Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5462/-XsZpY0HU11DMNttbEJiWutc_Cw.roa
File:                     -XsZpY0HU11DMNttbEJiWutc_Cw.roa (raw, json)
Hash identifier:          lEklsOAbgGj0+oMWG6igUrPA7ufprQWrcZkKkmuY0Cg=
Subject key identifier:   F9:7B:19:A5:8D:07:53:5D:43:30:DB:6D:6C:42:62:5A:EB:5C:FC:2C
Certificate issuer:       /CN=307A628C03C14D108258C57929726FF0FCD2104E
Certificate serial:       10
Authority key identifier: 30:7A:62:8C:03:C1:4D:10:82:58:C5:79:29:72:6F:F0:FC:D2:10:4E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/-XsZpY0HU11DMNttbEJiWutc_Cw.roa
Signing time:             Mon 12 Aug 2024 17:34:05 +0000
ROA not before:           Mon 12 Aug 2024 17:34:05 +0000
ROA not after:            Thu 07 Aug 2025 09:46:37 +0000
asID:                     45679
IP address blocks:        103.167.46.0/24 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307A628C03C14D108258C57929726FF0FCD2104E
        Validity
            Not Before: Aug 12 17:34:05 2024 GMT
            Not After : Aug  7 09:46:37 2025 GMT
        Subject: CN=F97B19A58D07535D4330DB6D6C42625AEB5CFC2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:e3:55:5d:40:41:96:df:55:71:b3:95:b7:
                    47:fb:78:87:f7:06:ea:04:16:33:0a:80:22:de:ef:
                    29:84:fd:f7:87:2c:8b:05:55:29:6f:11:f6:1e:f0:
                    e4:a9:66:c5:a0:cc:9e:44:16:9f:75:1e:9e:4c:16:
                    6a:8d:69:6d:8a:77:ef:e9:18:04:84:93:52:e8:0a:
                    21:22:b0:eb:0b:55:c2:29:a1:02:0d:11:da:2e:b9:
                    aa:e7:72:d4:4c:3f:22:35:a4:7d:7f:36:db:d8:ef:
                    ba:53:f3:ea:b4:b7:c6:49:ff:8e:43:7e:0c:fd:f1:
                    9c:66:70:16:3d:0e:b2:11:e2:39:42:2a:bd:5e:bb:
                    bb:63:13:5f:c4:33:b9:de:ea:f3:33:f0:06:0b:38:
                    bb:92:9e:6f:f9:ea:0a:77:06:cd:3b:4a:43:bf:0a:
                    08:99:8a:de:fd:62:5d:ce:1f:41:e2:80:0b:c4:3e:
                    c8:ec:89:b0:40:22:9f:b5:eb:a1:7d:b9:ee:50:00:
                    44:7d:2b:02:6d:1e:14:37:8e:12:2b:23:ee:42:c5:
                    00:f8:55:a1:96:9e:e0:d2:72:83:bd:c0:a3:67:20:
                    ce:77:c7:30:a2:c5:a5:6d:19:f0:44:7a:4c:39:10:
                    1c:2e:22:0d:50:76:fa:75:27:b5:7b:6d:51:45:6e:
                    3c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7B:19:A5:8D:07:53:5D:43:30:DB:6D:6C:42:62:5A:EB:5C:FC:2C
            X509v3 Authority Key Identifier:
                keyid:30:7A:62:8C:03:C1:4D:10:82:58:C5:79:29:72:6F:F0:FC:D2:10:4E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/-XsZpY0HU11DMNttbEJiWutc_Cw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:85:68:10:95:6d:9d:f6:55:d6:7b:f7:11:23:6e:e4:15:9d:
         be:24:87:e4:e1:38:0d:4a:88:55:38:bc:5f:39:18:6a:b5:f1:
         05:97:20:5b:0b:6e:d8:24:e1:52:fa:b2:83:4f:7f:8c:3a:e8:
         b0:56:f4:34:60:95:70:40:41:df:e5:e5:47:e8:52:95:3b:5e:
         d1:74:17:be:d0:64:3c:bc:0b:86:ff:04:2d:17:d3:8b:66:a9:
         e7:fd:28:6d:1a:f6:44:80:87:6c:4f:d3:4b:9e:96:99:14:27:
         56:3a:4b:bc:d3:2e:2f:32:c5:25:fa:99:4d:f2:cc:71:99:16:
         84:ab:bc:c4:33:cd:af:f4:3f:f1:14:e8:9b:f6:97:29:fb:d2:
         7a:5d:a2:b4:2f:89:b7:64:ee:0b:a4:71:a3:67:8a:af:0b:a7:
         75:44:51:dd:2b:d2:b5:6d:35:f5:3d:7d:9a:5f:bf:23:24:2b:
         49:d5:bb:7b:d8:32:c6:b6:8f:5a:a8:54:75:df:98:cd:df:cb:
         19:45:86:36:84:06:aa:29:64:d9:d2:d9:41:55:94:64:e9:80:
         10:0d:44:4d:8a:42:9a:6a:cb:ff:1b:aa:5e:a3:4c:16:00:78:
         1f:d4:72:f5:95:2b:a4:38:76:b0:1a:5c:f4:f5:f0:ab:64:d2:
         70:08:b6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:46 2024 by rpki-client on console-ams.rpki-client.org