Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/EnaSYtPwEi2GcfTKgnfj1E6lpQY.roa
File:                     EnaSYtPwEi2GcfTKgnfj1E6lpQY.roa (raw, json)
Hash identifier:          YX/76JbVw2MJQqX8pA0Xz+nNZy1nNLzjwC8oNR+v8TQ=
Subject key identifier:   12:76:92:62:D3:F0:12:2D:86:71:F4:CA:82:77:E3:D4:4E:A5:A5:06
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       38
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/EnaSYtPwEi2GcfTKgnfj1E6lpQY.roa
Signing time:             Wed 05 Jun 2024 07:24:45 +0000
ROA not before:           Wed 05 Jun 2024 07:24:45 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     0
IP address blocks:        101.203.73.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Sep 2024 01:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Jun  5 07:24:45 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=12769262D3F0122D8671F4CA8277E3D44EA5A506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:60:e4:b3:1b:9d:01:58:65:7f:61:4f:52:18:
                    98:ce:59:89:70:c7:6a:d3:1b:94:9a:25:93:a0:90:
                    fc:4f:45:8c:09:07:54:a6:00:a4:34:4d:22:af:8c:
                    21:f9:a0:5b:5b:61:95:02:80:03:df:df:69:9f:07:
                    41:64:6a:61:72:2e:a0:93:5e:3c:77:b1:66:99:66:
                    54:7c:7b:e2:01:c7:78:8e:d6:64:1c:58:e4:d7:09:
                    a0:4d:6b:bc:0d:76:7f:78:c2:09:80:77:c1:22:9b:
                    c3:a7:35:fa:03:30:51:0d:c3:98:71:0c:d0:3e:fa:
                    a6:1d:70:c8:06:60:68:21:08:4f:36:a8:11:36:5f:
                    d9:3a:a7:c3:7b:21:6c:45:dd:e0:1a:bd:1b:86:18:
                    13:9b:34:78:00:d8:f5:ff:b8:57:07:63:56:18:ca:
                    00:50:9d:ef:a8:c4:fb:05:fc:8c:aa:83:e4:4e:8a:
                    dc:d7:ba:34:4a:8d:d3:20:45:31:8a:a7:5b:3a:d8:
                    65:b1:b5:fd:38:77:b9:0f:91:52:29:b5:97:3c:95:
                    53:51:db:9d:c0:d9:6f:bb:87:89:8f:18:07:bd:02:
                    f2:4b:83:27:f7:b0:fd:29:42:74:d7:83:88:0f:27:
                    27:3e:22:0d:1e:77:eb:33:cc:78:c8:75:a7:3b:1f:
                    a5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:76:92:62:D3:F0:12:2D:86:71:F4:CA:82:77:E3:D4:4E:A5:A5:06
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/EnaSYtPwEi2GcfTKgnfj1E6lpQY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:f5:7e:fa:44:5b:a4:28:56:9c:bf:b3:36:cf:25:82:c8:36:
         34:08:c2:93:d7:90:5e:b8:30:95:3a:32:52:aa:7b:b8:c3:cd:
         9d:bc:f3:ee:ad:55:b4:c3:db:48:f9:55:11:c2:38:71:57:7a:
         53:b8:0f:15:ea:2a:bc:9d:02:e1:4e:76:8b:04:1b:61:19:b1:
         60:56:3b:92:b3:7a:21:15:01:86:ca:9f:6e:42:71:dd:c8:a6:
         9e:d8:22:ef:ed:db:69:15:3a:6a:b8:5b:49:d6:57:d2:ec:90:
         f7:b5:1c:ec:9b:c8:14:ad:74:5f:80:f5:19:67:1c:90:cb:d6:
         95:04:a7:ae:df:ef:61:41:e9:2c:bd:6c:44:26:00:e7:05:6f:
         ff:8c:f8:90:b6:0a:f8:78:c3:c5:49:a9:d2:f2:55:54:f5:a4:
         a4:02:93:6c:3f:99:0a:33:55:47:bb:ab:7e:e4:09:50:37:e4:
         3c:14:f8:00:34:b8:0c:98:fc:d7:db:e4:73:1e:e5:b1:0b:63:
         f1:d9:52:81:50:b2:fe:83:7e:5c:5f:83:9d:f3:4b:90:e1:ca:
         77:22:5c:39:71:0e:0c:19:9b:2e:75:48:ad:72:2b:a2:e2:a0:
         b1:77:dc:ab:c4:4d:cd:1f:6a:d7:da:53:da:fa:91:3b:32:d5:
         1a:c5:08:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 10:52:06 2024 by rpki-client on console-fra.rpki-client.org