Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/1m6Xp9XtM8MdIv_hHbTbxIb3T10.roa
File:                     1m6Xp9XtM8MdIv_hHbTbxIb3T10.roa (raw, json)
Hash identifier:          eL4twQD1nWw37MOgdX+2U5/iVoOm2tyXgZxG1hUn6lg=
Subject key identifier:   D6:6E:97:A7:D5:ED:33:C3:1D:22:FF:E1:1D:B4:DB:C4:86:F7:4F:5D
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       6D
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/1m6Xp9XtM8MdIv_hHbTbxIb3T10.roa
Signing time:             Sun 30 Jun 2024 01:29:11 +0000
ROA not before:           Sun 30 Jun 2024 01:29:11 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     55900
IP address blocks:        103.13.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Jun 30 01:29:11 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=D66E97A7D5ED33C31D22FFE11DB4DBC486F74F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:94:6a:b9:67:c2:54:33:27:c1:8b:8f:d1:85:
                    0c:1c:d8:ba:ab:ba:0a:20:65:6f:fd:b1:3a:98:40:
                    a2:b4:75:62:62:31:43:2a:bc:15:77:fc:9e:b0:6c:
                    2c:e4:7e:40:f1:c8:37:a5:8c:65:86:47:cd:60:61:
                    60:a4:7e:4f:22:eb:0d:11:a7:b2:b4:f6:c7:4e:8f:
                    4e:7d:24:a7:c3:e6:92:6c:c5:d7:a3:eb:23:dd:47:
                    93:3a:f7:61:9f:41:4e:1f:24:3d:c4:01:07:d4:b9:
                    d6:a6:3e:48:22:70:e4:4b:37:9e:8c:f5:63:1a:5a:
                    75:e8:b7:d4:99:ad:1d:18:73:27:fe:01:8f:2a:bd:
                    09:85:04:10:6b:e8:c7:14:de:bc:d6:f3:a4:df:8c:
                    36:bd:31:12:7c:57:a0:a6:ab:44:b3:f5:7a:a9:a5:
                    1e:a0:28:18:94:0b:2c:48:3d:fa:96:0e:b7:ee:5e:
                    08:19:91:6c:e0:c3:99:7b:dd:62:da:b9:8f:b2:66:
                    95:03:10:5e:83:72:fc:18:de:b8:de:3e:a1:18:cf:
                    e3:54:22:2e:e4:4f:00:b5:69:44:a1:ee:bc:60:e5:
                    5d:48:30:e3:df:b7:35:f2:e1:64:ef:16:cb:1d:34:
                    f7:6a:59:e3:f5:5b:ba:0c:76:e0:69:b5:5a:60:39:
                    eb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6E:97:A7:D5:ED:33:C3:1D:22:FF:E1:1D:B4:DB:C4:86:F7:4F:5D
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/1m6Xp9XtM8MdIv_hHbTbxIb3T10.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:2c:d8:3f:95:7c:12:84:85:91:7a:77:52:b5:7b:98:65:cd:
         88:0d:22:e5:09:f1:47:f9:1a:38:b7:93:76:ea:75:3f:02:52:
         28:49:12:79:d6:32:35:e4:42:63:a2:88:c3:96:22:82:4b:10:
         bf:4f:cb:24:44:66:a8:2c:ce:28:77:f2:b6:62:ad:cc:dc:e9:
         f3:c6:5f:15:42:16:fa:b0:f6:5b:d6:d6:a9:e5:9b:f4:77:cf:
         2d:7a:60:70:c8:e0:73:8c:36:62:f4:d2:cf:61:72:06:94:c6:
         f8:4b:d8:55:91:7b:30:bb:79:2b:67:d5:97:58:43:ea:7c:71:
         9d:24:a5:e8:c2:9f:5e:e0:67:f5:b2:61:c2:0b:c1:f9:00:30:
         fc:ca:2c:ac:f4:72:c1:e9:81:eb:18:36:a8:23:fb:5f:0d:60:
         6a:42:c9:94:07:66:5b:67:d2:77:05:9e:58:2e:b1:b1:a9:d6:
         d0:2a:fd:45:d9:8e:c4:1d:f7:ae:03:22:a0:2d:32:26:5b:f5:
         c9:13:f0:b8:c9:8c:aa:26:35:2f:2d:eb:e7:65:6e:0a:a7:8b:
         5d:f3:31:4f:a1:2f:a8:8e:99:28:e2:b2:a7:90:e9:60:81:b7:
         60:86:b2:25:f4:c0:f5:80:28:74:be:f9:9e:ce:22:dd:e5:f1:
         d0:68:7b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:45 2024 by rpki-client on console-ams.rpki-client.org