Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5444/EVJWSMP6ImMKYtgvunuE5acU6Is.roa
File:                     EVJWSMP6ImMKYtgvunuE5acU6Is.roa (raw, json)
Hash identifier:          YYzDBoLZkuTaYuFs+/uesmqr7M/mwWZ6rbR4U9F4Xwo=
Subject key identifier:   11:52:56:48:C3:FA:22:63:0A:62:D8:2F:BA:7B:84:E5:A7:14:E8:8B
Certificate issuer:       /CN=3B709E12C472AED3DC52428A9C8B56CA21C8FCA1
Certificate serial:       2B
Authority key identifier: 3B:70:9E:12:C4:72:AE:D3:DC:52:42:8A:9C:8B:56:CA:21:C8:FC:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/EVJWSMP6ImMKYtgvunuE5acU6Is.roa
Signing time:             Thu 29 Feb 2024 01:34:00 +0000
ROA not before:           Thu 29 Feb 2024 01:34:00 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     131984
IP address blocks:        103.162.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B709E12C472AED3DC52428A9C8B56CA21C8FCA1
        Validity
            Not Before: Feb 29 01:34:00 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=11525648C3FA22630A62D82FBA7B84E5A714E88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:96:bc:09:df:6f:f0:0a:6d:6a:17:63:b3:
                    d5:6a:c1:4b:4f:40:3d:0c:db:30:cc:90:3d:92:06:
                    bc:e8:87:a0:8c:4f:c0:b1:a6:5f:1b:ce:56:34:9b:
                    4d:da:81:40:5b:21:48:fb:a6:b8:32:e4:4a:1f:3b:
                    02:c2:3e:b6:fc:4e:46:25:f7:c2:7d:e5:a3:fd:61:
                    3e:01:19:80:4e:74:65:8c:d3:d9:17:19:9c:c4:29:
                    48:86:b5:af:b6:a8:8e:50:8c:bd:02:f9:55:70:40:
                    83:85:0c:02:bb:cc:8c:8f:04:75:19:ac:07:e3:b6:
                    25:87:f7:e0:06:e5:07:e3:44:ab:c8:b2:98:e1:ce:
                    d5:6b:f5:0c:49:27:b2:b8:6a:ae:ea:41:a4:be:07:
                    a6:80:2e:04:fe:8c:ce:c7:40:e6:81:33:bf:ef:c4:
                    a7:b4:4d:6d:6c:14:34:c5:ad:6c:b4:dd:3b:72:f8:
                    76:b8:89:97:ae:4b:4a:8d:3b:2f:52:df:cb:0a:27:
                    4e:0f:ae:d0:a8:9a:9c:60:00:a5:5d:91:ca:5f:37:
                    42:06:e1:f1:c5:a0:fe:52:b1:ec:df:72:31:bb:6b:
                    41:90:08:c3:f9:cc:43:87:5f:49:3f:d4:88:2a:c3:
                    ed:99:a3:5a:5f:2a:37:de:01:18:15:88:97:4f:74:
                    52:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:52:56:48:C3:FA:22:63:0A:62:D8:2F:BA:7B:84:E5:A7:14:E8:8B
            X509v3 Authority Key Identifier:
                keyid:3B:70:9E:12:C4:72:AE:D3:DC:52:42:8A:9C:8B:56:CA:21:C8:FC:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/EVJWSMP6ImMKYtgvunuE5acU6Is.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:98:88:2a:7f:e8:ec:08:ec:8f:7d:14:0a:00:97:a0:bc:ad:
