Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/718/_zqmfBPYq-MMKs1dyg0uID4EWNo.roa
File:                     _zqmfBPYq-MMKs1dyg0uID4EWNo.roa (raw, json)
Hash identifier:          eJU8O5gQULDfdssBi678GqTPnwX1kZ91dH+kgtuChMQ=
Subject key identifier:   FF:3A:A6:7C:13:D8:AB:E3:0C:2A:CD:5D:CA:0D:2E:20:3E:04:58:DA
Certificate issuer:       /CN=70124EAB896039E137736AA7022F934D797F5684
Certificate serial:       34
Authority key identifier: 70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/_zqmfBPYq-MMKs1dyg0uID4EWNo.roa
Signing time:             Thu 31 Oct 2024 01:28:33 +0000
ROA not before:           Thu 31 Oct 2024 01:28:33 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     18094
IP address blocks:        103.15.92.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70124EAB896039E137736AA7022F934D797F5684
        Validity
            Not Before: Oct 31 01:28:33 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=FF3AA67C13D8ABE30C2ACD5DCA0D2E203E0458DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:02:72:78:b9:a0:0e:a3:00:f6:68:56:fd:
                    a0:ba:27:08:11:01:ba:c6:54:bc:7c:74:75:30:cc:
                    c7:25:45:ae:04:df:82:d3:01:19:dc:e8:b6:f4:84:
                    b5:f7:e4:ef:ad:9a:fe:a1:02:98:f7:f9:22:59:dc:
                    64:fa:b7:3a:4d:28:77:55:21:37:f9:dd:27:db:9e:
                    83:e0:b5:da:6a:fc:c7:16:6f:6c:83:a4:cc:ca:46:
                    00:d4:ac:70:ae:a5:72:cd:03:ab:83:88:a5:95:66:
                    5f:6c:46:09:0e:ed:ec:a1:94:4b:df:0d:22:81:ff:
                    ad:93:5c:2f:8c:12:42:e7:5a:f6:82:61:5f:7c:a3:
                    4f:7c:ad:e7:11:79:6c:30:45:0a:7e:7e:44:ed:40:
                    b3:bb:aa:ef:4e:53:80:3a:60:dd:50:ef:14:00:c3:
                    15:68:10:fe:6a:15:a0:bb:a4:e6:05:a8:e8:58:d7:
                    b9:28:d6:3c:ed:74:53:c4:c3:2f:86:54:47:4c:dc:
                    6e:88:e3:f7:96:d5:7f:30:42:1b:3f:e9:f8:82:5d:
                    12:60:72:e9:88:cf:07:6f:e4:44:61:a3:19:20:e8:
                    a7:01:06:85:eb:49:6b:ad:18:5f:f5:38:37:47:90:
                    3d:f7:41:4c:ba:b9:9c:c9:ef:05:b6:4e:9a:ba:24:
                    1e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3A:A6:7C:13:D8:AB:E3:0C:2A:CD:5D:CA:0D:2E:20:3E:04:58:DA
            X509v3 Authority Key Identifier:
                keyid:70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/_zqmfBPYq-MMKs1dyg0uID4EWNo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:50:49:b1:56:6b:4e:34:d8:60:cf:53:b6:35:2d:3d:9f:c1:
         5c:b3:b6:eb:94:71:e6:cb:2c:5d:55:cd:2a:18:fa:84:d8:2b:
         ee:9c:d5:ba:ce:7b:09:2b:5b:dc:19:4e:c4:28:6c:12:76:5b:
         10:30:c2:32:4a:af:33:df:fc:25:8f:e1:56:6a:cb:b2:e0:b4:
         f9:e5:1e:4a:17:ff:ca:fe:2e:d8:c2:d7:f7:6c:e9:25:18:ca:
         85:61:45:0f:ac:12:d4:d2:49:ae:a1:40:e4:1f:12:0d:27:dc:
         4e:30:1a:01:5b:60:5e:32:0a:e1:c0:e9:81:02:3d:9f:5b:d1:
         92:95:b0:03:b1:2c:b6:08:1c:84:93:8e:f8:52:26:d7:19:18:
         14:46:87:3a:60:56:6a:52:1e:78:d5:9d:2d:54:55:73:13:1c:
         7e:46:4d:23:16:a0:6b:f6:3a:a3:a9:39:ad:ce:ab:23:32:db:
         93:e1:7b:6b:92:4d:bb:ba:30:ff:66:08:70:32:09:39:cc:54:
         c9:61:83:28:c6:93:ab:5a:c3:ec:e1:6b:79:c0:0d:1b:27:29:
         d5:a0:b4:a1:60:13:a6:b9:b9:d2:cc:3c:48:30:f7:a4:37:9e:
         70:cf:7c:f7:09:c1:8b:bb:75:1a:d9:0e:60:22:bf:0f:c6:79:
         83:14:3c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:48 2024 by rpki-client on console-ams.rpki-client.org