Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/568/P1cLxS-rdDQGjFpXyIZfaFX5gUs.roa
File:                     P1cLxS-rdDQGjFpXyIZfaFX5gUs.roa (raw, json)
Hash identifier:          m7zs6cHPFD3fPzpvt8sMzRJVM1R/ge3bXS9J/gt8jWM=
Subject key identifier:   3F:57:0B:C5:2F:AB:74:34:06:8C:5A:57:C8:86:5F:68:55:F9:81:4B
Certificate issuer:       /CN=E125B43A75AE313269A60638E66317970B50B5D3
Certificate serial:       02
Authority key identifier: E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/P1cLxS-rdDQGjFpXyIZfaFX5gUs.roa
Signing time:             Thu 06 Jun 2024 07:46:04 +0000
ROA not before:           Thu 06 Jun 2024 07:46:04 +0000
ROA not after:            Fri 06 Jun 2025 02:52:04 +0000
asID:                     59093
IP address blocks:        103.230.168.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E125B43A75AE313269A60638E66317970B50B5D3
        Validity
            Not Before: Jun  6 07:46:04 2024 GMT
            Not After : Jun  6 02:52:04 2025 GMT
        Subject: CN=3F570BC52FAB7434068C5A57C8865F6855F9814B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0b:83:61:14:c8:12:9a:50:39:fd:07:3c:dc:
                    5b:98:90:96:a8:1c:08:5b:75:18:08:76:5d:e7:ab:
                    ad:0e:ce:4e:a3:27:4f:f9:68:bc:76:34:2a:ab:b6:
                    b1:fa:f6:1b:6e:5e:1a:89:d4:bd:25:2a:41:1d:02:
                    81:a3:65:32:1f:c1:ea:53:56:fc:a5:ea:21:df:14:
                    bc:c2:c0:fa:c8:75:c9:e3:c1:af:42:35:17:ec:da:
                    83:eb:00:5f:46:fd:82:3b:79:ee:5a:d9:9c:04:78:
                    34:fc:8d:48:ae:34:ed:f9:4e:24:22:d0:12:6a:65:
                    39:59:ab:5d:76:e3:f9:2c:68:00:20:5b:af:d5:47:
                    bd:99:f1:da:8c:82:34:6f:44:81:76:d6:bd:f2:dc:
                    2d:65:cd:9c:eb:f6:6c:ea:e5:70:e8:60:e5:bf:ec:
                    94:f0:03:b1:a0:18:81:3d:b0:b0:2a:33:78:de:62:
                    a4:aa:7d:ba:06:1c:85:92:98:ec:1f:9f:c1:1b:cd:
                    f1:98:3d:2a:87:29:20:0c:11:1f:12:f2:4d:20:24:
                    0f:8e:6c:89:ed:f1:57:d2:5c:68:a9:50:f3:7b:92:
                    33:30:01:3f:27:78:ac:2f:41:af:a9:18:e7:50:1a:
                    3b:54:75:1c:36:fd:7b:23:70:0b:b6:39:ea:44:6f:
                    97:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:57:0B:C5:2F:AB:74:34:06:8C:5A:57:C8:86:5F:68:55:F9:81:4B
            X509v3 Authority Key Identifier:
                keyid:E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/P1cLxS-rdDQGjFpXyIZfaFX5gUs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:08:5f:7c:c0:75:ff:d0:71:5a:2b:4b:94:be:83:b9:08:d5:
         61:f6:44:2b:7b:a3:51:cb:b7:9d:b7:36:df:7b:0e:ca:4a:6a:
         f7:f5:a3:23:33:cf:d3:43:17:30:8a:1b:a0:7b:ba:e3:bd:ca:
         30:0d:2d:6b:ed:1f:13:ae:3f:da:25:1f:54:72:26:b6:6c:60:
         1d:1b:bb:38:4e:57:a8:6e:11:2f:e6:12:01:24:1f:10:30:73:
         cd:4c:65:72:cc:46:8e:17:b9:9f:3f:56:67:66:49:ae:7e:12:
         30:e2:8e:e1:1e:b1:aa:8e:8d:0d:05:92:0b:9d:5f:77:e9:3e:
         d8:0a:46:0c:76:4e:83:2a:77:65:45:04:36:1d:5f:72:09:7b:
         c6:d8:5e:44:66:58:9a:82:8c:38:0d:7e:09:4a:8f:7b:e8:05:
         1c:3f:3a:82:bf:b9:8a:8f:02:b2:d7:a7:cc:45:64:de:a3:c7:
         6b:6d:39:14:c4:7b:b4:e1:cc:af:d7:5a:7d:b1:f7:69:6c:21:
         75:6f:d5:6f:61:f1:6b:60:70:31:79:56:d5:0d:41:ac:ea:81:
         2b:af:87:10:73:d9:82:cf:ab:3d:bd:2f:a2:96:10:83:1e:8d:
         4e:e5:db:42:c2:ec:ff:42:57:62:88:b1:e9:47:70:d3:e9:a4:
         04:7d:42:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:16 2024 by rpki-client on console-fra.rpki-client.org