:be:b2:d8:a6:32:5d:0c:f4:ea:30:
                    5a:17:9b:4e:62:11:8f:aa:0b:19:55:db:81:74:4e:
                    79:21:e9:66:de:f0:27:41:bc:61:1a:98:d6:78:61:
                    e9:0c:42:3b:df:46:dd:f0:46:6a:77:fd:aa:6c:fa:
                    98:db:d3:2e:65:1b:de:b2:56:ca:fd:b9:77:d5:48:
                    8b:14:81:0b:7c:ce:85:b7:15:56:4f:45:7b:d8:e1:
                    df:da:cd:2c:eb:c6:29:82:5c:b9:0f:9e:b6:e9:ad:
                    ae:da:9a:18:d5:13:26:ba:f2:4b:12:78:fb:13:bd:
                    3f:ab:71:3f:c5:db:38:a9:2a:db:2c:ab:a7:d3:b6:
                    fe:cb:e8:8d:4a:ba:54:c7:16:42:bb:1d:28:52:ac:
                    b2:e3:9f:5f:4a:89:4e:dc:fb:eb:cc:cd:60:67:80:
                    c3:2d:b5:8a:7d:3a:40:37:9c:d0:bb:d4:25:43:ce:
                    32:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:66:07:CB:72:EF:11:69:F7:05:65:BB:82:5A:E9:08:67:1E:97:3A
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/TWYHy3LvEWn3BWW7glrpCGcelzo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:16:6f:da:af:ce:eb:c4:02:ce:10:48:0a:9f:f6:d0:05:47:
         21:73:dd:b5:fc:00:70:48:6c:7b:8e:e0:80:7f:69:54:2b:5e:
         75:7c:84:37:9f:3a:cb:2a:7d:28:5c:a9:a8:da:46:ac:d1:02:
         79:6f:f7:25:64:44:43:39:67:6c:85:c1:33:fc:99:ed:eb:30:
         22:3f:6c:7f:0b:f1:60:7d:40:07:85:2b:7e:f1:2d:8f:f8:f0:
         cb:d5:f2:c5:50:e3:50:2c:26:82:9a:95:ca:d6:59:ba:52:84:
         99:91:fd:68:e6:89:2b:cf:fe:0c:6e:b2:53:22:c5:85:37:0c:
         ac:55:cc:25:fd:47:a3:1b:ef:71:f7:f8:11:a7:e2:95:49:b0:
         82:03:32:3f:f4:4c:38:5a:29:46:18:f1:33:32:c0:29:38:e1:
         ac:9c:81:44:18:c7:ed:dd:3b:8d:91:37:0c:6b:1f:0c:b3:e5:
         1d:67:4b:73:76:f2:cb:5e:ef:a9:cd:ec:21:4c:9a:52:f6:dd:
         25:4d:da:46:fd:a5:5b:8d:13:90:82:e5:5f:7d:17:b9:c9:34:
         23:c6:15:24:75:b2:64:e3:ab:f0:d1:92:24:61:36:ef:1b:0b:
         b0:94:05:50:92:29:0b:c9:95:7f:b7:59:92:e8:5a:9b:39:ef:
         e5:b6:b8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:33 2024 by rpki-client on console-ams.rpki-client.org