Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/598/7K0L5apKcxx13-l4HX98wQZVj_M.roa
File:                     7K0L5apKcxx13-l4HX98wQZVj_M.roa (raw, json)
Hash identifier:          j6V7UqPt35gc0X6V4XDfU9yw442SG12MZnHBmZ8syyE=
Subject key identifier:   EC:AD:0B:E5:AA:4A:73:1C:75:DF:E9:78:1D:7F:7C:C1:06:55:8F:F3
Certificate issuer:       /CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
Certificate serial:       5D
Authority key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/7K0L5apKcxx13-l4HX98wQZVj_M.roa
Signing time:             Thu 29 Feb 2024 01:29:33 +0000
ROA not before:           Thu 29 Feb 2024 01:29:33 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     59105
IP address blocks:        103.247.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
        Validity
            Not Before: Feb 29 01:29:33 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=ECAD0BE5AA4A731C75DFE9781D7F7CC106558FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:48:59:7c:ec:e2:bd:c1:c5:9f:8a:04:7c:
                    68:29:e1:be:04:79:e5:95:7e:c1:7f:7c:3b:76:75:
                    58:58:98:08:e1:ee:1b:3a:13:8d:f5:5f:90:8c:b4:
                    40:db:a0:66:4e:47:32:c8:f4:4c:72:4a:57:6f:6d:
                    0d:e5:92:c6:7e:b1:ce:6d:0c:6c:cc:6e:01:64:02:
                    d7:b1:69:e2:28:d0:24:00:05:55:be:ec:bf:ff:6a:
                    09:39:ba:52:03:52:c9:a2:00:60:dc:39:ec:8c:28:
                    63:07:0a:64:9b:70:db:1d:73:47:90:39:37:43:ce:
                    d2:db:24:6c:7d:51:85:8a:74:e7:31:11:c2:82:cc:
                    82:22:8c:5e:e5:df:ad:7c:a6:b3:b6:7d:69:ab:bd:
                    6c:bf:f1:6e:2e:2c:03:04:d8:f6:7e:ee:65:a9:b6:
                    95:ec:72:16:71:2a:2e:d2:e2:07:45:ac:52:34:9c:
                    59:f4:94:02:b5:5e:2c:9d:47:43:c3:3b:ff:9b:26:
                    33:59:12:85:d3:37:bd:31:1f:21:6d:fd:ac:56:d2:
                    8a:d0:bc:72:93:06:ef:e8:71:37:44:bf:8e:93:09:
                    0d:69:97:17:23:02:08:09:0d:a1:8b:13:47:33:01:
                    85:97:7b:9a:bc:4f:0e:e0:e8:30:eb:76:7f:4f:10:
                    6d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AD:0B:E5:AA:4A:73:1C:75:DF:E9:78:1D:7F:7C:C1:06:55:8F:F3
            X509v3 Authority Key Identifier:
                keyid:C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/7K0L5apKcxx13-l4HX98wQZVj_M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:8e:53:1f:27:c8:90:3f:65:30:b5:b8:1b:d8:c4:5e:a4:af:
         2f:56:58:9f:27:43:bb:01:e7:0f:92:5c:39:fe:9b:e8:36:49:
         f8:d4:95:3d:9b:84:d0:c9:7c:f3:51:60:72:db:0c:4b:f7:ca:
         3f:dc:8e:f2:43:80:0b:f4:72:60:71:e6:de:c8:56:f7:69:50:
         7f:e1:c7:aa:b2:e4:d2:d0:19:6b:39:5c:3d:0c:64:9a:aa:6e:
         3c:57:aa:6b:62:80:c2:5b:60:f5:30:63:00:b7:c8:24:4f:1b:
         a2:48:c4:47:74:58:3c:61:45:c9:36:4e:e2:46:92:22:c6:66:
         51:91:a0:13:60:04:5d:1f:68:45:4c:c3:09:ac:63:5f:fd:ab:
         81:6f:19:23:13:b5:2c:07:db:26:fa:19:f5:c7:95:38:0f:33:
         b8:ed:4e:64:07:ec:82:3a:21:34:de:53:25:71:f3:40:8f:f1:
         6d:0b:58:19:32:cc:9e:16:ef:38:75:77:a5:a8:12:59:2d:e5:
         a7:77:21:2f:80:29:43:2b:59:a0:f3:ad:cb:9f:f3:44:06:e6:
         19:b6:60:65:be:aa:7d:67:d5:64:a5:13:18:ce:6e:26:ed:f2:
         64:c1:db:8c:57:ab:7c:b1:3a:d4:a2:5c:11:11:73:af:8a:3b:
         d5:00:6e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:46 2024 by rpki-client on console-ams.rpki-client.org