Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/536/n5Kle2KrEOV09nA5OqcqqE8llqk.roa
File:                     n5Kle2KrEOV09nA5OqcqqE8llqk.roa (raw, json)
Hash identifier:          SHPaW5Pa9xtIp3dZeonYRUG2eTSIu8ZkrGA1a2tjgWY=
Subject key identifier:   9F:92:A5:7B:62:AB:10:E5:74:F6:70:39:3A:A7:2A:A8:4F:25:96:A9
Certificate issuer:       /CN=BBA73FEB88E1C987D53DD2C3B2DB427545EBA374
Certificate serial:       1C
Authority key identifier: BB:A7:3F:EB:88:E1:C9:87:D5:3D:D2:C3:B2:DB:42:75:45:EB:A3:74
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u6c_64jhyYfVPdLDsttCdUXro3Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/n5Kle2KrEOV09nA5OqcqqE8llqk.roa
Signing time:             Wed 31 Jul 2024 01:31:55 +0000
ROA not before:           Wed 31 Jul 2024 01:31:55 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     131160
IP address blocks:        103.5.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/u6c_64jhyYfVPdLDsttCdUXro3Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/u6c_64jhyYfVPdLDsttCdUXro3Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u6c_64jhyYfVPdLDsttCdUXro3Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBA73FEB88E1C987D53DD2C3B2DB427545EBA374
        Validity
            Not Before: Jul 31 01:31:55 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=9F92A57B62AB10E574F670393AA72AA84F2596A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:25:38:f5:4c:78:a1:e2:be:6e:b3:dc:0d:
                    36:d1:a9:40:58:16:a8:1c:2d:15:a8:cb:63:84:86:
                    7b:cd:ed:1b:11:6c:c6:13:d7:67:ff:2a:3a:f2:38:
                    06:ce:0b:08:ae:f9:1e:46:f0:98:d5:74:87:99:f0:
                    09:12:51:7d:e1:48:48:4e:f6:03:c4:1c:2e:f3:49:
                    2a:80:14:d8:fc:9f:98:5f:1e:81:a7:43:d7:1e:0b:
                    ff:1b:78:a7:96:d1:6a:01:20:a1:8e:38:40:78:be:
                    2c:98:62:2e:f6:4e:9e:20:c2:5f:89:ae:4c:01:02:
                    b8:4d:35:b7:ca:b6:70:d5:64:49:f9:cb:f2:9b:8a:
                    14:7a:a7:1b:81:7b:07:2c:09:e5:a9:cd:d8:9d:fc:
                    1a:85:45:a6:e4:47:02:c2:ed:32:b8:a0:d5:dc:6b:
                    10:67:5e:80:5a:9d:a5:a8:f4:af:a2:43:21:f5:70:
                    45:ea:57:26:aa:62:d8:80:61:40:c3:75:8e:e6:a8:
                    bb:c7:96:6b:9e:d4:98:c0:0c:d0:06:17:e3:0a:96:
                    48:ac:53:e9:69:02:1b:79:2b:25:a8:8f:64:13:e8:
                    be:d7:e3:fc:b2:84:d7:d4:5c:44:c5:4a:94:32:2f:
                    da:52:a3:90:ec:80:9d:66:43:9c:61:79:21:4f:42:
                    66:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:92:A5:7B:62:AB:10:E5:74:F6:70:39:3A:A7:2A:A8:4F:25:96:A9
            X509v3 Authority Key Identifier:
                keyid:BB:A7:3F:EB:88:E1:C9:87:D5:3D:D2:C3:B2:DB:42:75:45:EB:A3:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/u6c_64jhyYfVPdLDsttCdUXro3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u6c_64jhyYfVPdLDsttCdUXro3Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/n5Kle2KrEOV09nA5OqcqqE8llqk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:d5:6e:5b:b5:28:fd:f6:1e:b2:21:ce:27:7f:ec:65:b5:ad:
         cb:27:b2:f4:02:26:70:41:3c:7c:2f:b6:1e:17:0c:ac:37:a6:
         f6:39:42:e4:98:89:5e:d9:2d:05:a9:2a:5d:59:c5:36:23:02:
         56:6d:ba:34:22:90:d2:a1:64:b7:ce:9e:2d:14:46:0b:d3:1e:
         ff:cd:08:5d:a1:1e:d9:b9:2e:5e:e1:40:e7:4d:8e:70:6f:86:
         f5:58:1b:dc:87:6a:f0:58:af:f6:43:b2:4d:d9:61:90:13:c8:
         d0:15:74:79:00:a4:c4:9c:b7:31:74:34:65:c2:13:83:71:9b:
         46:89:cc:e5:6d:ca:d5:a2:1d:2d:14:f8:24:67:fa:ee:96:94:
         43:67:bf:f5:55:ac:31:73:a4:a4:92:37:b1:18:8e:c3:05:68:
         65:ce:35:4d:95:4b:85:4f:73:8a:0f:57:6e:7d:7f:a6:09:b8:
         29:74:9d:60:39:b8:c3:ab:49:2a:97:3a:3d:75:5e:70:88:e0:
         af:e1:bb:f0:e0:83:62:ff:db:3d:19:3f:5a:1f:2b:85:a2:b4:
         a2:92:5e:4a:1c:b6:5e:bc:38:9a:a3:e6:47:42:dc:96:06:66:
         dc:a0:6e:aa:70:df:9b:b0:03:50:c0:06:5a:54:fe:fe:be:f8:
         e8:20:f3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:04 2024 by rpki-client on console-fra.rpki-client.org