Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/Qk-8LXBxbyBKRswe-o58EuzcsGE.roa
File:                     Qk-8LXBxbyBKRswe-o58EuzcsGE.roa (raw, json)
Hash identifier:          TAKnW/t11wqj05KwTF72H2pPh6xtFcZVGca2ssy0Xxk=
Subject key identifier:   42:4F:BC:2D:70:71:6F:20:4A:46:CC:1E:FA:8E:7C:12:EC:DC:B0:61
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       67
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/Qk-8LXBxbyBKRswe-o58EuzcsGE.roa
Signing time:             Mon 30 Sep 2024 01:30:55 +0000
ROA not before:           Mon 30 Sep 2024 01:30:55 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     131896
IP address blocks:        103.198.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 23:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Sep 30 01:30:55 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=424FBC2D70716F204A46CC1EFA8E7C12ECDCB061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:46:55:5d:27:a2:d2:56:33:e2:f1:9b:d2:
                    fe:37:81:d8:20:2a:7a:96:22:43:3a:f5:94:44:e4:
                    f3:37:5d:dc:43:28:2d:88:d5:32:91:e3:b5:35:bd:
                    b1:1f:51:d8:bf:73:4d:5c:89:59:5d:12:7a:ee:34:
                    d3:88:6c:39:8c:cf:88:6a:fb:8e:a2:cf:68:0f:ae:
                    47:aa:67:78:2e:8f:f7:1a:e8:55:45:77:b7:90:ec:
                    3f:db:c0:75:9d:45:1d:f3:db:ec:ec:85:ab:8d:76:
                    84:88:52:9b:07:13:8e:3c:53:1c:b3:c7:5e:54:97:
                    1c:79:e4:5a:8f:3d:ac:4b:ef:26:6e:fd:a4:e8:7d:
                    18:56:20:aa:85:e0:56:bc:0c:c8:ec:de:23:a9:26:
                    96:22:12:a6:40:7c:35:53:8d:1a:e1:ae:44:d3:c5:
                    e7:01:d1:1f:ee:22:90:7e:9a:80:e2:d1:65:63:b8:
                    ab:1e:03:ff:53:f3:e6:54:d6:c9:7b:be:3d:a5:be:
                    5e:15:15:50:94:39:0b:46:75:9e:9b:fd:57:d0:41:
                    99:65:bf:c5:9e:44:ac:da:98:b8:71:92:8c:c5:cf:
                    9d:aa:bc:3d:4c:1c:0c:eb:7a:b1:49:26:d3:96:d0:
                    37:c4:5d:1c:2e:58:62:62:35:18:b6:bb:ac:57:8d:
                    a6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4F:BC:2D:70:71:6F:20:4A:46:CC:1E:FA:8E:7C:12:EC:DC:B0:61
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/Qk-8LXBxbyBKRswe-o58EuzcsGE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:80:eb:28:b9:b3:b2:48:3a:73:5a:8e:4d:4b:bd:a9:02:5b:
         a7:1a:e7:83:54:5b:98:e9:6e:23:5d:d1:50:83:2d:3f:7c:f5:
         8d:e1:06:f6:12:b5:c0:02:21:0e:63:26:fd:2c:fa:b8:1d:d4:
         e5:e4:b6:4b:60:e8:c7:b4:85:66:b5:6f:b3:58:82:b6:6a:24:
         6c:90:c6:18:c1:3c:2a:95:74:7c:1b:2c:ae:73:80:1c:df:94:
         4f:2b:01:70:fd:53:c4:44:d2:a8:98:0e:94:b0:c1:13:bd:0e:
         57:8b:2e:26:db:4d:df:35:8c:ff:d8:b7:31:13:61:b6:2a:8e:
         6e:5e:15:b3:a2:18:a6:8c:cc:ab:bc:ed:6c:7e:9a:3e:ae:4e:
         f6:53:c2:35:a8:64:14:e6:a2:d6:12:a8:e9:17:c6:4a:9c:1b:
         a2:40:4c:84:2b:ba:a1:9a:cb:e9:6f:17:55:50:57:cc:d3:2a:
         a2:4f:92:6b:d9:62:b0:38:f4:11:3c:70:3b:0c:33:e0:1b:8a:
         30:e2:6e:4d:c0:04:93:61:5e:c0:ec:bd:52:10:30:fd:41:fe:
         3c:f2:96:3d:38:5c:a1:1d:75:af:78:64:d7:21:7b:98:30:c2:
         45:c4:82:2f:d3:60:f9:4c:5b:7b:a0:06:c5:84:67:11:4e:4e:
         38:57:1e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:52:41 2025 by rpki-client