Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5529/AmETzuIEVxDlyysC3AWQGmzI-a4.roa
File:                     AmETzuIEVxDlyysC3AWQGmzI-a4.roa (raw, json)
Hash identifier:          l7Ub2MW3rgovg4UdkM4AQp/Nq3qsQvmMlOQCKKSc7GM=
Subject key identifier:   02:61:13:CE:E2:04:57:10:E5:CB:2B:02:DC:05:90:1A:6C:C8:F9:AE
Certificate issuer:       /CN=31121BF92B352BAA5031D23343CEA9EED57151A6
Certificate serial:       1F
Authority key identifier: 31:12:1B:F9:2B:35:2B:AA:50:31:D2:33:43:CE:A9:EE:D5:71:51:A6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MRIb-Ss1K6pQMdIzQ86p7tVxUaY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5529/AmETzuIEVxDlyysC3AWQGmzI-a4.roa
Signing time:             Thu 29 Feb 2024 01:34:18 +0000
ROA not before:           Thu 29 Feb 2024 01:34:18 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     146980
IP address blocks:        103.184.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5529/MRIb-Ss1K6pQMdIzQ86p7tVxUaY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5529/MRIb-Ss1K6pQMdIzQ86p7tVxUaY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MRIb-Ss1K6pQMdIzQ86p7tVxUaY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31121BF92B352BAA5031D23343CEA9EED57151A6
        Validity
            Not Before: Feb 29 01:34:18 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=026113CEE2045710E5CB2B02DC05901A6CC8F9AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:47:0d:27:59:eb:94:51:a2:c4:8a:a1:81:
                    9f:e0:b1:8c:02:89:5a:29:5c:a4:fa:46:50:b1:2d:
                    45:83:d4:0c:b0:34:93:b8:e0:d5:49:f2:5e:15:04:
                    47:fb:cc:d5:8e:b4:e7:03:4d:3e:f7:95:24:22:a4:
                    bb:78:ab:08:5b:40:78:61:c0:da:98:4e:b7:52:01:
                    85:00:35:e3:3a:a0:24:0e:fe:fc:84:c2:3b:25:90:
                    fd:7b:97:f6:1a:08:7e:fd:13:bb:12:e8:ae:6c:a1:
                    f7:e3:5a:ad:1a:57:99:cc:0b:47:ca:0a:9b:1a:8a:
                    c7:80:34:56:da:cf:ba:a2:b9:10:5a:79:01:a2:00:
                    bf:67:4a:27:ba:7f:d1:1b:26:79:a6:5f:96:66:70:
                    1a:8d:79:d9:d8:15:a7:71:a9:ce:7b:2f:45:89:80:
                    a9:b6:6d:fa:10:aa:b7:22:0e:22:25:8f:2b:58:5a:
                    46:dd:db:89:38:34:c1:b2:4c:5b:68:33:54:96:8b:
                    8e:a8:dd:80:70:3b:89:05:75:f5:c4:d8:f7:1a:9f:
                    58:a4:cd:da:4d:2b:13:8b:ee:e1:36:4e:ad:05:36:
                    ac:da:f4:54:38:0b:39:6f:61:f8:77:cb:3b:b7:ac:
                    3d:e6:55:f0:b0:84:89:52:69:6b:f0:f9:d2:1c:70:
                    df:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:61:13:CE:E2:04:57:10:E5:CB:2B:02:DC:05:90:1A:6C:C8:F9:AE
            X509v3 Authority Key Identifier:
                keyid:31:12:1B:F9:2B:35:2B:AA:50:31:D2:33:43:CE:A9:EE:D5:71:51:A6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5529/MRIb-Ss1K6pQMdIzQ86p7tVxUaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MRIb-Ss1K6pQMdIzQ86p7tVxUaY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5529/AmETzuIEVxDlyysC3AWQGmzI-a4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:92:72:c7:11:c3:e2:18:07:2d:db:d5:b7:a0:65:0e:9d:f3:
         d9:e6:41:79:c1:f2:ec:75:6a:2f:cd:29:80:9c:92:50:a9:a8:
         7c:f2:1e:82:8c:55:ac:ea:7a:44:77:b7:5f:d9:16:fe:5b:59:
         fb:f9:ec:6b:90:43:6b:b6:9d:a0:92:d0:6b:6b:20:c1:a2:3b:
         de:5a:e7:09:72:dc:eb:5f:e7:01:d1:df:10:c9:c8:9c:70:b5:
         3d:98:aa:ba:b9:18:bf:a3:78:48:ed:04:e2:42:c1:3c:ee:88:
         83:e0:85:38:29:08:a3:83:aa:21:79:01:1c:a7:6b:e9:08:d1:
         d0:02:2b:43:d2:89:77:02:ac:b6:24:4c:a4:89:83:c1:cf:c1:
         aa:21:04:56:cf:1c:dd:22:19:fd:77:54:cb:76:42:4b:5c:1a:
         fd:4b:4f:67:05:76:1e:7f:73:63:7b:11:77:3f:52:c1:2c:e0:
         c4:d0:a5:6c:a6:ad:25:ca:21:6c:3c:bc:f8:6d:97:28:64:eb:
         04:1f:51:5e:1e:f4:e1:d0:6a:d6:be:c4:b1:0a:41:4a:08:1e:
         a3:c5:f1:db:c8:08:0b:4b:f2:c9:6e:87:52:70:de:ef:7f:e5:
         97:0e:34:a8:94:d1:a1:40:8b:4d:db:de:1c:0e:de:5b:d0:38:
         4b:81:44:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:16 2024 by rpki-client on console-fra.rpki-client.org