Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/XszhfcUXWXfiomvrFTUlyNF5bgE.roa
File:                     XszhfcUXWXfiomvrFTUlyNF5bgE.roa (raw, json)
Hash identifier:          81i7wDGcQfDF6AHU9kldczUtaBNVC6lKN0MeaxfcrSQ=
Subject key identifier:   5E:CC:E1:7D:C5:17:59:77:E2:A2:6B:EB:15:35:25:C8:D1:79:6E:01
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       FE
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/XszhfcUXWXfiomvrFTUlyNF5bgE.roa
Signing time:             Fri 01 Sep 2023 01:29:24 +0000
ROA not before:           Fri 01 Sep 2023 01:29:24 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2527
IP address blocks:        103.241.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Sep  1 01:29:24 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=5ECCE17DC5175977E2A26BEB153525C8D1796E01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:b4:13:ff:ac:bf:4d:fb:a3:d9:d1:34:e1:
                    69:e6:06:c3:91:5b:a2:2f:db:58:01:4e:93:98:98:
                    b0:3e:ed:ab:2c:bc:bc:a6:9f:42:f5:25:a7:39:f9:
                    33:92:6b:17:38:7c:53:63:63:85:06:17:34:95:61:
                    30:1c:fc:7f:ac:12:45:f2:85:5d:8d:62:57:69:ca:
                    05:3b:a5:45:59:09:c5:b0:e7:86:e9:63:ff:6a:17:
                    69:81:03:03:00:77:05:14:ea:66:a9:a6:a1:e3:df:
                    c9:52:05:1e:d8:55:09:27:71:4a:ca:6c:5c:e6:4a:
                    56:4b:8c:20:70:52:22:3a:c1:aa:b0:d7:82:c0:03:
                    66:23:55:af:b3:b5:c3:7f:ca:80:51:0f:c5:61:0b:
                    87:cf:e1:6a:ff:bf:c6:36:cd:17:a7:aa:3e:e4:5d:
                    52:d1:e1:df:1a:c9:90:36:83:d6:61:06:b2:b4:4a:
                    42:96:5a:7a:c0:78:0c:fb:6f:ea:2d:a2:e0:6c:d4:
                    46:70:e4:7a:cd:89:0f:cc:6a:4b:5d:f0:ec:cd:61:
                    49:53:e3:bb:23:c6:9f:c8:0e:33:9e:fe:1d:11:43:
                    43:24:5f:75:1c:8c:ee:01:f8:84:58:1e:fa:f7:90:
                    b6:7b:94:4b:0c:fc:8a:eb:aa:6c:b3:5a:ff:93:49:
                    ca:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CC:E1:7D:C5:17:59:77:E2:A2:6B:EB:15:35:25:C8:D1:79:6E:01
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/XszhfcUXWXfiomvrFTUlyNF5bgE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:2e:48:9f:ec:8c:f9:5e:7a:30:99:4f:3c:d0:59:0a:69:9d:
         d9:23:1f:51:c9:de:4c:db:6b:ba:bd:83:70:d6:90:1e:38:21:
         0f:89:a5:cd:b1:c6:00:90:3f:48:b8:eb:05:3e:94:a7:7c:c5:
         ce:71:95:40:fa:b7:87:cd:09:71:a7:de:61:94:cd:41:c7:5a:
         f6:3f:97:a6:87:26:39:25:f9:ad:9e:9b:cd:ec:2f:3b:18:7d:
         96:82:91:7e:f6:b5:ab:9f:0d:c1:9b:9d:55:d6:35:ba:58:8e:
         d0:df:03:63:4d:c4:a0:c4:c9:3b:f2:13:c6:03:4d:d6:01:52:
         55:be:7b:79:c2:57:ab:73:a7:44:37:eb:08:64:2c:a5:c7:ca:
         eb:f8:4f:5a:45:94:f2:1b:74:73:37:0c:b4:f4:0e:13:b7:5c:
         6f:db:d5:89:17:c0:1b:81:e3:ea:f6:50:41:7a:83:4d:da:fa:
         55:19:b3:e7:17:37:43:ee:67:f4:d0:fd:ee:75:9f:68:a1:b0:
         2e:1a:e7:16:55:f6:32:d0:d2:85:66:e5:8a:e4:6c:50:c7:18:
         d5:3d:d2:64:a7:06:ee:af:a3:21:98:65:02:0c:3b:f7:40:68:
         75:d8:58:7c:6f:d0:c6:28:35:56:2d:cd:73:39:70:42:c1:b7:
         cc:74:9c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:52 2024 by rpki-client on console-fra.rpki-client.org