Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5309/D77O_WVHzjj3m4znKTmkZfqAixk.roa
File:                     D77O_WVHzjj3m4znKTmkZfqAixk.roa (raw, json)
Hash identifier:          X23KVTdv4HNo+fzbUJp9TnnmKuL/LkdCsdkHR5JmBuw=
Subject key identifier:   0F:BE:CE:FD:65:47:CE:38:F7:9B:8C:E7:29:39:A4:65:FA:80:8B:19
Certificate issuer:       /CN=50F49F965CDDA4F88B81616F307E16D7DC88B4B8
Certificate serial:       2C
Authority key identifier: 50:F4:9F:96:5C:DD:A4:F8:8B:81:61:6F:30:7E:16:D7:DC:88:B4:B8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UPSfllzdpPiLgWFvMH4W19yItLg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/D77O_WVHzjj3m4znKTmkZfqAixk.roa
Signing time:             Tue 01 Aug 2023 01:29:06 +0000
ROA not before:           Tue 01 Aug 2023 01:29:06 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     2515
IP address blocks:        103.131.194.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/UPSfllzdpPiLgWFvMH4W19yItLg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/UPSfllzdpPiLgWFvMH4W19yItLg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UPSfllzdpPiLgWFvMH4W19yItLg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50F49F965CDDA4F88B81616F307E16D7DC88B4B8
        Validity
            Not Before: Aug  1 01:29:06 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=0FBECEFD6547CE38F79B8CE72939A465FA808B19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a6:1e:5b:2f:e6:b5:f8:eb:f1:4d:e7:6d:ee:
                    b9:7f:d0:be:1d:4b:da:a8:5a:fb:6d:c2:9a:1d:35:
                    9b:31:bd:97:88:1b:c4:7e:4e:2e:2b:6f:f5:68:91:
                    56:8a:a1:de:54:df:33:be:88:c5:22:4e:50:b0:d9:
                    2d:10:9e:a1:a5:85:14:9b:f5:72:cf:7d:58:ff:e8:
                    02:34:3d:51:0c:02:fa:22:5e:17:b9:47:2d:12:97:
                    28:ce:a5:94:81:74:74:65:1d:55:b9:dc:1b:d0:59:
                    b5:20:15:cd:92:22:29:c4:04:6c:8b:96:93:98:b8:
                    1d:9a:5f:d3:d6:8d:55:a5:38:0b:45:a4:36:fe:6d:
                    a4:f3:0e:61:e7:76:61:8a:63:1b:a4:9a:0c:74:53:
                    34:dd:66:27:01:ff:e0:e2:0d:54:82:5f:0d:42:f5:
                    cf:94:27:fd:1b:26:46:40:e8:9b:c5:e3:b9:db:32:
                    19:97:54:70:0a:94:a1:17:57:05:58:e0:0a:fa:18:
                    d4:94:43:bd:7a:14:bf:f6:b8:37:7d:3a:4b:2a:49:
                    25:34:6f:23:51:ed:b2:a3:c6:62:93:48:f5:9d:1a:
                    c8:66:26:4b:db:68:15:e9:c2:02:20:12:ca:26:13:
                    11:59:1f:c1:9b:8a:e3:20:92:01:77:28:27:cb:11:
                    dd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BE:CE:FD:65:47:CE:38:F7:9B:8C:E7:29:39:A4:65:FA:80:8B:19
            X509v3 Authority Key Identifier:
                keyid:50:F4:9F:96:5C:DD:A4:F8:8B:81:61:6F:30:7E:16:D7:DC:88:B4:B8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/UPSfllzdpPiLgWFvMH4W19yItLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UPSfllzdpPiLgWFvMH4W19yItLg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/D77O_WVHzjj3m4znKTmkZfqAixk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:e9:41:25:97:23:83:10:b0:c8:aa:68:27:59:25:f5:72:a6:
         9a:cf:14:af:00:95:a1:6b:9a:74:e4:e5:7a:5d:b6:eb:02:8d:
         f6:2d:aa:f5:5f:e0:5c:4f:04:4d:bd:e7:cb:c9:21:45:0c:9d:
         9d:de:ba:ea:15:3c:9c:52:ab:5f:dc:0e:27:da:13:a8:9f:f0:
         a4:f5:2f:53:77:a2:43:b2:61:fd:d2:ce:31:87:48:c8:2f:3c:
         0a:c1:8d:cf:7d:a0:90:6e:4d:57:30:d7:aa:8c:dd:7e:e2:5e:
         a9:65:83:16:84:2d:6f:19:b9:d2:6e:42:76:dc:24:bf:b3:7c:
         76:a8:68:5d:59:60:6c:60:92:2d:ab:e1:e5:04:19:7d:b2:a2:
         00:7e:7d:6b:69:06:df:bf:4b:2f:06:e1:7a:8c:ad:e3:47:5d:
         28:5d:a5:dd:0c:af:bc:d4:80:ed:b9:57:ea:ce:66:91:bd:92:
         50:f0:12:0f:d5:3c:c8:f2:b3:99:9c:62:f8:3d:f5:6d:02:b9:
         4c:82:3a:ce:18:94:14:f1:57:af:a1:84:24:37:ff:b1:f4:28:
         3c:9a:e8:8d:ad:0a:cf:64:06:79:15:42:1c:68:88:ae:e2:da:
         74:15:da:15:98:cf:3e:31:b3:66:77:3f:9b:05:3b:b4:81:65:
         d2:ef:80:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org