Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/oI0zkYTkRS-dYRvIgXDc6NLsAYc.roa
File:                     oI0zkYTkRS-dYRvIgXDc6NLsAYc.roa (raw, json)
Hash identifier:          6XgBqAQkhd9S4S671lQlyOlmopjQKdjRR9UWAyeeftw=
Subject key identifier:   A0:8D:33:91:84:E4:45:2F:9D:61:1B:C8:81:70:DC:E8:D2:EC:01:87
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       39
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/oI0zkYTkRS-dYRvIgXDc6NLsAYc.roa
Signing time:             Wed 05 Jun 2024 07:24:45 +0000
ROA not before:           Wed 05 Jun 2024 07:24:45 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     0
IP address blocks:        101.203.74.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Jun  5 07:24:45 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=A08D339184E4452F9D611BC88170DCE8D2EC0187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:4f:59:d7:f2:2a:a3:7c:c4:7a:53:ed:b8:
                    cc:1a:5e:e3:8c:64:05:d4:b9:3c:6f:79:ca:db:ef:
                    87:4e:c6:ad:ff:1a:8b:e3:17:7b:8b:a8:f4:cf:c6:
                    53:40:0a:98:23:85:02:d3:bd:db:1e:10:30:d4:d3:
                    15:48:20:11:ce:aa:65:f4:74:71:2c:06:86:6f:0b:
                    92:c2:9a:6d:c4:54:df:ea:dd:46:1f:fe:56:f1:3d:
                    db:a3:42:d5:c9:55:e9:68:ce:db:e9:9c:c0:f2:18:
                    f9:19:ae:1a:b6:3f:97:f2:9b:1d:63:43:11:c2:33:
                    bb:c6:58:7c:b1:0f:0b:cd:18:2d:c3:7a:f9:67:47:
                    8e:8d:14:7a:4d:e0:38:ab:40:0b:98:f5:3b:17:7f:
                    5a:ec:6a:ad:03:a1:e5:6c:62:eb:05:e5:aa:f4:7d:
                    00:8c:a4:c2:c1:02:27:f1:13:79:44:b4:12:92:07:
                    aa:5f:24:06:df:32:96:80:bd:bc:50:ae:f4:9f:89:
                    c7:fd:b3:5c:5d:9e:c7:48:fb:56:5c:41:e9:5d:f8:
                    31:cb:6e:d0:94:12:f4:ba:3a:00:6f:86:9c:bf:64:
                    4a:35:a0:33:a8:43:db:b1:11:c9:70:0f:35:87:9c:
                    3b:a1:8a:f9:bb:5d:94:5d:48:73:f2:d6:4e:09:a7:
                    86:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8D:33:91:84:E4:45:2F:9D:61:1B:C8:81:70:DC:E8:D2:EC:01:87
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/oI0zkYTkRS-dYRvIgXDc6NLsAYc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:3a:22:d7:a0:23:3d:57:c5:54:74:89:7a:83:b0:c3:90:45:
         4f:e3:9b:b5:dc:bf:ef:5f:f4:86:aa:64:53:6b:60:f5:2e:2c:
         4d:a7:20:41:d5:c9:a8:77:49:a7:93:9b:db:c0:43:79:ec:d7:
         6f:c0:75:4b:f9:e8:ed:f4:4c:48:8a:20:ef:8d:8f:ee:eb:0c:
         4b:f2:13:79:65:6f:1a:04:b8:af:31:e1:9c:48:31:19:a6:ec:
         36:c8:e6:bc:da:5d:a0:5d:d7:01:fc:96:bb:0d:14:5c:62:59:
         90:02:10:cd:ee:ed:7c:16:df:17:0d:a8:2a:07:fc:20:1d:c7:
         a5:a9:30:63:c7:91:b5:58:0d:5c:fe:36:b8:20:0f:73:1f:cb:
         b7:a9:53:92:cb:fe:5d:b0:54:03:45:d0:40:b0:86:99:74:39:
         2e:45:a6:58:4f:ce:68:64:14:84:10:dc:df:c8:f2:53:f5:2a:
         00:16:3e:fb:4f:d7:4e:d5:fe:f0:4e:a0:c9:40:2f:98:31:f0:
         e0:6d:08:dc:ac:41:32:fc:ba:5a:ac:b3:a7:dc:80:d5:be:55:
         14:0f:fa:40:2c:90:a5:a3:67:cd:b8:e8:96:42:3a:83:41:14:
         50:50:d9:dc:29:d8:14:8e:3a:2d:20:52:dd:4f:9a:38:c7:c0:
         fe:56:1c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:46 2024 by rpki-client on console-fra.rpki-client.org