Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/cop5Md4VFlzcgTpq7gXv24Jo0xg.roa
File:                     cop5Md4VFlzcgTpq7gXv24Jo0xg.roa (raw, json)
Hash identifier:          l7xApleZeSulu5E55cO6nmkcpHSJV1JhTPd2zaRoWmo=
Subject key identifier:   72:8A:79:31:DE:15:16:5C:DC:81:3A:6A:EE:05:EF:DB:82:68:D3:18
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       4F
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/cop5Md4VFlzcgTpq7gXv24Jo0xg.roa
Signing time:             Sun 31 Mar 2024 01:30:02 +0000
ROA not before:           Sun 31 Mar 2024 01:30:02 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     10019
IP address blocks:        103.26.152.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Mar 31 01:30:02 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=728A7931DE15165CDC813A6AEE05EFDB8268D318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4e:66:17:dd:2f:cf:9f:a3:c0:b8:de:9b:14:
                    05:52:a9:31:94:68:0a:9a:19:15:c7:49:67:fe:11:
                    f6:f7:95:24:33:bd:e5:52:6f:f0:ab:2e:e1:e4:56:
                    ad:f5:7b:79:53:5b:3f:e6:68:c8:e7:b5:ef:df:45:
                    eb:0d:3d:82:dd:50:6d:0a:4f:71:aa:09:2e:05:26:
                    1e:d1:e3:4f:e9:04:19:44:aa:66:09:bc:ad:fc:28:
                    f9:b3:3d:fc:56:b2:0b:ec:ac:57:cf:ed:14:e7:cb:
                    36:41:d4:d1:37:0d:7d:88:56:cc:e8:44:f7:93:48:
                    5a:06:47:7a:62:1e:b5:fc:84:5d:3d:87:60:cc:1b:
                    2e:bd:3e:d1:18:63:5a:43:d3:a3:7a:99:1c:a5:c0:
                    ce:3f:85:fe:c7:d1:c7:2c:33:b6:97:ff:07:b0:0f:
                    b2:b2:a8:c7:4d:20:b4:14:d4:3f:dc:1a:c0:bb:76:
                    b9:bf:61:c6:1d:a4:94:d0:ac:a3:d4:06:03:96:39:
                    a6:7e:d9:a8:cb:52:7e:7b:bc:0b:a0:f2:98:f4:d0:
                    61:1a:19:d0:36:6e:52:d6:cf:f0:b9:16:22:06:8b:
                    11:8a:f3:45:ba:bb:43:db:29:86:03:f6:78:3d:4e:
                    7d:e9:e5:16:72:cc:44:02:b9:1d:d2:c2:a8:6a:24:
                    f8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8A:79:31:DE:15:16:5C:DC:81:3A:6A:EE:05:EF:DB:82:68:D3:18
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/cop5Md4VFlzcgTpq7gXv24Jo0xg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:6c:35:12:76:cc:65:43:99:be:a2:87:04:05:13:92:a4:79:
         f0:bb:8b:86:1d:36:be:cb:a8:36:4a:a7:03:fe:35:dc:e9:54:
         6c:f3:23:5b:85:77:ef:72:8a:b0:d7:5c:72:b6:fc:65:ec:a5:
         00:45:88:74:66:cb:08:90:02:51:67:f1:5e:5e:1d:25:01:89:
         9f:55:d8:97:25:db:a1:78:08:ee:07:70:48:bb:31:93:f0:22:
         09:50:20:13:c8:d5:6a:d5:36:7a:e5:da:8d:7f:7c:80:be:f7:
         a6:0e:7d:30:34:35:17:f4:56:b8:8b:88:7a:d4:72:f7:9e:22:
         e1:04:89:05:b9:51:25:f5:6d:64:2b:bc:72:05:76:5d:12:71:
         70:25:f4:96:3f:e5:f4:f2:21:ca:5c:cc:15:87:07:10:c4:e3:
         38:5c:f7:3c:10:c9:3d:78:cd:6a:41:59:e6:85:37:58:d3:6d:
         20:e8:a8:ef:c4:5d:de:9d:9f:92:a9:fc:f7:cc:06:fc:f4:5c:
         a6:ae:12:0a:2e:52:07:d2:3c:71:2f:b5:7f:b0:e6:ba:b5:73:
         fa:67:59:01:a6:be:1b:78:65:ba:5e:8f:83:88:9f:ed:0f:75:
         d1:19:9c:1f:58:1e:b5:2e:7a:1b:bf:50:18:99:1a:70:d7:68:
         77:03:19:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:39 2024 by rpki-client on console-ams.rpki-client.org