Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/n0teSIL-fjiFfZVWpy2dPq69X3U.roa
File:                     n0teSIL-fjiFfZVWpy2dPq69X3U.roa (raw, json)
Hash identifier:          I7g5qNxsAOp0NAc2Fq8lTVrz1CLsQ6QRrOh1qeEbgKI=
Subject key identifier:   9F:4B:5E:48:82:FE:7E:38:85:7D:95:56:A7:2D:9D:3E:AE:BD:5F:75
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       26
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/n0teSIL-fjiFfZVWpy2dPq69X3U.roa
Signing time:             Tue 30 Apr 2024 01:31:46 +0000
ROA not before:           Tue 30 Apr 2024 01:31:46 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     17958
IP address blocks:        103.2.96.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Apr 30 01:31:46 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=9F4B5E4882FE7E38857D9556A72D9D3EAEBD5F75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:41:47:e5:bd:82:79:43:ed:5b:f8:a8:ab:cd:
                    b0:d4:e4:91:83:74:2f:a0:6e:e4:ce:a7:c1:60:1c:
                    57:2e:90:5c:fe:c2:ab:b8:ba:b9:bf:5d:ce:4c:2e:
                    b2:03:6f:35:f7:c7:98:e9:c9:01:56:14:fd:1e:c5:
                    5d:a7:2c:f3:ab:38:d1:c0:2d:fe:14:38:31:f2:6f:
                    1c:43:85:4d:72:56:d0:8c:76:48:b0:4c:d6:e0:d1:
                    af:c7:4b:37:c9:0b:ed:b5:7f:43:d4:e0:5b:03:be:
                    a0:43:4b:d6:2b:b5:18:04:22:13:04:57:fa:97:40:
                    37:7c:81:e5:6c:df:ea:5e:95:30:d3:c6:62:6e:12:
                    93:78:f2:c2:3e:6d:28:99:b9:38:03:9d:6a:69:e0:
                    95:95:ef:03:59:4e:50:75:43:e2:b6:76:76:99:20:
                    4d:73:00:cb:20:87:75:d0:c9:69:cf:7d:47:88:9a:
                    58:bb:a5:0e:03:70:47:6a:28:05:f4:7b:c9:04:0a:
                    cb:be:32:76:02:fb:2a:86:53:79:b7:f6:6c:14:d0:
                    cd:39:32:c4:74:7d:80:31:35:56:3d:e5:58:eb:9f:
                    80:08:a5:6a:b8:fa:65:cf:97:a5:b3:e0:c8:b2:9a:
                    c6:b3:fe:e4:91:0d:8f:41:b7:28:e0:fd:87:cb:c7:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4B:5E:48:82:FE:7E:38:85:7D:95:56:A7:2D:9D:3E:AE:BD:5F:75
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/n0teSIL-fjiFfZVWpy2dPq69X3U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:3d:69:f9:5f:9f:02:e3:09:e2:5f:f6:6a:53:ee:f4:d8:01:
         be:72:d5:9e:02:9c:48:90:6c:73:77:15:3d:31:45:9b:01:52:
         50:58:fc:72:51:ab:f4:2f:5d:b7:50:82:77:99:03:de:77:ac:
         0a:a8:96:49:7f:64:64:f2:e8:20:fb:33:02:c6:5e:b2:01:52:
         c2:51:7c:56:23:3b:f0:2a:ec:62:6b:b2:86:7b:ec:6e:a2:2a:
         62:5b:71:88:e7:de:35:2f:1c:8b:e6:78:f0:42:42:a2:77:d5:
         18:52:6f:16:1d:23:07:e6:67:0b:77:c9:f0:da:79:a4:42:31:
         c6:4b:80:de:09:5d:9a:78:a1:56:a3:58:45:93:39:9f:4f:41:
         e3:93:78:b2:c4:e7:07:60:87:29:1c:d2:04:9f:ad:54:82:e8:
         95:f9:78:07:57:ea:fe:28:cf:01:fc:46:86:6b:fb:ec:cb:8d:
         98:17:e4:5f:61:a1:17:81:17:c3:7d:69:89:98:39:7a:a3:82:
         6b:1e:30:28:84:98:4b:40:aa:e5:2e:6a:e5:fa:7c:a8:75:4d:
         03:3d:56:41:04:0a:29:24:50:65:4c:3c:31:eb:c9:57:4a:6b:
         ed:3c:15:6e:de:02:49:8c:93:06:a0:42:0a:16:3f:dc:58:99:
         42:2e:b2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:06 2024 by rpki-client on console-fra.rpki-client.org