Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5462/pa07MQ09MoEoFxNT8vM07pw-9iA.roa
File:                     pa07MQ09MoEoFxNT8vM07pw-9iA.roa (raw, json)
Hash identifier:          zJe4CvNQ2zaY8A5Gz/h6MURuZgGEGwBlpRTQijDpvnA=
Subject key identifier:   A5:AD:3B:31:0D:3D:32:81:28:17:13:53:F2:F3:34:EE:9C:3E:F6:20
Certificate issuer:       /CN=307A628C03C14D108258C57929726FF0FCD2104E
Certificate serial:       05
Authority key identifier: 30:7A:62:8C:03:C1:4D:10:82:58:C5:79:29:72:6F:F0:FC:D2:10:4E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/pa07MQ09MoEoFxNT8vM07pw-9iA.roa
Signing time:             Tue 19 Dec 2023 15:01:14 +0000
ROA not before:           Tue 19 Dec 2023 15:01:14 +0000
ROA not after:            Wed 18 Dec 2024 14:16:53 +0000
asID:                     45679
IP address blocks:        103.167.46.128/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307A628C03C14D108258C57929726FF0FCD2104E
        Validity
            Not Before: Dec 19 15:01:14 2023 GMT
            Not After : Dec 18 14:16:53 2024 GMT
        Subject: CN=A5AD3B310D3D328128171353F2F334EE9C3EF620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f7:be:0d:d0:9e:64:20:03:a8:b3:6c:7b:72:
                    5f:ac:98:62:af:a4:f7:04:ca:e8:e2:1f:a8:34:5c:
                    7e:dc:35:24:96:f4:63:8a:b0:0f:bd:0e:02:a7:26:
                    fa:59:de:48:2e:2a:c4:22:0d:fc:c4:2e:33:c9:48:
                    07:60:38:0d:4a:de:fb:1d:8e:1f:d4:d3:f5:2d:58:
                    48:70:08:86:a5:0a:e9:de:a1:cf:41:c5:73:67:0a:
                    ae:85:e5:96:2f:62:32:e2:23:95:90:a5:1e:dc:48:
                    03:69:dc:2f:56:32:1d:1e:b1:8f:c0:32:f5:57:5c:
                    fa:91:d4:9d:f4:8e:0e:e3:ce:44:10:ad:24:89:9d:
                    7e:2b:e7:d0:a2:69:52:62:7f:ae:9a:07:d8:0e:66:
                    48:94:78:50:a6:73:16:31:6c:3f:44:bc:4a:1d:70:
                    40:d0:f8:f1:33:10:3a:07:a0:f1:e9:92:c5:6b:ce:
                    53:b9:7e:d1:aa:db:69:b7:86:2a:ed:44:29:c6:38:
                    bc:75:c4:f7:93:3a:81:f1:0f:f7:b4:10:ee:4a:a5:
                    4a:60:37:4e:91:64:22:3f:7c:74:65:22:a7:70:51:
                    6e:3d:03:65:b5:8d:50:72:02:d2:68:d4:8f:9f:df:
                    1d:6c:86:3c:1c:db:3a:5e:60:ad:17:e9:1c:c4:68:
                    1d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AD:3B:31:0D:3D:32:81:28:17:13:53:F2:F3:34:EE:9C:3E:F6:20
            X509v3 Authority Key Identifier:
                keyid:30:7A:62:8C:03:C1:4D:10:82:58:C5:79:29:72:6F:F0:FC:D2:10:4E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/pa07MQ09MoEoFxNT8vM07pw-9iA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.46.128/26

    Signature Algorithm: sha256WithRSAEncryption
         10:d1:14:fc:76:80:3a:08:d8:f9:a9:1d:6c:92:e6:45:4f:e3:
         17:eb:0e:b2:48:23:a4:82:3f:2c:c6:ac:2d:fe:e6:ea:03:02:
         1f:ce:13:bb:20:5e:fe:3d:d4:91:05:0a:bc:f8:9b:11:a1:6e:
         68:08:42:60:c3:50:b2:4d:2d:24:60:e5:cf:15:c0:19:28:82:
         19:20:3c:5e:24:7c:29:34:00:2e:fb:8e:40:eb:98:37:02:0a:
         bc:c7:3d:07:4e:83:bd:e5:b6:a2:a0:f4:c5:b7:c1:4f:14:a8:
         89:d4:86:cf:08:af:26:7b:b1:54:4b:40:45:8a:f4:99:18:d4:
         67:61:40:29:69:20:96:6a:4a:ae:6a:b0:a0:64:50:25:c6:9e:
         1b:58:5e:46:e8:f6:5d:da:22:d3:2d:6b:03:96:e0:41:f0:39:
         53:29:48:ac:1d:b0:79:09:5c:e9:78:66:0e:84:83:7c:59:bf:
         98:a2:8e:5e:42:5b:92:20:be:5a:af:88:ad:20:c4:92:28:8f:
         16:1d:14:83:32:25:ea:b5:e5:31:66:30:76:7a:4f:d1:f6:39:
         5d:c9:3f:eb:d9:5b:a8:94:79:c6:88:13:da:f5:c9:46:09:26:
         28:99:46:c2:de:f6:2e:b4:80:84:42:a3:7c:60:82:95:30:e1:
         98:72:53:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:51 2024 by rpki-client on console-fra.rpki-client.org