Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/tyLk2vapc6feAvn4m4dNwT_6dm8.roa
File:                     tyLk2vapc6feAvn4m4dNwT_6dm8.roa (raw, json)
Hash identifier:          hLVm/tafO8WTGcjYYckK7Q0dq0Jc2Slc0ECITW6kxV0=
Subject key identifier:   B7:22:E4:DA:F6:A9:73:A7:DE:02:F9:F8:9B:87:4D:C1:3F:FA:76:6F
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       7B
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/tyLk2vapc6feAvn4m4dNwT_6dm8.roa
Signing time:             Tue 05 Nov 2024 10:31:50 +0000
ROA not before:           Tue 05 Nov 2024 10:31:50 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     55900
IP address blocks:        103.7.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Nov  5 10:31:50 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=B722E4DAF6A973A7DE02F9F89B874DC13FFA766F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f5:d8:39:a3:c6:c2:07:d8:92:f6:25:37:3c:
                    19:ee:a1:eb:d6:bb:36:4c:fb:36:a0:73:00:1d:21:
                    48:49:a4:fb:c3:57:e9:4a:ad:54:be:99:6f:0c:06:
                    ad:ec:0a:ca:52:e3:bb:63:7f:45:95:58:e9:f4:25:
                    9f:1d:f2:1d:4b:14:5e:ae:f9:9a:76:3a:58:de:40:
                    14:d5:2d:16:84:db:e9:cf:ea:77:98:fb:1b:cc:b8:
                    0a:7d:13:f4:69:7b:4f:03:90:8c:e7:3b:b0:3c:79:
                    f5:53:94:3b:ae:19:3e:b8:fb:c8:88:d0:47:26:0f:
                    b4:0e:b0:db:78:22:05:0e:eb:e1:c6:c4:b5:a5:44:
                    d6:27:8c:2b:82:90:22:d2:c1:e3:34:18:92:e6:4e:
                    c3:8d:ea:b0:d5:95:94:fc:75:18:75:3d:e6:36:af:
                    ab:a2:dd:07:a6:d1:e5:0f:a3:67:2b:18:8b:f9:9f:
                    46:b1:38:9e:10:ce:d5:9c:84:bc:cc:ff:8f:87:9a:
                    23:09:08:67:14:8b:dc:56:8b:df:20:46:aa:77:a7:
                    3a:c9:01:ff:24:70:7e:61:61:89:2c:87:d8:d5:11:
                    78:c4:a1:6f:3f:9b:d9:4e:3c:ac:50:5b:85:64:2a:
                    a2:1f:df:00:72:e3:61:b0:c4:61:70:a9:ac:93:c5:
                    5f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:22:E4:DA:F6:A9:73:A7:DE:02:F9:F8:9B:87:4D:C1:3F:FA:76:6F
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/tyLk2vapc6feAvn4m4dNwT_6dm8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:4e:4c:29:19:12:75:82:81:61:29:b2:fc:98:2b:f2:9b:f3:
         c3:26:68:1d:bd:dc:cf:07:7f:8e:50:ea:6e:c3:17:21:87:d3:
         d2:ba:5a:0d:b8:1b:9e:e6:38:23:93:25:3a:59:fc:1d:34:ca:
         68:94:60:9d:ae:6e:cd:04:56:28:2b:e7:f0:b3:ef:86:ce:ce:
         f6:36:0a:35:13:19:53:5f:20:b5:f2:44:58:56:f5:a1:0f:7c:
         34:f5:f4:0f:99:a7:22:80:35:34:8b:90:b4:73:3f:78:35:53:
         8a:3a:cd:09:76:75:f2:7e:b4:23:69:d4:91:8a:86:81:38:95:
         4d:71:bf:51:4f:2c:04:8d:ce:8a:ab:3b:89:21:97:6b:f4:75:
         8e:e4:38:d4:2f:a0:07:33:09:1f:38:ce:5a:71:3b:f1:cc:2a:
         28:34:5e:d2:ca:95:83:ba:4e:61:ac:e5:da:9f:7c:77:7a:36:
         aa:9b:20:8b:40:d2:33:12:d4:4a:fc:19:f0:5f:a9:0f:31:5e:
         d3:08:65:9d:ab:38:e1:40:cd:39:9f:79:06:95:86:57:54:8f:
         85:38:c6:9e:69:ad:e3:67:31:ee:0f:55:a5:14:13:c8:af:ca:
         a7:1a:22:08:e9:f8:d8:ac:bf:88:8c:96:de:14:8b:c6:35:5c:
         64:26:12:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:04 2024 by rpki-client on console-fra.rpki-client.org