Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/MoU3cmJC-WFDVg-_3-dhdWVT8uE.roa
File:                     MoU3cmJC-WFDVg-_3-dhdWVT8uE.roa (raw, json)
Hash identifier:          c5I4xbxHvRqhb4XycdR8fZlfxmj5K8+OuSMPZGpXMC0=
Subject key identifier:   32:85:37:72:62:42:F9:61:43:56:0F:BF:DF:E7:61:75:65:53:F2:E1
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       44
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/MoU3cmJC-WFDVg-_3-dhdWVT8uE.roa
Signing time:             Fri 02 Aug 2024 08:36:43 +0000
ROA not before:           Fri 02 Aug 2024 08:36:43 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     16509
IP address blocks:        103.23.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Aug  2 08:36:43 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=328537726242F96143560FBFDFE761756553F2E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6d:1f:62:f8:3f:0f:0c:c3:71:7b:16:bb:7f:
                    96:36:3e:58:e1:26:0d:68:78:dd:80:bc:62:a8:a8:
                    31:aa:98:7e:f3:87:11:e6:27:1f:85:16:7b:3a:e4:
                    46:78:7a:3f:99:2e:9c:e1:ff:41:b2:dd:d8:5f:cd:
                    26:06:60:27:a7:8f:7d:9d:d9:d9:52:55:4c:60:44:
                    9c:ef:c0:95:87:7b:c9:c0:71:eb:9f:02:06:03:7e:
                    b0:0f:17:ed:81:bb:c0:d5:5a:54:d5:38:aa:88:a9:
                    e0:ac:a1:3d:77:7a:2a:f9:d1:b8:0d:ff:7b:7b:5c:
                    87:5c:94:e9:b5:76:18:d3:ec:be:10:94:23:af:62:
                    1d:f6:67:7f:b3:c4:af:e2:86:5c:0e:03:a8:cc:5d:
                    d4:cc:de:cd:94:71:6e:62:fa:69:3e:6a:1c:06:b8:
                    97:f7:4e:d9:93:c3:94:9d:8b:23:0a:a7:6d:d6:c4:
                    46:0c:3e:c5:62:a3:e0:8f:82:56:2b:bd:af:7b:cb:
                    44:73:05:75:0b:0b:59:80:a6:1f:a3:06:21:39:72:
                    5a:34:b4:96:f4:38:57:53:60:49:b5:1c:d1:e3:88:
                    01:b4:5e:90:97:ec:3c:9a:54:6c:76:86:c2:f2:d1:
                    f9:ef:55:34:3a:86:82:8e:7c:0b:09:26:67:a7:8c:
                    2c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:85:37:72:62:42:F9:61:43:56:0F:BF:DF:E7:61:75:65:53:F2:E1
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/MoU3cmJC-WFDVg-_3-dhdWVT8uE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:d1:84:7a:2b:3d:67:82:f1:1c:95:e9:ad:67:ba:36:d3:14:
         fc:4f:db:f3:0f:e6:6a:4a:92:67:ec:a4:8d:17:0c:b9:38:32:
         5b:b0:55:bb:c4:1d:79:b0:f0:42:f5:45:9e:64:5c:78:f0:7b:
         07:d9:30:f2:f7:e7:a0:4b:2c:13:a5:ff:30:89:05:2c:58:cc:
         0e:6e:7a:da:50:6b:74:53:53:50:67:a2:ec:7a:a1:40:ec:71:
         b1:dd:ac:da:56:0e:cd:8b:4a:16:71:bf:c2:9e:d9:37:4b:6f:
         1a:23:7f:8f:6d:e0:31:e7:ac:68:e5:e1:b1:79:ad:05:d5:81:
         4c:2d:fd:ee:09:18:4e:03:df:b3:b5:fb:1d:01:26:14:00:09:
         08:eb:46:30:51:f0:3f:fe:d1:fd:d5:d4:ec:83:57:7b:60:7c:
         70:20:5e:f7:b5:29:8c:dc:b9:29:73:1e:b1:2a:01:da:7e:ad:
         c1:62:77:34:8e:35:86:66:0a:ab:ad:ef:c3:43:cb:68:9d:8e:
         24:b0:0e:59:7e:3e:85:2c:29:84:2b:3c:5e:88:cd:4f:ee:06:
         a2:bb:ec:72:11:8d:df:16:f2:8c:5b:4b:3b:5b:92:1e:81:80:
         48:9b:8d:0a:c0:1a:1c:64:47:d6:2b:0e:de:2d:ff:ad:12:34:
         44:e8:a4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:31 2024 by rpki-client on console-ams.rpki-client.org