Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/kQI6g6wUdE7V5jyotsPnotAQ5Dw.roa
File:                     kQI6g6wUdE7V5jyotsPnotAQ5Dw.roa (raw, json)
Hash identifier:          6/CQtPLM6rQ3EeLWMF2xcVYizoGs8MZXpjLk9YwHFAo=
Subject key identifier:   91:02:3A:83:AC:14:74:4E:D5:E6:3C:A8:B6:C3:E7:A2:D0:10:E4:3C
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       5C
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/kQI6g6wUdE7V5jyotsPnotAQ5Dw.roa
Signing time:             Fri 01 Sep 2023 01:29:11 +0000
ROA not before:           Fri 01 Sep 2023 01:29:11 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     55900
IP address blocks:        103.250.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 14:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Sep  1 01:29:11 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=91023A83AC14744ED5E63CA8B6C3E7A2D010E43C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:17:45:5a:d1:70:30:08:ff:04:b8:17:ee:
                    fa:89:38:22:21:bc:f2:13:33:6f:3d:eb:0a:7d:e4:
                    cf:58:b4:09:0e:54:10:7a:e6:0e:88:c6:2b:18:ef:
                    64:c9:44:7b:46:ed:86:03:5c:c9:a8:64:4b:ec:3f:
                    95:9b:25:5b:d9:3c:e9:c2:97:48:9e:d8:5e:ef:15:
                    9b:32:dc:6d:a8:c4:1f:2b:0d:18:1c:e9:cc:b2:1c:
                    b8:5e:0a:47:de:7e:47:f4:fa:92:d7:01:ee:3c:11:
                    b5:56:b0:1d:04:5f:70:c2:88:ec:25:0d:e5:9a:fe:
                    7d:9b:b1:bd:4a:93:91:9a:81:ff:0a:23:64:4c:e7:
                    04:91:e0:b1:1e:8d:31:b0:12:98:98:0d:62:78:a1:
                    b4:83:0c:9d:76:7b:5a:0c:61:c0:d8:c7:5f:31:9f:
                    d4:54:3e:5e:44:3c:2e:35:38:3b:59:15:74:62:fa:
                    b1:08:8c:12:f7:68:c8:ec:8a:3f:0c:0d:53:9b:07:
                    d0:8e:fb:ee:04:32:a2:90:87:2a:c2:9f:e1:6c:b9:
                    0c:12:d3:76:0f:16:d4:f9:20:b1:58:29:5c:f1:f0:
                    5c:13:45:87:d8:b6:a1:71:6c:8c:2b:05:4a:6f:e5:
                    20:54:a6:12:a0:0c:15:26:1d:87:4a:56:b6:9d:27:
                    a9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:02:3A:83:AC:14:74:4E:D5:E6:3C:A8:B6:C3:E7:A2:D0:10:E4:3C
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/kQI6g6wUdE7V5jyotsPnotAQ5Dw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:24:c4:4e:c1:c1:e5:77:2e:02:d5:99:cc:0d:ec:a7:e0:22:
         24:7f:20:a4:27:59:38:18:0a:68:19:a0:7b:26:b6:25:f0:32:
         cd:da:2e:ea:0a:a6:eb:2b:e3:2b:8d:aa:48:59:97:01:6f:c4:
         3f:0f:37:30:1c:3e:dd:ad:9d:33:f5:44:b7:2f:be:3e:bd:d6:
         63:48:ca:df:23:48:53:74:5d:ed:31:8d:d8:20:80:62:5f:9d:
         54:72:c8:9b:e7:fa:e0:4d:6e:f2:13:07:e0:ef:b4:e0:e6:0c:
         ae:30:b1:21:a3:40:52:bb:e7:0f:3d:d9:29:19:9f:2d:89:c5:
         9a:d0:c7:d5:bb:55:63:20:9b:0d:ef:73:8b:0a:bc:6d:b2:23:
         2d:fa:2a:3a:34:d8:6f:24:db:b0:2e:ec:5f:b4:89:bf:c0:79:
         68:88:b7:ec:29:2f:e2:43:6a:7a:e1:6d:49:f4:c5:25:18:27:
         89:4e:36:4a:b6:5c:89:7d:83:13:ee:89:b0:89:53:69:27:76:
         fe:12:64:6a:d5:ee:cb:cf:7e:83:c0:56:4c:ac:1b:f3:22:d6:
         35:ad:49:c5:cb:da:5c:fe:0f:cf:46:94:92:54:07:40:39:b3:
         b3:05:cd:16:22:fc:29:e7:df:ae:e8:7c:10:31:bf:ef:e1:1d:
         e0:37:fb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:25:08 2024 by rpki-client on console-fra.rpki-client.org