Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/_UktfZqiIAfrGPooM96phi2Btd8.roa
File:                     _UktfZqiIAfrGPooM96phi2Btd8.roa (raw, json)
Hash identifier:          qw2Ib1K8jAei5X0xk/SAweisDOY/Fxa6YDkH4mUg+n0=
Subject key identifier:   FD:49:2D:7D:9A:A2:20:07:EB:18:FA:28:33:DE:A9:86:2D:81:B5:DF
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       66
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/_UktfZqiIAfrGPooM96phi2Btd8.roa
Signing time:             Thu 29 Feb 2024 01:31:08 +0000
ROA not before:           Thu 29 Feb 2024 01:31:08 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     55900
IP address blocks:        103.100.190.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 14:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Feb 29 01:31:08 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=FD492D7D9AA22007EB18FA2833DEA9862D81B5DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:6a:b4:d9:54:7a:58:b7:54:e4:37:b9:7a:
                    d8:61:f0:4e:46:53:4f:c0:72:6a:f2:5c:ee:1f:9c:
                    0e:4c:0f:5c:2b:eb:f3:9d:37:3e:0f:c7:2c:36:3a:
                    e9:c4:5c:fb:f2:48:ed:74:e1:44:c7:18:ad:90:ca:
                    eb:95:ac:24:d8:27:9f:24:16:ae:7d:9e:3f:70:b2:
                    4c:90:21:f7:d1:d7:6d:db:cc:f2:c7:87:97:3b:7c:
                    aa:83:dd:b9:42:9a:fe:ad:7f:5a:a2:08:4b:f5:ef:
                    6e:8b:7f:0f:d0:ed:82:32:b0:77:ef:1e:2e:70:fa:
                    62:90:c3:2f:0f:66:08:07:13:a7:16:c3:1c:c0:6e:
                    30:bb:5f:be:13:d8:bc:9d:81:38:c0:69:34:b4:17:
                    72:60:b7:c6:43:96:81:26:da:ab:d4:95:e1:d3:d3:
                    3d:79:6b:3e:17:2e:20:1f:fa:9c:9b:1c:42:a2:2d:
                    77:f7:87:6c:59:0b:bb:b2:8a:d9:62:e7:a3:ff:fe:
                    d0:98:9e:cf:b3:f0:a8:d3:51:3e:ed:63:90:5c:4e:
                    8f:23:0e:e3:5b:83:e8:3a:e9:05:9b:c4:8d:cb:e0:
                    42:26:c1:e0:58:f3:b0:ee:a8:2a:fe:b1:39:06:58:
                    5d:56:51:e9:a9:0c:96:0d:cc:3a:56:d2:06:6d:90:
                    51:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:49:2D:7D:9A:A2:20:07:EB:18:FA:28:33:DE:A9:86:2D:81:B5:DF
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/_UktfZqiIAfrGPooM96phi2Btd8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:60:12:0a:7e:3d:74:f9:5a:85:19:df:12:8c:1f:f8:94:4e:
         39:db:37:ff:e5:68:02:2d:1a:a8:de:f7:37:7f:48:12:77:50:
         85:05:29:2e:c4:6d:b3:51:20:5c:8a:d3:05:38:76:3b:ab:ec:
         c2:ff:e2:0a:b4:41:81:22:b8:a8:90:fb:f5:9d:64:91:9f:55:
         8d:14:25:8e:43:fe:2e:e5:42:e5:b9:29:7c:18:08:72:ea:7c:
         9e:3f:da:6c:f1:85:28:a3:10:51:11:aa:7a:4e:2a:20:1e:53:
         f2:69:b9:e3:d1:7f:2a:c3:ba:36:ae:9f:e3:ca:be:10:9b:70:
         c6:b3:cd:af:ad:3b:52:cf:6f:cc:3c:c5:88:e9:d2:25:c2:dc:
         e9:c3:29:2e:de:a0:48:30:fd:6d:f2:e4:e1:fe:a1:65:97:fa:
         ec:49:a0:fd:0d:3f:0a:25:07:4d:90:08:41:b3:93:e0:e6:47:
         b4:31:60:6b:7c:9b:28:83:63:b1:59:ef:ba:cc:22:bd:d7:b2:
         57:68:c6:8e:0c:a6:40:93:be:ff:78:ae:3d:21:82:14:6f:17:
         cb:d6:ad:69:39:c4:3e:40:b6:fa:8d:2a:0c:5b:42:60:c3:3b:
         6c:d4:75:3d:d6:da:13:b3:59:b9:86:8a:86:04:a7:ef:01:0a:
         11:f9:bb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:25:08 2024 by rpki-client on console-fra.rpki-client.org