Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/598/uE-9YAcCqUyLy3hA0D8PVCSUw2I.roa
File:                     uE-9YAcCqUyLy3hA0D8PVCSUw2I.roa (raw, json)
Hash identifier:          fsobA/qoBCKGGDpEwCIquUJ642NpX0fpPQ9DpaCp0ng=
Subject key identifier:   B8:4F:BD:60:07:02:A9:4C:8B:CB:78:40:D0:3F:0F:54:24:94:C3:62
Certificate issuer:       /CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
Certificate serial:       6F
Authority key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/uE-9YAcCqUyLy3hA0D8PVCSUw2I.roa
Signing time:             Fri 31 Jan 2025 01:30:58 +0000
ROA not before:           Fri 31 Jan 2025 01:30:58 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     59105
IP address blocks:        103.247.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Feb 2025 20:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
        Validity
            Not Before: Jan 31 01:30:58 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=B84FBD600702A94C8BCB7840D03F0F542494C362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:84:14:1c:b7:ee:b5:db:bb:fd:55:7d:9c:
                    cc:66:b9:58:b6:cc:6e:80:be:6f:4e:2a:81:c5:f5:
                    d3:f9:f4:1a:4f:42:05:5a:c3:42:05:c6:0d:95:30:
                    70:d0:65:20:a4:2f:47:08:2a:07:08:79:fd:af:44:
                    1f:c5:00:82:1c:3c:95:64:db:86:3b:09:95:18:a8:
                    84:c1:18:5c:18:68:19:c2:ce:b0:10:f6:66:21:64:
                    d6:67:09:c2:52:21:92:3b:84:b8:51:3f:ee:18:98:
                    3a:77:25:d5:60:20:4a:88:c5:fa:6b:2e:10:78:ca:
                    0e:43:bf:ae:36:b1:f2:65:0d:5e:95:bc:f5:2d:b4:
                    b7:0a:35:3e:14:fe:da:9a:20:33:01:1f:08:0e:af:
                    00:fd:b6:72:de:80:b6:cb:23:ce:79:9a:54:f3:0e:
                    4b:df:dc:05:10:29:55:22:c4:9f:0f:94:08:f0:a1:
                    54:aa:fe:79:97:25:cd:c5:c9:c1:04:c5:62:82:8d:
                    06:26:b3:f9:13:cc:50:bf:eb:c5:55:39:a8:c0:ae:
                    c6:f1:c6:d9:a7:1e:a2:fa:5c:91:8e:31:0b:57:74:
                    9b:0a:35:7c:1d:4a:4a:69:39:18:3e:a8:33:17:91:
                    fa:8e:11:d6:df:7b:94:64:0f:f2:39:a3:a5:24:01:
                    7e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4F:BD:60:07:02:A9:4C:8B:CB:78:40:D0:3F:0F:54:24:94:C3:62
            X509v3 Authority Key Identifier:
                keyid:C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/uE-9YAcCqUyLy3hA0D8PVCSUw2I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:7a:84:a4:ee:ad:b5:14:0f:22:8f:ac:a2:55:8c:fa:34:7d:
         49:3d:52:65:1c:6a:7e:57:09:b6:c5:ef:5c:1e:c7:26:f2:b6:
         b6:2c:ca:cf:8c:a2:95:3c:bc:0d:67:09:4b:79:fd:7f:ff:2e:
         7c:e6:f5:64:a4:56:19:7c:d5:cd:6b:7b:c0:95:4e:56:b8:8e:
         91:91:99:83:5a:8f:f8:77:25:33:70:89:45:b5:37:b3:1c:c7:
         38:3e:b9:26:f0:c9:2b:b9:bc:01:15:5b:51:1d:e3:ff:7b:2e:
         5c:1a:e8:16:6d:f9:c6:02:a2:3d:80:f4:b1:1b:8d:ff:7f:f2:
         c2:ee:bf:13:c8:f7:d0:7f:79:07:1a:42:e8:92:64:d7:23:79:
         b4:9c:4d:23:fa:47:b9:03:75:63:1d:61:83:53:bd:c3:79:d8:
         b2:ea:ee:4b:f9:65:41:ed:87:60:d3:a9:4e:ee:ce:1f:fc:ac:
         71:50:75:2e:dc:f5:a3:5c:ef:9f:43:79:b2:71:1c:78:15:ca:
         67:a6:29:63:83:54:d3:69:20:50:06:e8:39:d9:e8:ea:49:d8:
         4f:a6:92:f3:a4:79:88:15:ab:cb:01:5b:4c:dc:1b:eb:f2:6d:
         f5:ad:8a:1b:b1:15:8f:35:8f:6b:b3:8d:56:31:1d:46:40:d1:
         cf:1d:ba:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:50 2025 by rpki-client