Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/0DO-NZU2nuJBk3E2IYjc95T8pSg.roa
File:                     0DO-NZU2nuJBk3E2IYjc95T8pSg.roa (raw, json)
Hash identifier:          5X1Yw58eRCHU4+cloIjfq9FFmQQ2ZqGNAvS1996LoX8=
Subject key identifier:   D0:33:BE:35:95:36:9E:E2:41:93:71:36:21:88:DC:F7:94:FC:A5:28
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       42
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/0DO-NZU2nuJBk3E2IYjc95T8pSg.roa
Signing time:             Fri 02 Aug 2024 08:32:56 +0000
ROA not before:           Fri 02 Aug 2024 08:32:56 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     16509
IP address blocks:        103.23.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Aug  2 08:32:56 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=D033BE3595369EE2419371362188DCF794FCA528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:5f:89:4b:a5:ba:a4:71:cd:de:fa:db:e0:
                    6b:7b:77:06:1d:25:77:98:3e:99:09:8f:fb:37:c8:
                    25:ff:7f:54:9d:88:82:6b:aa:19:a1:8f:2f:e9:23:
                    bd:a1:f0:57:0f:01:44:55:c7:51:e0:13:12:65:8b:
                    37:10:31:73:75:67:d9:1c:bd:a3:02:98:bc:ad:28:
                    30:30:9b:b4:2d:31:93:f1:39:db:84:d2:75:5f:ab:
                    4d:85:d0:71:63:79:86:9e:ab:4d:f4:11:36:98:55:
                    38:50:5c:9e:2f:d5:f5:0b:b0:2a:da:15:53:a8:05:
                    7f:ce:4e:14:dd:25:f2:84:ae:dc:31:d4:80:c3:a6:
                    23:e4:f2:2b:76:5f:05:16:20:de:9f:30:ee:bf:fe:
                    cb:0f:68:31:74:10:8a:22:76:e7:34:5f:0a:0a:80:
                    b7:b7:8e:e5:79:27:07:cb:35:a2:f0:75:5a:1f:5c:
                    06:67:09:16:4b:da:99:7f:7e:be:56:0f:5a:8d:24:
                    5d:54:4b:69:e5:bc:70:33:4e:f7:db:2a:3e:de:a3:
                    10:59:69:f2:df:d7:d4:41:3b:4d:3a:bc:91:6c:15:
                    d3:d5:16:f9:f5:37:18:1a:11:36:f4:66:00:f3:88:
                    5d:26:1f:80:b4:62:3c:f8:91:5a:ed:86:00:28:46:
                    b0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:33:BE:35:95:36:9E:E2:41:93:71:36:21:88:DC:F7:94:FC:A5:28
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/0DO-NZU2nuJBk3E2IYjc95T8pSg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:3c:b2:2f:b1:5d:6d:3f:0f:b8:fe:aa:95:01:b0:49:db:33:
         25:e6:51:23:e2:08:51:79:4b:ee:e7:9f:89:c2:51:7e:3e:de:
         5f:5d:28:71:47:40:02:ba:a0:84:a7:ed:5f:23:eb:82:bb:70:
         de:cd:b3:38:e9:c3:9d:30:0a:55:d5:79:37:41:99:e6:48:e6:
         e6:4f:d3:84:4e:31:f5:a9:7b:39:05:57:2a:39:f3:f3:55:d5:
         57:7c:64:2b:a7:38:37:8c:d2:58:cd:9e:5d:3b:4c:9e:fe:18:
         85:64:c8:21:fb:86:53:8c:0b:99:6a:c8:b4:a3:51:18:1e:7b:
         44:e0:64:40:81:5e:b6:75:53:46:48:1c:61:26:c4:68:56:d4:
         db:76:32:f7:d5:1a:f1:7f:37:fb:21:7b:77:88:83:db:be:a7:
         a9:64:db:3c:b5:68:34:73:1e:3d:e4:68:07:32:36:4a:91:fd:
         c9:1e:5e:da:23:6d:c5:74:2c:02:10:a0:b5:c1:dc:f9:8d:e6:
         7d:ae:3f:30:66:2d:e7:53:07:1f:c5:e9:27:87:73:d8:2f:24:
         be:c0:17:a3:54:b5:e2:79:94:58:d6:80:78:8e:a4:66:33:40:
         52:54:fe:4b:3d:35:3f:49:f1:8f:2a:5a:25:9a:01:37:92:d5:
         80:4f:ed:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:01:01 2024 by rpki-client on console-ams.rpki-client.org