Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/_iTvhZsSbzHguuvvE55ntPtgMKM.roa
File:                     _iTvhZsSbzHguuvvE55ntPtgMKM.roa (raw, json)
Hash identifier:          A/FjtyuYH1d1g/VE7l2QAjmBf95zQUSwS+NlaWkzYDE=
Subject key identifier:   FE:24:EF:85:9B:12:6F:31:E0:BA:EB:EF:13:9E:67:B4:FB:60:30:A3
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       3B
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/_iTvhZsSbzHguuvvE55ntPtgMKM.roa
Signing time:             Wed 05 Jun 2024 07:24:47 +0000
ROA not before:           Wed 05 Jun 2024 07:24:47 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     0
IP address blocks:        101.203.76.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Jun  5 07:24:47 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=FE24EF859B126F31E0BAEBEF139E67B4FB6030A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:56:bd:e9:05:ce:91:e4:2c:3b:b9:11:e2:34:
                    39:59:9b:8e:c9:80:a3:c4:16:16:d4:67:c7:cd:55:
                    25:75:e7:22:00:35:ef:6d:ce:0e:2b:d3:fb:1e:0e:
                    74:c3:93:f1:07:d8:ff:a6:40:be:c9:06:5a:bd:81:
                    20:b2:bf:8c:73:fc:21:a0:8d:1e:e2:94:92:4c:8e:
                    12:d6:71:43:ac:f3:be:8e:6d:80:e5:8f:2f:84:c1:
                    4a:8a:8b:1c:70:46:8b:5a:3e:8d:e4:fe:10:f6:2d:
                    c6:26:e5:1a:f2:a2:f2:d6:c2:78:3c:78:5f:33:0a:
                    13:ae:3e:c5:6a:57:dc:27:b4:da:72:71:ce:3d:4f:
                    a0:c1:f3:c9:a2:bd:9f:d0:b1:5f:02:5b:ea:e9:da:
                    ba:6c:3c:56:43:7a:88:10:e6:18:eb:f3:64:da:ff:
                    a2:b1:3d:ef:c3:d2:b9:fc:18:ef:64:dc:2d:83:5b:
                    d0:b7:85:68:bc:3c:69:9d:70:8b:50:14:ef:1f:92:
                    df:ff:58:5f:e0:41:7a:75:27:7e:c0:eb:e2:a2:3d:
                    21:ed:d2:3c:77:ea:ec:19:41:3c:12:76:8b:3a:d1:
                    c3:ca:6b:cb:d5:8f:dd:df:ed:bc:e8:de:ee:5f:b4:
                    ad:a5:ea:86:37:62:71:2a:cb:51:68:42:eb:56:5c:
                    f5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:24:EF:85:9B:12:6F:31:E0:BA:EB:EF:13:9E:67:B4:FB:60:30:A3
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/_iTvhZsSbzHguuvvE55ntPtgMKM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:ae:2d:6e:b6:78:af:a6:15:25:c4:b2:d3:c3:bb:8c:ff:5c:
         7c:a6:7e:ee:0c:a4:7a:8d:28:09:f3:e0:ae:6f:18:38:0d:de:
         77:20:a6:d5:f8:bc:ca:94:e3:23:0a:2e:7e:cd:a6:72:5b:3d:
         f6:39:ea:ba:c0:2e:31:dc:c6:07:07:7c:f5:f8:11:7f:e9:fd:
         22:3e:10:cd:4b:92:f8:8e:f5:b6:6a:46:b7:92:5d:f8:2d:80:
         79:04:b2:98:ac:ba:e8:9e:73:93:b0:c5:c3:0c:88:96:6f:78:
         ec:a6:cc:e0:65:b0:9d:c8:0e:d8:55:86:0c:d5:6c:1e:40:b1:
         53:50:e9:77:c2:32:4b:5a:6f:7d:9d:81:1b:e8:5c:02:f9:70:
         77:9e:12:f9:5f:cc:b1:a6:dd:fe:d4:5c:d9:bd:77:da:4f:5c:
         df:47:94:d7:3c:62:4a:9a:c8:d2:82:a2:37:61:c2:b1:ee:3a:
         15:6a:fa:2d:56:52:41:d1:e8:1e:0a:0f:d4:e7:1d:5b:79:b9:
         39:6d:04:a3:6f:3b:2f:b3:3f:3b:1b:ee:2c:be:15:7d:7b:17:
         af:db:fd:d5:f9:0d:cf:61:06:51:86:f8:28:0e:1f:34:64:27:
         be:f5:7d:43:10:e1:da:c4:68:a4:8f:7f:68:8a:6d:3c:5a:14:
         c0:a3:78:ca
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MUY3
NkZBMDc3MzVGNjg1OTkxRkM4ODJDODg1RTIxRUZCQjE2MUJDMB4XDTI0MDYwNTA3
MjQ0N1oXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoRkUyNEVGODU5QjEyNkYz
MUUwQkFFQkVGMTM5RTY3QjRGQjYwMzBBMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKBWvekFzpHkLDu5EeI0OVmbjsmAo8QWFtRnx81VJXXnIgA1723O
DivT+x4OdMOT8QfY/6ZAvskGWr2BILK/jHP8IaCNHuKUkkyOEtZxQ6zzvo5tgOWP
L4TBSoqLHHBGi1o+jeT+EPYtxiblGvKi8tbCeDx4XzMKE64+xWpX3Ce02nJxzj1P
oMHzyaK9n9CxXwJb6unaumw8VkN6iBDmGOvzZNr/orE978PSufwY72TcLYNb0LeF
aLw8aZ1wi1AU7x+S3/9YX+BBenUnfsDr4qI9Ie3SPHfq7BlBPBJ2izrRw8pry9WP
3d/tvOje7l+0raXqhjdicSrLUWhC61Zc9Y0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBT+JO+FmxJvMeC66+8Tnme0+2AwozAfBgNVHSMEGDAWgBRx92+gdzX2hZkfyILI
heIe+7FhvDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTk3L2NmZHZvSGMxOW9XWkg4aUN5SVhpSHZ1eFlidy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2NmZHZvSGMxOW9XWkg4aUN5SVhpSHZ1
eFlidy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81OTcvX2lUdmhac1NiekhndXV2dkU1NW50UHRnTUtNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGXLTDANBgkqhkiG9w0BAQsFAAOCAQEAYq4tbrZ4r6YVJcSy08O7jP9cfKZ+
7gykeo0oCfPgrm8YOA3edyCm1fi8ypTjIwoufs2mcls99jnqusAuMdzGBwd89fgR
f+n9Ij4QzUuS+I71tmpGt5Jd+C2AeQSymKy66J5zk7DFwwyIlm947KbM4GWwncgO
2FWGDNVsHkCxU1Dpd8IyS1pvfZ2BG+hcAvlwd54S+V/Msabd/tRc2b132k9c30eU
1zxiSprI0oKiN2HCse46FWr6LVZSQdHoHgoP1OcdW3m5OW0Eo287L7M/OxvuLL4V
fXsXr9v91fkNz2EGUYb4KA4fNGQnvvV9QxDh2sRopI9/aIptPFoUwKN4yg==
-----END CERTIFICATE-----
Generated at Wed Jun 26 08:13:01 2024 by rpki-client on console-ams.rpki-client.org