Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/33/YXS-d4Gl9FnGeafylLnIvjunyAc.roa
File:                     YXS-d4Gl9FnGeafylLnIvjunyAc.roa (raw, json)
Hash identifier:          gHnbKm2/9FRzv/kSY6WV+Y7iyL3O21LfQNf3f2YNIuQ=
Subject key identifier:   61:74:BE:77:81:A5:F4:59:C6:79:A7:F2:94:B9:C8:BE:3B:A7:C8:07
Certificate issuer:       /CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
Certificate serial:       05
Authority key identifier: CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/YXS-d4Gl9FnGeafylLnIvjunyAc.roa
Signing time:             Wed 17 Apr 2024 06:06:01 +0000
ROA not before:           Wed 17 Apr 2024 06:06:01 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     17955
IP address blocks:        103.152.138.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
        Validity
            Not Before: Apr 17 06:06:01 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=6174BE7781A5F459C679A7F294B9C8BE3BA7C807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:85:49:63:b5:9f:57:de:f6:f4:a6:1e:c4:f0:
                    14:6b:c8:0e:33:a5:2c:45:16:71:88:31:ef:0b:af:
                    2c:9d:c4:4b:e8:31:5d:da:be:72:7e:33:94:0e:f7:
                    37:a7:7a:44:b0:28:e8:50:60:58:ab:5b:a8:9e:3e:
                    6b:32:08:59:5c:33:27:78:54:2e:22:3a:ef:15:78:
                    c0:e3:51:7d:22:b3:44:54:da:31:0f:b0:a0:fc:a6:
                    86:d6:32:d5:20:ca:87:ed:0f:d9:d9:3c:21:b8:70:
                    0d:03:ed:46:04:9d:32:d2:b4:43:6c:98:4b:5f:17:
                    0e:c4:d9:65:2d:92:93:9f:2a:f0:79:5f:4c:30:7c:
                    92:98:20:17:d6:35:1f:cb:e9:6d:04:4b:ef:9c:d5:
                    87:9a:38:f1:3e:88:b5:ad:f0:d0:28:cb:53:22:fd:
                    ae:50:5d:c9:17:ae:b2:8f:4b:4c:d2:57:99:be:f4:
                    19:18:c1:e7:e0:c3:9f:14:c5:db:1a:9b:13:f7:88:
                    75:a1:27:7e:28:36:33:9d:2c:9e:5e:42:2c:06:34:
                    06:4c:33:13:3e:f8:37:90:c9:26:bb:ac:da:50:9a:
                    4a:cc:e0:83:b2:0d:a4:b4:24:45:21:65:de:8d:64:
                    8c:cc:dd:b5:36:ec:c6:60:1f:21:a1:01:1e:fb:5a:
                    27:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:74:BE:77:81:A5:F4:59:C6:79:A7:F2:94:B9:C8:BE:3B:A7:C8:07
            X509v3 Authority Key Identifier:
                keyid:CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/YXS-d4Gl9FnGeafylLnIvjunyAc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:5a:f3:67:52:1a:1d:02:6a:c1:d1:81:48:18:c1:93:b8:f1:
         48:df:0c:6c:53:69:9e:f4:61:51:78:3b:79:6c:85:56:b6:3f:
         cf:e9:c7:1b:b6:6c:ad:f0:18:5a:c4:62:30:6b:61:90:c9:d1:
         12:11:73:e8:59:bd:7e:b0:40:8d:fb:52:95:15:f2:b9:f9:6a:
         69:2f:71:89:2b:67:ee:51:4d:ab:48:db:36:09:7b:1a:70:7a:
         f3:e4:86:a1:2e:20:47:57:1f:6d:01:df:b7:87:ae:e7:b1:34:
         57:e1:fb:30:37:7b:1a:2b:75:cb:7e:39:7f:16:eb:74:13:b9:
         c2:af:d3:af:ab:66:2c:8a:c5:ba:88:5a:39:54:31:fe:51:88:
         fd:b1:d9:ef:a5:85:41:43:18:25:62:ef:bf:23:e8:78:55:9e:
         2e:7d:13:bc:d0:cf:9a:70:37:ac:a0:62:6f:41:04:69:3f:3d:
         34:6f:86:65:64:5c:01:69:fc:97:a8:dc:ed:61:5c:ff:02:37:
         4a:93:d2:e9:6f:c0:cc:73:8b:20:74:79:e2:a9:fd:d5:ce:4a:
         9f:d6:45:03:78:65:ea:3e:33:1f:f1:c3:01:41:11:c9:c2:1b:
         c6:10:bc:36:d4:a3:40:17:cd:0a:44:e4:cd:a9:d5:6b:83:cd:
         d4:71:9a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:53 2024 by rpki-client on console-fra.rpki-client.org