Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/biRI7aMNhYg8BGqJALzIoR7Zilo.roa
File:                     biRI7aMNhYg8BGqJALzIoR7Zilo.roa (raw, json)
Hash identifier:          B+Gl5o2Zz/tF8IJgadX5qSiTv8Vx52FrbbqBfw6mAGA=
Subject key identifier:   6E:24:48:ED:A3:0D:85:88:3C:04:6A:89:00:BC:C8:A1:1E:D9:8A:5A
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       3D
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/biRI7aMNhYg8BGqJALzIoR7Zilo.roa
Signing time:             Wed 05 Jun 2024 07:28:39 +0000
ROA not before:           Wed 05 Jun 2024 07:28:39 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     0
IP address blocks:        101.203.78.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Jun  5 07:28:39 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=6E2448EDA30D85883C046A8900BCC8A11ED98A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b9:4e:56:70:68:e7:3e:0e:66:60:da:d6:07:
                    78:3b:77:6f:d5:22:9f:19:eb:b7:25:40:33:9c:6c:
                    f0:da:02:1c:5b:bb:d0:56:da:17:3e:04:36:60:c8:
                    77:6a:eb:ec:7c:92:7e:c6:11:ec:ad:e5:91:99:94:
                    f4:a2:72:97:22:36:47:de:3d:cf:84:dc:72:97:56:
                    14:a3:65:38:15:d4:39:d4:e0:29:b1:a8:05:04:6f:
                    5f:a2:85:a8:04:04:9b:eb:e8:5e:cf:87:a7:42:3a:
                    62:8a:ab:33:9f:ab:ff:a9:99:72:cd:5c:a4:54:db:
                    46:d9:d0:21:4b:d1:77:00:0c:0c:19:e5:a8:a2:71:
                    34:28:55:28:bb:b1:5a:a0:0f:e4:2e:3c:3a:ed:51:
                    27:ce:2f:bc:04:6b:18:bb:80:92:e0:01:6d:a6:b1:
                    d6:b4:61:01:a4:9d:5c:12:58:ef:10:27:8b:85:af:
                    5a:a2:d4:ac:60:dc:49:50:8c:93:80:ef:05:71:fc:
                    da:be:1f:83:58:52:1e:39:8f:00:a3:ed:70:77:57:
                    10:c3:33:cf:e8:99:71:40:8e:aa:0d:86:3f:90:3a:
                    94:07:51:60:1c:81:ad:a7:01:c2:00:8f:37:f5:35:
                    2f:44:ea:db:6e:0b:67:3e:05:69:3f:43:e8:1f:5a:
                    5f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:24:48:ED:A3:0D:85:88:3C:04:6A:89:00:BC:C8:A1:1E:D9:8A:5A
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/biRI7aMNhYg8BGqJALzIoR7Zilo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:2c:80:f2:dd:11:69:2e:0d:f3:3c:79:34:cc:dc:48:fb:62:
         f3:e5:78:b2:9b:65:36:cc:58:0a:3d:0a:44:be:d2:4b:98:9a:
         ef:54:7e:6b:d0:8f:a5:12:17:39:a2:be:c8:3e:37:a8:15:d5:
         4c:5a:ff:a3:4e:af:f5:29:44:7f:e6:3e:5b:f7:3c:ef:ad:1b:
         b1:b2:a5:eb:c4:c3:65:17:b8:00:42:04:c9:93:f5:19:5a:e5:
         5e:73:7b:50:e0:e2:df:6c:25:ca:06:f3:6e:bd:24:0c:90:55:
         75:e7:ae:50:66:88:ba:4d:98:60:a4:45:29:0d:3a:db:89:84:
         40:0c:bc:09:f8:db:66:2a:fc:75:ec:21:09:3e:5f:3c:fe:bd:
         9e:e3:99:a8:09:78:6f:39:71:6f:45:96:9a:62:0a:a4:f6:dc:
         d1:6e:cb:ef:c8:1f:ab:d2:9e:09:83:ce:9c:8e:f3:53:92:2b:
         71:c0:5d:cf:cc:fd:98:d6:4e:5f:46:0f:76:64:1e:43:52:aa:
         f3:2d:6e:e7:07:fa:b4:ba:8e:68:a2:4c:38:92:fb:6a:16:96:
         f6:ae:38:49:44:08:ae:ef:32:fd:fb:d4:65:ba:59:6d:f0:f2:
         1e:05:23:3e:ee:73:5d:45:29:da:6a:3f:fb:9a:c7:72:3c:7c:
         62:bc:0c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:11 2024 by rpki-client on console-ams.rpki-client.org