Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/598/gnBZipjwgwjwQtfgn5t-pRxz4xs.roa
File:                     gnBZipjwgwjwQtfgn5t-pRxz4xs.roa (raw, json)
Hash identifier:          TjKk714fm+NCD6pJ34fIHtFAkEXN9wDty/k4e+VbBi0=
Subject key identifier:   82:70:59:8A:98:F0:83:08:F0:42:D7:E0:9F:9B:7E:A5:1C:73:E3:1B
Certificate issuer:       /CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
Certificate serial:       5C
Authority key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/gnBZipjwgwjwQtfgn5t-pRxz4xs.roa
Signing time:             Thu 29 Feb 2024 01:29:32 +0000
ROA not before:           Thu 29 Feb 2024 01:29:32 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     59105
IP address blocks:        103.202.216.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
        Validity
            Not Before: Feb 29 01:29:32 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=8270598A98F08308F042D7E09F9B7EA51C73E31B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:81:bf:1d:a2:77:9a:f9:a5:d5:3e:ff:62:
                    62:95:13:e9:e1:ed:da:c2:14:a2:69:41:e0:b4:e3:
                    ab:66:59:25:50:df:08:21:fb:b7:ec:0d:36:6f:2f:
                    1c:1a:a9:9c:8f:ef:55:cc:79:cd:e1:3c:f3:76:c6:
                    5f:c3:7d:a0:9b:fe:b9:8f:38:86:75:f2:d1:94:c9:
                    90:c5:20:1e:74:85:ca:c9:53:80:66:81:e0:14:f9:
                    90:43:22:00:71:8a:4e:10:78:c6:2b:1b:64:6f:6e:
                    ad:85:72:47:5f:6d:99:6f:ab:59:1b:13:82:eb:b4:
                    e0:7c:76:73:fd:6c:56:59:86:da:ff:06:b0:61:9d:
                    f7:e4:c1:15:ae:5d:56:f6:33:37:c3:54:a3:0f:72:
                    75:06:b0:88:6f:68:8a:65:24:ec:b9:04:af:a9:99:
                    a9:53:34:b7:7b:8b:e5:7d:03:36:4f:8d:4a:af:f9:
                    33:af:88:d9:b0:cb:54:c2:51:6c:da:93:2e:67:a6:
                    f5:01:5c:b9:6e:d9:4b:11:90:b3:1d:a8:48:a0:48:
                    c4:b1:1f:75:fc:85:0d:8e:a8:62:97:5b:be:ea:65:
                    cf:53:5b:8c:ad:2a:5b:1f:54:d5:e2:32:05:2c:5f:
                    69:78:ef:e2:5a:32:2e:8b:d2:2b:eb:40:ad:6b:c8:
                    38:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:70:59:8A:98:F0:83:08:F0:42:D7:E0:9F:9B:7E:A5:1C:73:E3:1B
            X509v3 Authority Key Identifier:
                keyid:C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/gnBZipjwgwjwQtfgn5t-pRxz4xs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:6b:c9:ab:55:f0:7a:7e:97:63:cc:17:6d:68:83:bf:ba:3d:
         78:7d:2c:c4:27:39:dd:ba:b8:4d:15:45:36:fd:72:ec:ea:31:
         53:f6:50:ab:52:4d:c9:e1:cc:6e:d9:43:94:eb:fb:97:fb:fc:
         0e:d1:01:92:6b:44:dd:0c:22:0a:f3:5b:e3:1d:b6:75:31:bb:
         5d:a6:93:4d:5f:69:6c:f5:8a:76:c8:7a:ef:4f:a3:e0:6f:99:
         54:3d:6c:67:31:d7:70:18:47:ed:49:1b:3f:5b:ee:9e:e7:64:
         a7:aa:d0:24:6b:8c:ee:78:91:36:39:59:69:f5:f0:39:bc:75:
         de:ed:ba:3d:cb:bf:33:e6:a0:49:44:4e:65:e7:dc:c1:b8:8c:
         91:41:e8:4e:dd:bb:6b:af:7c:08:8d:7a:bc:20:b8:b3:b1:19:
         b3:f7:cf:ac:cd:03:1d:34:95:0a:f6:8d:03:82:60:65:7b:41:
         b7:77:58:bb:75:76:33:7a:8a:6f:cb:f9:a6:3e:fd:0a:fa:61:
         cc:c8:24:c3:bb:cf:0e:50:b9:fb:23:67:a8:a8:c6:36:b0:b8:
         21:c2:df:83:9a:81:ef:46:bf:3f:19:ee:a4:56:cc:4e:de:71:
         84:cb:cd:8e:95:cb:8d:84:9a:c6:ab:79:5c:b3:c8:c0:d5:9e:
         2e:0b:d9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:51 2024 by rpki-client on console-fra.rpki-client.org