Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/W6BilMQLAG69a0zo6lAfOV4pUmE.roa
File:                     W6BilMQLAG69a0zo6lAfOV4pUmE.roa (raw, json)
Hash identifier:          iAjUQXgosnHe4c6K7iQFFXJyENbG6xx7N8I/jT5PWHI=
Subject key identifier:   5B:A0:62:94:C4:0B:00:6E:BD:6B:4C:E8:EA:50:1F:39:5E:29:52:61
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       40
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/W6BilMQLAG69a0zo6lAfOV4pUmE.roa
Signing time:             Fri 02 Aug 2024 08:30:55 +0000
ROA not before:           Fri 02 Aug 2024 08:30:55 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     38636
IP address blocks:        103.23.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Aug  2 08:30:55 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=5BA06294C40B006EBD6B4CE8EA501F395E295261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f9:22:2f:9a:b5:07:57:91:4f:e9:94:f3:a6:
                    de:67:39:0b:8d:c1:0b:e0:5d:60:7d:4e:30:bd:c7:
                    89:72:14:db:ee:44:ee:54:39:d3:41:29:dd:9c:b0:
                    8c:8d:c9:df:05:ca:fc:6f:e7:14:76:51:81:aa:53:
                    14:e1:c7:a2:9d:5f:ca:97:40:1d:2d:22:bb:94:13:
                    4b:f8:a0:e6:7c:42:dd:d4:7f:5b:0c:c0:d6:7a:bd:
                    8a:d0:c4:d4:d0:31:53:41:f2:55:e8:45:0c:8c:3a:
                    f7:d0:1d:c2:be:eb:71:60:80:d9:2a:14:3d:0e:8f:
                    00:14:94:ee:81:ff:0f:65:20:6c:dd:ba:68:69:09:
                    1b:4a:25:4f:6b:d1:e4:66:19:8b:f7:39:6c:62:b6:
                    39:92:72:9c:91:bc:03:61:b0:a3:af:ef:ff:c2:bd:
                    61:d6:89:48:5b:96:a7:2b:ef:8f:7d:05:eb:12:35:
                    cb:55:86:68:59:b9:03:41:b0:cd:40:e2:70:b2:9b:
                    0d:7c:a5:0e:80:09:d5:4f:84:e6:e2:2f:44:7e:df:
                    b7:9c:b0:b6:3a:03:c7:31:73:4a:6a:fd:1c:92:bd:
                    ad:f5:da:b4:8f:a4:af:d0:ca:5c:2d:a0:5c:0f:e5:
                    35:59:0f:66:9a:87:7c:ac:3d:b3:5a:b7:49:66:48:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A0:62:94:C4:0B:00:6E:BD:6B:4C:E8:EA:50:1F:39:5E:29:52:61
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/W6BilMQLAG69a0zo6lAfOV4pUmE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:9b:1b:02:b6:b0:4e:7d:ad:9c:c6:84:ec:72:ff:5b:37:56:
         61:7a:31:59:1b:ae:c6:90:ac:ed:7a:ba:c6:89:1c:48:d6:a7:
         c0:67:ee:2a:a9:ad:2e:95:0f:c1:de:41:62:57:ff:3b:19:38:
         94:c4:67:aa:e5:56:cb:a3:87:2e:71:be:75:21:28:a7:fe:18:
         8a:a3:94:c4:50:c3:01:35:4d:76:6f:ab:cc:0e:9f:9f:c5:df:
         3c:ea:b6:30:1b:79:a9:ec:9b:1c:a4:3d:91:e7:e8:0a:22:c6:
         55:90:c9:75:05:78:e1:a9:ae:0e:dd:e8:6a:f1:ee:f1:24:f2:
         f5:00:3d:6a:f2:fe:ee:d7:3d:f9:02:3d:b0:25:68:e7:0d:8c:
         4e:21:f0:a3:70:1e:97:41:f2:84:46:31:76:7a:34:2a:56:d8:
         56:63:61:6d:d6:94:08:d5:e4:73:a0:13:76:f1:a7:0e:c6:1b:
         8e:de:e4:98:d6:0f:55:39:97:a4:e2:ba:8b:df:53:f9:2d:a5:
         75:3b:80:3c:31:f8:77:fc:78:8e:83:92:e3:c2:cc:3c:59:a4:
         a2:50:4b:5e:63:5b:4d:41:1c:7e:cd:d6:16:fb:0e:1c:fa:56:
         b6:aa:13:91:5a:a2:82:1e:af:6b:41:92:02:e1:ad:46:87:19:
         81:b7:e5:bf
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QkVB
NkJEOEE5Qzc4NDg4MjkxNDE5OTlBMDE2QTBDOUQxOTkxMkFGMB4XDTI0MDgwMjA4
MzA1NVoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoNUJBMDYyOTRDNDBCMDA2
RUJENkI0Q0U4RUE1MDFGMzk1RTI5NTI2MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOj5Ii+atQdXkU/plPOm3mc5C43BC+BdYH1OML3HiXIU2+5E7lQ5
00Ep3ZywjI3J3wXK/G/nFHZRgapTFOHHop1fypdAHS0iu5QTS/ig5nxC3dR/WwzA
1nq9itDE1NAxU0HyVehFDIw699Adwr7rcWCA2SoUPQ6PABSU7oH/D2UgbN26aGkJ
G0olT2vR5GYZi/c5bGK2OZJynJG8A2Gwo6/v/8K9YdaJSFuWpyvvj30F6xI1y1WG
aFm5A0GwzUDicLKbDXylDoAJ1U+E5uIvRH7ft5ywtjoDxzFzSmr9HJK9rfXatI+k
r9DKXC2gXA/lNVkPZpqHfKw9s1q3SWZIzd8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRboGKUxAsAbr1rTOjqUB85XilSYTAfBgNVHSMEGDAWgBRL6mvYqceEiCkUGZmg
FqDJ0ZkSrzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTA2L1MtcHIyS25IaElncEZCbVpvQmFneWRHWkVxOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1MtcHIyS25IaElncEZCbVpvQmFneWRH
WkVxOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MDYvVzZCaWxNUUxBRzY5YTB6bzZsQWZPVjRwVW1FLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGcXBzANBgkqhkiG9w0BAQsFAAOCAQEAiJsbArawTn2tnMaE7HL/WzdWYXox
WRuuxpCs7Xq6xokcSNanwGfuKqmtLpUPwd5BYlf/Oxk4lMRnquVWy6OHLnG+dSEo
p/4YiqOUxFDDATVNdm+rzA6fn8XfPOq2MBt5qeybHKQ9kefoCiLGVZDJdQV44amu
Dt3oavHu8STy9QA9avL+7tc9+QI9sCVo5w2MTiHwo3Ael0HyhEYxdno0KlbYVmNh
bdaUCNXkc6ATdvGnDsYbjt7kmNYPVTmXpOK6i99T+S2ldTuAPDH4d/x4joOS48LM
PFmkolBLXmNbTUEcfs3WFvsOHPpWtqoTkVqigh6va0GSAuGtRocZgbflvw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:23 2024 by rpki-client on console-fra.rpki-client.org