Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5462/_4_3IP32DRzSYW8Vs33eTj33YUw.roa
File:                     _4_3IP32DRzSYW8Vs33eTj33YUw.roa (raw, json)
Hash identifier:          /gmutNg6vWaZzm7yr9Lbyqu2OsZucxdhQDhFzrBur00=
Subject key identifier:   FF:8F:F7:20:FD:F6:0D:1C:D2:61:6F:15:B3:7D:DE:4E:3D:F7:61:4C
Certificate issuer:       /CN=307A628C03C14D108258C57929726FF0FCD2104E
Certificate serial:       04
Authority key identifier: 30:7A:62:8C:03:C1:4D:10:82:58:C5:79:29:72:6F:F0:FC:D2:10:4E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/_4_3IP32DRzSYW8Vs33eTj33YUw.roa
Signing time:             Tue 19 Dec 2023 15:01:14 +0000
ROA not before:           Tue 19 Dec 2023 15:01:14 +0000
ROA not after:            Wed 18 Dec 2024 14:16:53 +0000
asID:                     45679
IP address blocks:        103.167.46.64/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307A628C03C14D108258C57929726FF0FCD2104E
        Validity
            Not Before: Dec 19 15:01:14 2023 GMT
            Not After : Dec 18 14:16:53 2024 GMT
        Subject: CN=FF8FF720FDF60D1CD2616F15B37DDE4E3DF7614C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:11:ce:d1:fe:e5:f2:9d:5f:2d:a3:eb:e1:df:
                    d1:69:ce:18:91:20:84:6d:9a:ef:e6:d5:aa:e7:d0:
                    6c:67:28:6c:1c:49:c8:9b:5e:62:c3:54:e0:d2:37:
                    4e:38:bb:72:96:6e:c7:a1:54:b9:a5:be:f4:1c:eb:
                    79:d0:33:35:b9:9e:7d:cc:39:90:45:3c:16:c9:71:
                    87:44:9c:18:09:9b:47:c1:cd:ae:4f:ff:da:f1:a7:
                    a1:5d:33:27:6f:50:f0:ad:5a:e0:12:c0:1e:16:82:
                    6e:60:92:19:b9:39:45:c2:32:ca:ce:40:8e:ce:6e:
                    61:64:69:ea:50:a5:08:72:27:0d:3e:85:d9:e7:86:
                    e7:01:99:cd:0a:ce:3e:99:99:50:21:b1:05:92:a9:
                    52:09:fc:24:60:80:1c:af:3a:08:f7:d7:95:df:d6:
                    54:11:48:b7:9c:5c:ae:34:d0:a3:0f:07:5a:97:76:
                    ab:17:4f:70:15:2e:7a:c6:6e:be:26:7b:27:31:40:
                    a4:3e:e3:99:1f:8c:e1:55:30:26:59:4f:f8:9d:7c:
                    db:99:18:7d:78:f6:f2:ab:81:31:a5:67:0a:44:78:
                    bc:c1:03:80:8d:89:20:8b:73:43:ab:5e:6e:42:3d:
                    c0:8a:c9:d6:ad:b6:cf:56:d9:4a:0a:8b:62:e5:64:
                    f0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8F:F7:20:FD:F6:0D:1C:D2:61:6F:15:B3:7D:DE:4E:3D:F7:61:4C
            X509v3 Authority Key Identifier:
                keyid:30:7A:62:8C:03:C1:4D:10:82:58:C5:79:29:72:6F:F0:FC:D2:10:4E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/_4_3IP32DRzSYW8Vs33eTj33YUw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.46.64/26

    Signature Algorithm: sha256WithRSAEncryption
         78:1f:9f:24:8b:3a:ff:2c:3a:07:21:21:96:3b:67:71:38:03:
         df:5c:3f:0e:a3:ee:35:ae:bc:d4:45:aa:e0:c7:9e:5b:72:25:
         bd:54:27:1c:aa:0b:51:f9:c5:3d:3b:9d:fa:b8:75:7b:62:80:
         a0:a6:7c:43:a8:f2:6b:1c:b9:56:09:a5:53:d6:15:36:45:2a:
         c4:78:22:72:67:fb:f6:a6:98:1a:f4:aa:d7:b4:0f:f0:7f:6c:
         55:bd:7d:57:5f:5c:b5:e7:10:94:82:be:99:b1:e0:e5:84:98:
         ed:4d:75:2d:5e:c4:8f:dc:95:25:b6:45:a6:4d:a1:85:7d:99:
         cc:ee:40:6f:5f:84:47:15:29:9e:dc:d0:2a:35:77:a0:b8:5d:
         d4:dd:d2:f0:0b:63:b7:11:9d:29:eb:04:4f:42:32:c2:5f:cc:
         75:07:e6:76:e0:4d:ee:f6:e4:45:d7:1e:cd:23:67:2a:f9:e3:
         d6:07:f5:e0:9c:c2:a9:4e:cd:88:85:52:be:36:44:77:94:01:
         d4:b7:e3:97:6d:b5:00:28:03:ac:da:58:f6:b8:4c:42:1a:aa:
         22:f4:6d:65:4d:e1:08:19:04:cb:d3:8c:14:3c:ab:38:e5:29:
         a5:09:e2:42:2f:10:6b:11:e7:9c:4c:cc:82:fc:e8:a8:0b:80:
         78:48:5f:65
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:41 2024 by rpki-client on console-ams.rpki-client.org