Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/H3omoW6mqU4H-fQDp9A4ZmcnZ94.roa
File:                     H3omoW6mqU4H-fQDp9A4ZmcnZ94.roa (raw, json)
Hash identifier:          8WzUlapFSTaMSzTEWFMwZWeaCpuLuZYEBpvvxP25qUQ=
Subject key identifier:   1F:7A:26:A1:6E:A6:A9:4E:07:F9:F4:03:A7:D0:38:66:67:27:67:DE
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       3A
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/H3omoW6mqU4H-fQDp9A4ZmcnZ94.roa
Signing time:             Wed 05 Jun 2024 07:24:46 +0000
ROA not before:           Wed 05 Jun 2024 07:24:46 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     0
IP address blocks:        101.203.75.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Sep 2024 01:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Jun  5 07:24:46 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=1F7A26A16EA6A94E07F9F403A7D03866672767DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e2:0b:9a:7e:9e:e7:10:ee:ea:be:70:d8:b7:
                    27:be:07:32:e0:ef:c3:6c:12:ed:c3:0d:a3:d5:db:
                    1d:b3:cb:7b:1d:9e:72:ae:82:88:7a:bc:9e:c8:ef:
                    2c:14:3c:b0:38:60:85:08:80:e5:28:d7:f1:80:1f:
                    6b:31:2c:e9:f6:c1:19:07:62:4d:d5:6c:31:88:d9:
                    5f:49:d5:4d:18:cc:67:90:b6:41:8e:df:ba:da:40:
                    b2:44:86:92:94:56:45:92:58:dd:30:cb:5b:c4:5e:
                    8e:bb:31:8c:e6:e7:17:40:02:ef:3e:42:0b:08:16:
                    8e:7a:2f:2d:0c:af:6d:f7:0e:24:f9:ee:70:5f:d7:
                    f1:eb:f4:62:bc:31:4f:f6:cd:2d:9c:ed:77:aa:33:
                    04:47:80:57:5e:e0:eb:9d:ab:28:9a:e0:a4:a3:4e:
                    f1:c6:ff:53:ae:53:c9:ad:fd:37:67:77:d8:61:08:
                    83:7d:4b:90:e5:04:6b:a9:be:a4:f2:cf:b3:eb:de:
                    eb:c4:0e:ac:46:01:c3:cc:c0:b8:82:a5:ad:82:ee:
                    3f:68:ca:44:5d:3f:ff:59:93:c2:bf:ee:31:a8:38:
                    a3:c8:bf:c9:c3:ee:9c:f4:ad:e8:21:d1:ed:22:1a:
                    99:63:4e:4c:4b:3f:df:0e:97:c8:76:f5:3f:04:38:
                    9c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7A:26:A1:6E:A6:A9:4E:07:F9:F4:03:A7:D0:38:66:67:27:67:DE
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/H3omoW6mqU4H-fQDp9A4ZmcnZ94.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:d5:8f:e0:3e:b5:75:bf:b6:50:4a:b6:86:1b:60:4e:d1:47:
         3f:64:62:c8:06:77:87:b8:14:f8:57:80:1c:32:65:55:52:d6:
         9f:23:e2:d5:75:07:9a:c7:23:f5:22:df:da:ff:19:b5:64:13:
         56:60:a2:66:36:ec:35:9e:ff:13:aa:41:81:cc:3e:a6:f6:a9:
         7c:23:b5:38:85:f6:7d:ca:6c:7b:a4:09:3c:2f:8e:ff:b5:12:
         dc:6e:a4:ec:0d:5c:8e:62:60:08:67:8f:5d:30:d4:4e:3e:a1:
         24:df:60:5c:80:72:c4:14:d3:d0:06:78:ca:7f:68:ae:17:e7:
         b7:c2:84:0c:95:14:15:33:73:ff:d6:cd:7e:65:5d:7f:87:52:
         68:eb:2b:d3:22:83:c5:9c:ee:50:79:e3:81:e5:c7:3f:0e:26:
         24:06:20:93:f9:a5:61:ac:03:7d:57:33:54:67:c8:91:c4:c8:
         31:2f:93:8e:26:9c:b4:8a:b1:57:80:fe:d6:82:ec:a1:97:4c:
         15:b8:ed:be:02:f0:5b:2f:dc:49:e9:56:70:3d:30:59:2e:44:
         a8:93:1c:36:bd:45:47:40:28:c0:5e:de:e4:42:7f:24:b8:53:
         02:64:fe:0e:6e:5d:33:8b:db:0f:c9:6c:5a:87:63:8a:35:76:
         a9:a1:4c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 10:40:02 2024 by rpki-client on console-ams.rpki-client.org