Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/28oewyrMtKDOKinpl1FuUCan7Zk.roa
File:                     28oewyrMtKDOKinpl1FuUCan7Zk.roa (raw, json)
Hash identifier:          zymUqEs9YheBvWCnaHu1m4ejKBJSKmFRCahecTADtso=
Subject key identifier:   DB:CA:1E:C3:2A:CC:B4:A0:CE:2A:29:E9:97:51:6E:50:26:A7:ED:99
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0197
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/28oewyrMtKDOKinpl1FuUCan7Zk.roa
Signing time:             Thu 24 Oct 2024 04:43:01 +0000
ROA not before:           Thu 24 Oct 2024 04:43:01 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     4774
IP address blocks:        103.2.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct 24 04:43:01 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=DBCA1EC32ACCB4A0CE2A29E997516E5026A7ED99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:fa:e0:92:07:18:76:95:6a:97:63:c9:6e:
                    64:6c:a6:20:4a:f4:33:76:11:6f:b2:bd:0e:ce:02:
                    92:67:ef:8c:19:93:b2:b2:8c:6c:fc:5b:7d:ee:36:
                    a1:b7:0f:91:f4:60:d2:a3:3c:6f:12:b8:1c:be:32:
                    ad:95:76:44:e0:46:49:34:64:d1:90:13:ef:ed:43:
                    f5:8c:ea:f1:f2:62:3c:a4:f2:c6:3c:f0:13:cf:f6:
                    80:90:31:5e:24:90:81:d1:c9:c8:3b:9d:58:5d:95:
                    57:02:e0:81:5a:a2:df:81:d0:5f:fc:f5:ec:ec:99:
                    6b:3f:c0:61:c1:0f:ef:51:0f:55:87:35:7d:db:65:
                    3c:e8:dd:b8:a3:1e:c7:01:d9:4c:28:6a:37:b2:4d:
                    6c:8e:2b:c3:c1:e1:29:82:a8:ee:37:d8:28:fa:3e:
                    23:cd:82:e5:01:09:63:7e:9b:8c:0b:d5:19:f0:f5:
                    34:95:cc:8a:a2:27:ae:35:c8:9c:4d:43:a1:e0:e3:
                    77:de:1d:57:06:01:61:6a:47:8c:a7:6c:3f:36:f0:
                    ff:97:12:71:93:33:a2:b9:6b:b7:89:c9:4e:57:3d:
                    c7:0c:95:be:33:a0:2e:37:cb:85:28:47:6d:2d:37:
                    ac:a4:a5:80:6e:c8:07:af:19:e4:ee:46:e4:f1:d3:
                    05:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CA:1E:C3:2A:CC:B4:A0:CE:2A:29:E9:97:51:6E:50:26:A7:ED:99
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/28oewyrMtKDOKinpl1FuUCan7Zk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:51:0a:29:47:85:19:da:94:a7:a6:b6:bb:16:63:de:b8:f6:
         d8:db:1d:bb:02:7d:89:45:75:60:b5:4e:24:d8:93:74:1d:c3:
         34:3a:dc:24:ad:a6:6e:f2:ea:60:de:4b:9b:c5:9c:bb:a7:71:
         fa:7b:d2:5e:b4:18:27:16:bd:59:ea:97:07:51:31:a1:05:94:
         36:9a:3c:0f:3c:f5:11:a9:81:e9:86:3d:e1:04:62:f8:24:bd:
         d1:12:c2:b5:0a:82:ae:88:25:35:c3:4c:91:68:70:11:7b:f6:
         80:e2:8c:e3:a1:6b:a9:4a:9a:ff:29:3b:b0:1c:4a:12:05:31:
         27:b6:b3:18:18:cb:51:43:88:ff:09:7c:6d:26:d3:54:49:a6:
         fe:6f:b4:95:d0:23:a6:7f:ce:a2:2a:99:a5:41:2a:82:1f:af:
         6f:60:d8:fa:f8:7d:77:03:71:bb:99:8d:2d:a4:9b:11:46:c5:
         61:30:04:f3:f0:3e:bf:e9:7a:9f:4b:d3:51:81:ce:67:d4:51:
         25:43:f1:e6:f6:71:03:15:f4:3a:d9:76:bb:5a:51:44:29:56:
         50:ea:fe:57:88:38:65:f6:12:1a:bc:fe:58:d6:45:14:21:f7:
         56:20:2c:ae:d6:c5:08:9b:f2:f8:4a:74:54:ae:5c:dc:df:84:
         a1:31:44:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:30 2024 by rpki-client on console-ams.rpki-client.org