Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/PXlxVIGRHQVd6-FOlkVTgT7QdP8.roa
File:                     PXlxVIGRHQVd6-FOlkVTgT7QdP8.roa (raw, json)
Hash identifier:          yYs/2I2i+zoCLMVgRkcpqdTS/wPTogLuNttPrQI3DdA=
Subject key identifier:   3D:79:71:54:81:91:1D:05:5D:EB:E1:4E:96:45:53:81:3E:D0:74:FF
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       4A
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/PXlxVIGRHQVd6-FOlkVTgT7QdP8.roa
Signing time:             Fri 01 Sep 2023 01:29:47 +0000
ROA not before:           Fri 01 Sep 2023 01:29:47 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     131896
IP address blocks:        103.239.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Sep  1 01:29:47 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=3D79715481911D055DEBE14E964553813ED074FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:96:c5:37:c9:60:27:c9:81:67:70:19:eb:48:
                    34:91:ec:d9:1d:aa:8c:e2:66:a9:e5:90:3b:1a:15:
                    c8:86:31:96:b1:42:7f:67:a5:47:ec:6b:1f:1b:65:
                    50:ed:98:08:99:e1:9f:b9:71:8b:2b:ea:68:ee:38:
                    49:1e:d5:4c:72:6a:4b:d2:10:8c:b6:13:0b:98:5b:
                    61:0c:d5:c5:cd:10:61:f4:f5:45:f4:1d:e6:ea:12:
                    cc:8a:fc:ec:41:08:fd:bc:87:fd:28:63:1b:64:b8:
                    1a:8e:ab:d3:de:77:ce:cc:b6:d7:24:f0:ab:70:da:
                    12:0f:22:21:06:f9:c4:18:c5:f4:f0:62:34:5d:18:
                    fe:cc:82:4f:28:6d:2c:4f:90:60:33:2d:70:60:c6:
                    98:9c:00:e1:31:52:05:f4:61:06:b1:a6:dd:3b:92:
                    17:27:2c:46:e4:e4:08:20:f0:ef:d0:92:5e:10:dd:
                    78:64:c5:7b:e1:3f:11:7a:2c:f7:30:5e:19:ee:5f:
                    8f:e7:f3:68:b3:3e:e4:93:98:7d:e9:78:33:16:9c:
                    62:94:88:c7:07:03:70:bb:28:ba:c9:7a:60:f0:15:
                    76:ac:b6:7d:89:7f:68:e9:da:d2:f7:b7:13:56:60:
                    c2:2f:c5:d7:1b:06:0b:87:35:32:bc:fb:71:d4:f7:
                    c0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:79:71:54:81:91:1D:05:5D:EB:E1:4E:96:45:53:81:3E:D0:74:FF
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/PXlxVIGRHQVd6-FOlkVTgT7QdP8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:0d:4d:cd:1a:71:46:af:27:a6:93:41:12:bf:ea:9d:1f:a0:
         1a:f1:8d:cc:5c:6d:aa:d7:4a:e5:11:ef:f4:08:1e:a6:e0:92:
         dc:32:d6:0f:8e:57:87:47:60:43:b9:0e:0c:2e:67:37:31:20:
         ef:f3:43:98:ae:c6:4e:76:52:c4:15:d2:34:5d:38:f0:7d:b5:
         18:c6:56:71:91:fa:35:d2:11:b9:a9:0f:3f:97:3f:fc:8a:04:
         25:f0:cf:3b:df:3f:3e:4e:6c:b2:ef:c9:f0:8c:cc:b3:53:03:
         51:ee:ee:d0:6a:4e:9c:0c:68:0a:02:b6:e1:66:38:8b:ad:8b:
         f0:6c:07:9e:c6:2a:41:ff:e7:86:19:3e:2b:9d:62:3a:c7:f8:
         cc:2f:d1:fd:73:5e:c6:dd:8b:72:71:46:e7:20:a1:c0:24:0b:
         ec:d3:b7:d3:c9:53:f5:61:3c:db:c3:85:30:82:1c:33:1e:d7:
         b2:92:b0:ba:de:e0:20:36:4f:0b:de:3f:5f:c1:dc:96:e7:29:
         3d:48:71:fb:5c:22:65:41:33:5e:f2:b9:bc:65:5a:59:8a:cf:
         f4:63:27:5a:07:6a:01:b0:85:78:6d:72:71:3d:77:86:1f:31:
         de:7c:58:54:64:dd:23:0f:1e:df:0c:a4:d5:80:bf:19:6c:07:
         15:56:c0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:47 2024 by rpki-client on console-ams.rpki-client.org