Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/9lV0b7lkU5nXH4K_z6A6yW0_SYc.roa
File:                     9lV0b7lkU5nXH4K_z6A6yW0_SYc.roa (raw, json)
Hash identifier:          N/J8duSziFCGEHg/iCkfbPiLjoa7yNCsqb/Pqd8MO4o=
Subject key identifier:   F6:55:74:6F:B9:64:53:99:D7:1F:82:BF:CF:A0:3A:C9:6D:3F:49:87
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       43
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/9lV0b7lkU5nXH4K_z6A6yW0_SYc.roa
Signing time:             Fri 02 Aug 2024 08:34:42 +0000
ROA not before:           Fri 02 Aug 2024 08:34:42 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     14618
IP address blocks:        103.23.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Aug  2 08:34:42 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=F655746FB9645399D71F82BFCFA03AC96D3F4987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0e:91:12:76:bb:30:eb:9a:c3:ea:e8:31:99:
                    a8:4f:1b:77:a1:85:3d:b7:78:b0:1a:ee:c7:21:20:
                    84:0d:3f:83:75:5e:22:dc:74:60:5f:c2:d7:9b:ea:
                    86:34:34:4e:5f:19:2a:6e:a3:b5:9d:b5:b3:6d:4f:
                    15:f1:c8:56:55:1b:a2:c9:01:f4:4c:be:e9:1f:17:
                    6d:9b:b2:b0:a3:35:f8:fe:3f:2c:56:4f:d8:bc:cd:
                    39:bd:13:fc:20:66:92:ef:62:f0:d0:64:67:16:65:
                    91:b3:73:2e:1a:99:d4:24:69:04:6f:53:17:0e:3d:
                    0f:f6:84:0a:69:60:93:e5:b9:e6:58:57:04:c4:50:
                    16:b4:22:e1:c6:83:40:00:fc:13:17:9d:cd:55:ee:
                    24:02:bb:4d:51:55:05:6b:fa:bc:29:a0:5d:0c:82:
                    cd:bf:f4:08:48:da:82:f9:5b:52:5c:1f:c4:2e:af:
                    35:26:11:90:92:87:9e:a1:ba:37:cf:86:12:ba:14:
                    d5:b2:93:9e:a0:d6:33:f8:5e:ba:86:19:70:80:1a:
                    36:b9:7e:6b:ef:4e:1f:78:8b:86:16:d6:b1:8e:ee:
                    45:c5:d1:6e:d4:ff:1a:b4:e0:20:84:fd:4b:77:22:
                    a7:94:aa:75:b2:5f:26:0b:ab:d1:97:6e:82:95:7e:
                    6d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:55:74:6F:B9:64:53:99:D7:1F:82:BF:CF:A0:3A:C9:6D:3F:49:87
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/9lV0b7lkU5nXH4K_z6A6yW0_SYc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:79:d2:58:19:f7:30:3a:90:eb:83:da:55:79:94:1d:34:ee:
         58:f9:92:05:e6:14:eb:74:7c:9b:d6:90:a7:f1:0a:fc:2f:ea:
         af:1e:52:e0:d5:fe:44:c8:d0:21:22:96:29:f5:c7:94:7e:ff:
         c8:ed:43:d3:b9:fd:11:26:60:88:07:3f:e2:e7:84:83:24:2a:
         dd:88:ec:7d:88:e8:8f:1c:17:6d:45:34:49:eb:4f:4e:0c:b2:
         79:2e:e3:5b:ad:a8:20:ee:fd:f1:e9:aa:a0:c1:2c:36:73:26:
         2a:d2:b8:47:7c:99:62:da:05:46:5d:c9:b0:31:96:2a:9a:7f:
         7b:95:5a:db:e0:da:ab:1a:7b:fd:15:3c:42:2c:fb:b7:a7:ed:
         73:26:12:65:65:c4:8c:de:3c:de:d0:d2:63:4a:2f:b7:1c:4c:
         66:f6:4e:8c:61:8d:54:08:86:df:9e:5d:49:37:37:18:5a:50:
         0c:51:79:36:7b:d2:bc:7d:1c:79:44:58:14:26:cf:33:aa:b8:
         b7:84:36:be:63:e7:6c:dc:e1:b6:d6:25:49:07:8e:2d:53:56:
         9a:9c:4e:1b:4e:1c:18:88:3c:b7:88:6e:7d:1f:7b:de:a8:7d:
         a0:32:94:8a:b9:0b:e8:9a:a7:18:26:de:8b:69:2a:23:fa:45:
         29:49:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:28 2024 by rpki-client on console-fra.rpki-client.org