Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/ySyt7T7nROhHibTgCs1lOfJaRec.roa
File:                     ySyt7T7nROhHibTgCs1lOfJaRec.roa (raw, json)
Hash identifier:          hq7rBU5w9hZsLbZTL6Q+1xo8dJtsyZ/p7ATmX4B/0uE=
Subject key identifier:   C9:2C:AD:ED:3E:E7:44:E8:47:89:B4:E0:0A:CD:65:39:F2:5A:45:E7
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       1F
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/ySyt7T7nROhHibTgCs1lOfJaRec.roa
Signing time:             Wed 31 Jul 2024 01:32:30 +0000
ROA not before:           Wed 31 Jul 2024 01:32:30 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9997
IP address blocks:        103.2.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Jul 31 01:32:30 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=C92CADED3EE744E84789B4E00ACD6539F25A45E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a0:a1:84:a2:ec:bf:f7:46:dd:28:f6:8a:2d:
                    c8:28:6d:dc:ac:6b:79:de:3f:de:c4:c2:41:49:5b:
                    fc:30:e0:a9:cb:10:66:c9:ca:40:94:72:5c:64:7a:
                    a8:65:97:a7:1f:a9:18:15:2f:6a:d5:6e:ff:aa:55:
                    1c:70:17:ad:bf:eb:8f:9b:0c:88:9c:cd:5a:59:73:
                    1e:9a:ab:06:1b:1d:8c:22:e0:05:85:b8:6c:a9:1c:
                    3f:1e:69:67:d6:cb:77:96:39:d6:4e:eb:7b:47:97:
                    ed:41:ab:bc:3b:ce:64:8a:21:bb:62:51:9f:76:ad:
                    ed:93:c0:fa:82:a1:8e:0b:c2:b5:87:3f:7d:a6:dc:
                    20:dc:b7:0f:92:44:b4:64:48:59:00:97:36:e4:10:
                    21:0c:50:16:ff:bd:e6:5f:44:46:8e:ed:5d:3c:1b:
                    b5:a0:ce:ed:21:f3:c7:d1:4d:bf:26:d2:4a:b2:c4:
                    95:36:31:75:fd:72:89:5c:46:2e:ce:df:c9:00:75:
                    0b:37:40:01:23:f9:ce:6c:aa:8d:b9:34:f0:af:3d:
                    2b:b1:fd:98:35:64:2e:0d:b6:72:fa:9c:cf:13:45:
                    fb:b3:be:43:60:d6:cb:19:2d:d7:a0:29:b6:41:08:
                    0b:48:a4:05:84:6d:ee:6d:61:49:e3:e5:75:05:bc:
                    40:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2C:AD:ED:3E:E7:44:E8:47:89:B4:E0:0A:CD:65:39:F2:5A:45:E7
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/ySyt7T7nROhHibTgCs1lOfJaRec.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:c7:4c:cf:69:d1:04:6b:70:a4:56:68:e3:ee:f0:d6:4e:0c:
         a4:55:ac:6f:37:0d:c0:bb:1f:25:a1:f9:8d:fb:e9:32:36:1b:
         ce:9b:85:26:05:ba:ce:8c:f5:3b:30:74:a7:61:cc:24:43:92:
         fb:57:09:53:2c:ba:c4:40:0a:8c:3c:1f:16:e7:33:df:6d:38:
         30:41:6f:36:ef:e8:5a:85:70:8a:71:28:8a:5a:42:08:26:b7:
         c0:58:15:09:22:b1:bd:88:d6:ba:2d:98:5f:4e:ab:fa:4c:2c:
         24:b6:a9:f4:22:2b:33:ae:07:02:84:d2:c2:77:ed:a5:d6:44:
         67:e1:e6:70:d1:85:65:47:3e:dd:e3:72:aa:1f:1e:8f:42:76:
         c3:08:4c:12:81:15:a8:fa:d5:3a:42:bb:6f:f5:ba:8f:9d:43:
         36:ec:99:49:b1:64:b0:f8:95:73:cc:2b:a3:3a:86:36:40:55:
         46:1d:32:eb:e5:3b:1d:38:e8:6b:44:f4:6b:19:f7:5a:b3:99:
         41:1c:6b:7e:1f:e4:76:be:ec:80:15:d1:58:75:ed:91:03:d0:
         87:09:9e:a6:f3:81:c9:47:50:7d:be:30:ee:f3:c4:d5:3a:bd:
         42:09:fb:d7:97:72:52:95:87:75:df:d9:96:31:9f:78:b0:85:
         f6:bd:e0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:04 2024 by rpki-client on console-fra.rpki-client.org