Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/GYFg0vPf5vlfwafPiEL8SokgHgw.roa
File:                     GYFg0vPf5vlfwafPiEL8SokgHgw.roa (raw, json)
Hash identifier:          l3MD/zOS4wYuHVuUDRPZvAoDPJ3eQqiNi9H566ygsMQ=
Subject key identifier:   19:81:60:D2:F3:DF:E6:F9:5F:C1:A7:CF:88:42:FC:4A:89:20:1E:0C
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       02
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/GYFg0vPf5vlfwafPiEL8SokgHgw.roa
Signing time:             Sat 19 Aug 2023 05:20:48 +0000
ROA not before:           Sat 19 Aug 2023 05:20:48 +0000
ROA not after:            Sun 18 Aug 2024 03:04:44 +0000
asID:                     17682
IP address blocks:        103.198.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Aug 19 05:20:48 2023 GMT
            Not After : Aug 18 03:04:44 2024 GMT
        Subject: CN=198160D2F3DFE6F95FC1A7CF8842FC4A89201E0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:08:4a:c4:99:06:e7:70:50:36:fd:16:94:
                    fa:29:ac:af:f6:11:85:de:49:a8:0a:a3:8d:5e:b2:
                    72:b4:82:43:63:c7:70:f6:ac:10:99:7f:73:15:35:
                    76:d4:18:33:79:95:91:a1:4d:ab:52:e1:39:5d:7e:
                    bc:72:c7:65:f8:28:81:a4:2a:05:3d:93:1c:dd:0e:
                    29:2b:c9:31:09:1a:75:a1:6e:b9:02:09:15:70:2d:
                    af:2b:db:28:ec:11:e0:c1:10:2f:64:af:41:71:35:
                    df:63:69:a5:5c:c6:0b:f9:67:d9:77:52:4f:12:41:
                    ab:c5:d5:27:c4:3f:26:cc:dc:0f:5e:fa:47:8b:0f:
                    6d:e9:3f:73:ed:47:cf:ba:df:d9:04:29:c0:5f:62:
                    46:42:dc:ed:56:10:26:51:d0:01:17:d0:29:91:10:
                    bd:02:f2:0d:21:b9:cf:ae:56:1c:89:8a:bc:e5:dc:
                    ea:3f:2e:05:e3:25:b8:58:7a:6f:37:b0:ba:25:ff:
                    8a:eb:43:f5:69:ab:20:6c:0d:b3:b2:53:68:6b:d4:
                    51:97:03:58:b9:ef:67:6c:33:19:b3:cd:bc:a7:e9:
                    56:d9:9a:18:18:3d:8e:c2:fd:05:4a:1f:bc:6f:51:
                    d5:c3:35:03:79:05:75:9e:b5:a7:89:b6:cd:08:3f:
                    af:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:81:60:D2:F3:DF:E6:F9:5F:C1:A7:CF:88:42:FC:4A:89:20:1E:0C
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/GYFg0vPf5vlfwafPiEL8SokgHgw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:43:7e:01:98:b4:a1:15:61:1a:34:0c:be:b1:94:5b:5c:37:
         b0:88:43:a2:63:3a:7b:dc:6f:94:26:e6:1c:b9:ee:6e:cd:f3:
         57:ee:94:8b:2a:11:c1:5d:87:34:82:eb:47:10:29:fa:b0:17:
         e0:dd:fc:3f:0d:ef:89:63:d6:a1:dd:94:f2:30:27:13:c3:6a:
         d3:f8:8a:3a:06:fb:a7:b5:c9:63:2b:ec:da:34:42:7c:10:e0:
         cb:eb:35:84:fe:55:89:9c:4a:be:cc:ca:e7:fd:d8:1a:61:be:
         f8:cb:6d:cd:c2:2a:00:40:ca:a0:75:3a:2c:c9:92:ea:9d:cd:
         9a:9e:3f:ef:29:95:d6:67:c5:ae:2b:c2:58:ac:e4:cc:b0:49:
         e0:ba:82:1f:58:d4:42:e4:d0:23:c7:27:55:51:50:79:67:e3:
         be:31:9d:df:32:17:82:5b:6d:72:38:50:39:fd:df:c3:12:d9:
         b2:3c:1d:91:95:a6:b7:0f:cc:6d:0e:bb:ff:90:dd:bb:b9:49:
         e6:d3:88:20:1e:32:f8:e1:ce:51:db:e8:ce:64:43:ee:06:85:
         95:bf:5e:5a:2c:f8:a1:fd:6f:e8:37:c5:84:a0:ad:fb:06:4d:
         a2:bf:8b:45:4c:06:d3:c7:c9:ea:c3:67:bf:ca:d0:7b:85:ad:
         d6:ac:08:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:51 2024 by rpki-client on console-ams.rpki-client.org