Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/598/YOnSXVUUKj2ib5UuG0ul4q7UNRw.roa
File:                     YOnSXVUUKj2ib5UuG0ul4q7UNRw.roa (raw, json)
Hash identifier:          rQvMwaWGDXZE19UHt6A2n2IXcy4LyiU9SsNlwMW87Zc=
Subject key identifier:   60:E9:D2:5D:55:14:2A:3D:A2:6F:95:2E:1B:4B:A5:E2:AE:D4:35:1C
Certificate issuer:       /CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
Certificate serial:       5E
Authority key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/YOnSXVUUKj2ib5UuG0ul4q7UNRw.roa
Signing time:             Thu 29 Feb 2024 01:29:33 +0000
ROA not before:           Thu 29 Feb 2024 01:29:33 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     59105
IP address blocks:        103.48.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
        Validity
            Not Before: Feb 29 01:29:33 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=60E9D25D55142A3DA26F952E1B4BA5E2AED4351C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:83:b3:c2:05:e2:28:5f:79:f4:2b:ef:e0:cf:
                    a0:ef:38:66:76:b5:80:fd:bb:ca:9e:7e:92:77:86:
                    e4:61:ea:47:f2:2a:0e:07:21:f9:5f:f9:81:7c:5d:
                    1e:8a:99:f6:1c:63:57:03:b0:04:28:a8:0d:83:5c:
                    73:16:b4:21:6f:f5:54:fd:31:3c:ae:f4:50:71:a6:
                    04:97:d8:a2:a6:14:cf:65:3d:3d:b6:9b:e1:85:ae:
                    52:98:c7:f6:1d:93:b5:50:24:45:70:93:9f:6c:f3:
                    fb:26:7e:8b:20:92:c9:45:0b:40:43:f1:1d:a8:75:
                    88:ca:0b:02:dd:06:90:73:ef:df:9e:13:d8:94:f1:
                    4b:e4:78:14:62:e9:59:58:28:06:8d:19:a2:78:4b:
                    03:ad:61:8b:f7:7b:dd:0b:41:0b:a9:48:f0:2a:59:
                    25:f8:ab:4f:15:6c:5d:cf:8f:52:b2:43:b7:a6:b1:
                    f3:b6:7e:3d:3b:58:fd:fd:8b:2b:de:3b:18:6a:bb:
                    f2:f0:be:0a:d6:6b:ec:95:26:6b:1c:8c:36:25:19:
                    04:01:5c:a8:23:10:75:8d:1e:54:cc:cc:b0:5e:b2:
                    6d:6a:c7:9a:e2:60:86:1d:15:b2:ad:3f:ca:18:40:
                    51:2c:e0:c4:b9:a9:d0:f0:db:c2:da:a1:00:b6:38:
                    38:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E9:D2:5D:55:14:2A:3D:A2:6F:95:2E:1B:4B:A5:E2:AE:D4:35:1C
            X509v3 Authority Key Identifier:
                keyid:C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/YOnSXVUUKj2ib5UuG0ul4q7UNRw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:dd:e7:20:e2:42:2f:67:e5:12:65:6c:6b:e8:d5:8e:9b:50:
         8f:73:1e:8b:56:ed:8d:bf:05:27:42:d6:b0:88:ac:2b:13:f3:
         52:cb:0d:6b:0a:04:b3:35:ed:91:9a:0d:3f:12:79:c1:ae:60:
         21:6e:f5:fb:62:12:67:f7:09:e7:c1:6b:02:25:98:cf:22:1b:
         bf:e1:7a:5a:a6:35:35:6c:df:fc:79:fc:61:54:74:40:dd:a7:
         b7:58:fe:44:60:94:61:13:1b:b6:e5:c9:1f:9a:54:22:22:f6:
         7f:fe:dd:3f:aa:65:2c:14:fb:53:91:b9:c5:f0:13:58:6d:88:
         c9:12:a7:af:04:1d:ac:d3:1d:71:9d:ef:4b:c9:2b:08:ed:ed:
         7f:d4:a6:0c:13:ac:dc:b8:05:f8:59:d2:17:23:06:d5:79:db:
         1e:32:1c:20:21:c8:5d:b3:ed:95:07:b1:6e:3c:5c:bb:6b:4a:
         00:53:ae:b9:1f:48:1d:c9:27:3f:f1:8a:31:4d:ee:85:0a:42:
         94:85:04:05:fb:59:a2:47:8d:03:16:b8:29:b4:42:e2:50:6e:
         8f:f8:68:12:3d:a8:89:6a:07:16:af:40:c0:59:7e:32:04:14:
         32:66:f4:6d:b0:da:74:1a:1e:6b:e2:6a:4e:6d:7f:ea:fe:70:
         78:cf:a7:8a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMkZE
RjkwQTk5NkYwQTMwRDMxRTkwOUM3MkJFMDU2REQ0NEEwNkU0MB4XDTI0MDIyOTAx
MjkzM1oXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoNjBFOUQyNUQ1NTE0MkEz
REEyNkY5NTJFMUI0QkE1RTJBRUQ0MzUxQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANODs8IF4ihfefQr7+DPoO84Zna1gP27yp5+kneG5GHqR/IqDgch
+V/5gXxdHoqZ9hxjVwOwBCioDYNccxa0IW/1VP0xPK70UHGmBJfYoqYUz2U9Pbab
4YWuUpjH9h2TtVAkRXCTn2zz+yZ+iyCSyUULQEPxHah1iMoLAt0GkHPv354T2JTx
S+R4FGLpWVgoBo0ZonhLA61hi/d73QtBC6lI8CpZJfirTxVsXc+PUrJDt6ax87Z+
PTtY/f2LK947GGq78vC+CtZr7JUmaxyMNiUZBAFcqCMQdY0eVMzMsF6ybWrHmuJg
hh0Vsq0/yhhAUSzgxLmp0PDbwtqhALY4OIECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRg6dJdVRQqPaJvlS4bS6XirtQ1HDAfBgNVHSMEGDAWgBTC/fkKmW8KMNMekJxy
vgVt1EoG5DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTk4L3d2MzVDcGx2Q2pEVEhwQ2NjcjRGYmRSS0J1US5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3d2MzVDcGx2Q2pEVEhwQ2NjcjRGYmRS
S0J1US5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81OTgvWU9uU1hWVVVLajJpYjVVdUcwdWw0cTdVTlJ3LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGcwHzANBgkqhkiG9w0BAQsFAAOCAQEAYt3nIOJCL2flEmVsa+jVjptQj3Me
i1btjb8FJ0LWsIisKxPzUssNawoEszXtkZoNPxJ5wa5gIW71+2ISZ/cJ58FrAiWY
zyIbv+F6WqY1NWzf/Hn8YVR0QN2nt1j+RGCUYRMbtuXJH5pUIiL2f/7dP6plLBT7
U5G5xfATWG2IyRKnrwQdrNMdcZ3vS8krCO3tf9SmDBOs3LgF+FnSFyMG1XnbHjIc
ICHIXbPtlQexbjxcu2tKAFOuuR9IHcknP/GKMU3uhQpClIUEBftZokeNAxa4KbRC
4lBuj/hoEj2oiWoHFq9AwFl+MgQUMmb0bbDadBoea+JqTm1/6v5weM+nig==
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:51 2024 by rpki-client on console-fra.rpki-client.org