Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/TA885idtPaG59BQ_WUr09acjxQk.roa
File:                     TA885idtPaG59BQ_WUr09acjxQk.roa (raw, json)
Hash identifier:          wBrMEAugROY/eHd1gtogu1/8/2nFno4hbtPF67qpmJA=
Subject key identifier:   4C:0F:3C:E6:27:6D:3D:A1:B9:F4:14:3F:59:4A:F4:F5:A7:23:C5:09
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       5F
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/TA885idtPaG59BQ_WUr09acjxQk.roa
Signing time:             Wed 31 Jul 2024 01:28:33 +0000
ROA not before:           Wed 31 Jul 2024 01:28:33 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     131896
IP address blocks:        103.239.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Jul 31 01:28:33 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=4C0F3CE6276D3DA1B9F4143F594AF4F5A723C509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6d:b8:9d:80:b7:13:0b:19:56:33:ba:27:eb:
                    c4:89:44:ad:4f:e6:01:2f:7d:af:7c:dc:da:50:26:
                    4a:b1:c3:b0:b2:b8:75:af:a8:3c:a1:74:19:0c:6d:
                    2b:40:63:c7:b7:58:3e:11:13:4f:2d:41:40:e2:38:
                    ce:69:ad:46:7e:ae:99:e5:1c:42:45:6f:d3:60:ef:
                    69:cf:a6:95:ba:81:8f:fc:45:be:c9:6b:33:80:07:
                    13:6d:5c:1c:5c:10:da:8f:f8:7e:e1:a9:3a:da:dc:
                    ad:6d:6b:ef:c3:b0:04:83:99:d9:92:47:52:7e:df:
                    35:72:6d:ed:5f:fd:74:1d:23:1a:1f:67:a6:87:32:
                    12:4d:4b:63:20:b2:0c:79:82:d2:38:8e:80:ec:61:
                    96:9b:04:27:36:b8:65:c3:5f:4b:48:01:47:32:14:
                    93:b8:09:1d:ef:03:7c:c5:8b:01:47:da:f8:8e:50:
                    33:e7:e1:40:08:43:12:7a:ad:1b:ae:33:32:e7:0e:
                    2d:45:cc:28:79:e3:3a:67:84:7f:bc:7e:55:dd:84:
                    ca:53:d9:a8:d1:db:e3:8c:b7:40:45:4f:23:06:11:
                    c7:47:db:79:b3:7d:64:5d:ae:ab:99:a0:d1:05:c8:
                    db:15:eb:20:f4:fe:df:0e:36:58:38:3a:83:17:15:
                    52:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0F:3C:E6:27:6D:3D:A1:B9:F4:14:3F:59:4A:F4:F5:A7:23:C5:09
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/TA885idtPaG59BQ_WUr09acjxQk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:cd:cc:45:5c:ab:b3:31:14:f5:3b:49:03:19:1c:55:18:4d:
         75:eb:e7:1d:07:e5:27:96:46:d8:0d:28:7e:17:a4:90:c5:7b:
         e0:ad:e4:47:86:88:89:a6:73:10:5f:fb:f5:58:8a:a9:78:78:
         a8:96:26:67:83:67:31:98:e8:ce:06:4b:5e:c4:9d:f8:1e:f2:
         12:95:3e:4d:b6:29:bf:3a:fd:42:81:23:0a:32:5f:47:30:d4:
         ad:f2:1c:d1:19:4c:17:36:88:9e:b1:48:80:1c:7c:43:f3:23:
         77:be:a9:d3:12:85:86:b1:22:5b:2d:cf:60:4b:8f:33:84:8e:
         62:71:01:1e:87:54:f0:64:c8:b3:cb:5b:21:8c:33:52:01:ee:
         71:26:fc:6b:bc:95:4c:ac:32:18:1e:a5:5d:12:fa:6a:8f:3c:
         7c:8f:7e:33:ad:ee:ec:b3:c3:7e:ff:f4:8e:68:d7:ab:3c:d2:
         e8:39:61:7c:76:22:53:fb:21:66:7c:50:56:42:6f:84:1e:99:
         25:fb:9f:dc:1f:f0:6f:fd:51:33:45:00:bf:6b:24:26:6f:a2:
         61:bf:ab:88:09:f8:2b:54:15:35:27:d7:50:e3:53:11:04:ad:
         b4:b0:70:0b:ad:70:5f:a4:69:01:2e:7b:95:51:e7:e3:00:8e:
         c5:70:d8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:16 2024 by rpki-client on console-fra.rpki-client.org