Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/kG3IccUKE7vV_0a_SfgM4uvarXE.roa
File:                     kG3IccUKE7vV_0a_SfgM4uvarXE.roa (raw, json)
Hash identifier:          10xrmBhYbe4jA9eYG5fgxZL3IqRdUFHdxUlFnsWNXb8=
Subject key identifier:   90:6D:C8:71:C5:0A:13:BB:D5:FF:46:BF:49:F8:0C:E2:EB:DA:AD:71
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0180
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/kG3IccUKE7vV_0a_SfgM4uvarXE.roa
Signing time:             Thu 22 Aug 2024 05:24:08 +0000
ROA not before:           Thu 22 Aug 2024 05:24:08 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     14618
IP address blocks:        103.2.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Aug 22 05:24:08 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=906DC871C50A13BBD5FF46BF49F80CE2EBDAAD71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:90:e6:fa:23:c8:1d:85:e1:37:ab:a7:da:50:
                    3e:1a:14:d8:f3:99:c4:01:75:69:6f:08:f3:be:1e:
                    8d:56:e3:89:2e:97:b5:b6:23:3e:d7:12:35:43:4a:
                    42:78:5a:dd:55:dc:23:3d:29:2b:2c:d3:23:6b:a8:
                    81:66:9d:07:c7:d4:33:b9:b1:01:23:b7:f8:17:78:
                    8e:88:09:56:cb:4c:39:76:85:f4:78:45:60:59:86:
                    09:56:43:f2:44:4a:d8:64:e9:f7:3a:5b:80:38:33:
                    a8:c4:2e:57:e7:75:12:43:06:4d:10:71:bf:0f:ad:
                    b8:bf:f9:0a:65:be:e2:72:c6:bc:94:9f:c5:46:da:
                    37:57:b3:8c:91:2f:c9:7d:40:fe:68:e5:d5:2e:71:
                    d9:a2:e2:ee:32:13:bf:be:42:8a:5d:28:54:97:75:
                    88:10:7f:bc:44:0c:d1:d2:59:fc:d8:c5:24:f8:a5:
                    4e:b8:04:57:ae:18:8c:ca:da:3e:af:e4:8f:10:6e:
                    dc:f6:d2:79:3f:b7:c0:d1:8c:69:3a:1a:df:f7:b3:
                    93:66:48:e5:0a:17:94:e3:b7:15:5e:a8:5f:33:62:
                    95:86:0f:76:b0:23:7d:60:25:17:bc:9c:80:5a:41:
                    50:fd:25:e8:37:3c:a1:1c:0b:b6:77:ed:40:32:00:
                    ab:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6D:C8:71:C5:0A:13:BB:D5:FF:46:BF:49:F8:0C:E2:EB:DA:AD:71
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/kG3IccUKE7vV_0a_SfgM4uvarXE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:7d:24:33:2f:3b:59:e5:6c:05:f3:da:78:f1:3d:04:f6:c2:
         01:37:47:90:fa:83:27:46:99:7d:9d:ee:6e:1c:f2:25:5c:20:
         84:e0:2c:30:db:81:c3:86:f5:99:77:2f:2b:03:19:19:7b:a4:
         0c:b3:33:df:08:10:70:c2:5d:53:70:c4:4a:00:7e:52:b5:d6:
         82:a2:2f:6f:a2:8e:ba:6b:24:1c:3d:cf:7c:e9:e8:92:f7:bb:
         e0:b6:91:77:fc:56:55:dc:05:84:11:04:21:e7:a8:21:0e:02:
         98:47:83:1f:9a:00:31:bd:f6:cb:f3:d6:26:ea:27:f3:bd:83:
         a1:d4:00:f8:bf:8c:5d:52:e9:ca:ca:fd:30:66:4c:ab:8a:f1:
         3e:5d:30:6f:1f:e1:75:0c:a3:7f:46:45:d8:2d:10:4a:c9:1d:
         57:9f:ce:3c:b5:3f:4b:d5:71:36:e4:fb:80:13:f0:b9:8b:c6:
         05:3e:e2:ed:31:4e:b7:be:78:5c:1c:c8:83:53:4d:2b:89:44:
         9c:88:86:ec:a6:87:71:25:46:be:3f:5c:58:bd:c7:31:97:81:
         93:64:d6:f1:b9:cf:2e:a2:02:6a:0b:4c:18:72:39:95:d4:ad:
         ce:f3:cb:bd:8e:02:fa:d4:cd:3e:55:72:6c:86:03:e1:13:1a:
         e3:50:52:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:30:53 2024 by rpki-client on console-ams.rpki-client.org