         59:29:4f:65:d5:72:0f:d0:b7:0d:98:3a:66:ce:fd:06:67:56:
         c9:40:bc:2b:f9:c7:62:ba:9f:b0:48:b6:9c:e2:e5:d8:24:96:
         8f:dc:9f:7b:de:79:4d:62:16:5b:2e:f9:18:59:6b:8d:6b:78:
         d1:36:68:3a:10:1a:86:34:89:33:a9:fd:58:53:ce:86:85:94:
         ec:79:04:88:25:38:3b:3c:98:7a:a8:23:e4:cf:e6:6e:99:e7:
         79:65:87:2a:0f:28:26:ec:15:02:72:86:b4:3c:96:ec:b7:4f:
         34:7e:0f:fc:c9:cc:f6:91:9d:f3:b4:ac:c8:b1:35:5d:46:5f:
         b4:eb:c5:86:7b:47:52:85:e3:34:7a:0f:82:67:ca:3d:7b:af:
         86:b2:84:d1:7a:63:2e:24:ca:bd:af:e9:fd:9c:ca:cd:59:a8:
         9f:a4:6a:bc:ba:ac:5b:00:c5:29:66:f1:be:84:d1:2d:f0:98:
         75:72:db:7a:42:19:46:d4:b0:09:9b:d9:bc:9d:e3:90:be:17:
         6e:34:a4:47:0b:64:4c:bf:60:07:13:ee:45:7d:80:bf:40:4d:
         b7:01:bd:0b:34:a4:ba:6e:77:18:1c:d6:d1:db:14:b9:58:28:
         ea:e4:0d:ef
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQjcw
OUUxMkM0NzJBRUQzREM1MjQyOEE5QzhCNTZDQTIxQzhGQ0ExMB4XDTI0MDIyOTAx
MzQwMFoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoMTE1MjU2NDhDM0ZBMjI2
MzBBNjJEODJGQkE3Qjg0RTVBNzE0RTg4QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALuClrwJ32/wCm1qF2Oz1WrBS09APQzbMMyQPZIGvOiHoIxPwLGm
XxvOVjSbTdqBQFshSPumuDLkSh87AsI+tvxORiX3wn3lo/1hPgEZgE50ZYzT2RcZ
nMQpSIa1r7aojlCMvQL5VXBAg4UMArvMjI8EdRmsB+O2JYf34AblB+NEq8iymOHO
1Wv1DEknsrhqrupBpL4HpoAuBP6MzsdA5oEzv+/Ep7RNbWwUNMWtbLTdO3L4driJ
l65LSo07L1LfywonTg+u0KianGAApV2Ryl83Qgbh8cWg/lKx7N9yMbtrQZAIw/nM
Q4dfST/UiCrD7ZmjWl8qN94BGBWIl090UpECAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBQRUlZIw/oiYwpi2C+6e4TlpxToizAfBgNVHSMEGDAWgBQ7cJ4SxHKu09xSQoqc
i1bKIcj8oTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTQ0NC9PM0NlRXNSeXJ0UGNVa0tLbkl0V3lpSElfS0UuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9PM0NlRXNSeXJ0UGNVa0tLbkl0V3lp
SElfS0UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ0NC9FVkpXU01QNkltTUtZdGd2dW51RTVhY1U2SXMucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAZ6L/MA0GCSqGSIb3DQEBCwUAA4IBAQBzmIgqf+jsCOyPfRQKAJegvK1Z
KU9l1XIP0LcNmDpmzv0GZ1bJQLwr+cdiup+wSLac4uXYJJaP3J973nlNYhZbLvkY
WWuNa3jRNmg6EBqGNIkzqf1YU86GhZTseQSIJTg7PJh6qCPkz+Zumed5ZYcqDygm
7BUCcoa0PJbst080fg/8ycz2kZ3ztKzIsTVdRl+068WGe0dSheM0eg+CZ8o9e6+G
soTRemMuJMq9r+n9nMrNWaifpGq8uqxbAMUpZvG+hNEt8Jh1ctt6QhlG1LAJm9m8
neOQvhduNKRHC2RMv2AHE+5FfYC/QE23Ab0LNKS6bncYHNbR2xS5WCjq5A3v
-----END CERTIFICATE-----
Generated at Mon Jun 17 14:52:18 2024 by rpki-client on console-ams.rpki-client.org