Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/EScpKurQvcymMxK1oLUrK5tUTsM.roa
File:                     EScpKurQvcymMxK1oLUrK5tUTsM.roa (raw, json)
Hash identifier:          UHhJ8eRCvGTe7TSHGjMpGHDE5d3SCC+WgKCmGEV2CHA=
Subject key identifier:   11:27:29:2A:EA:D0:BD:CC:A6:33:12:B5:A0:B5:2B:2B:9B:54:4E:C3
Certificate issuer:       /CN=7B49A8775994827975AB37E6DF96064C924783F1
Certificate serial:       04
Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/EScpKurQvcymMxK1oLUrK5tUTsM.roa
Signing time:             Fri 12 Apr 2024 06:15:33 +0000
ROA not before:           Fri 12 Apr 2024 06:15:33 +0000
ROA not after:            Sat 12 Apr 2025 05:59:48 +0000
asID:                     18129
IP address blocks:        103.154.6.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1
        Validity
            Not Before: Apr 12 06:15:33 2024 GMT
            Not After : Apr 12 05:59:48 2025 GMT
        Subject: CN=1127292AEAD0BDCCA63312B5A0B52B2B9B544EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:73:46:13:2d:40:74:4e:2f:93:6e:a4:d3:e6:
                    67:d7:f7:62:1b:9f:61:33:eb:47:7d:94:12:96:41:
                    45:6d:8e:49:fb:92:2b:26:51:c5:f7:e1:0f:ab:29:
                    64:09:82:0d:3f:b2:2e:90:cd:7b:07:ab:7b:3a:6a:
                    63:26:14:d6:af:fd:12:c1:95:33:b9:6d:d6:9a:fc:
                    5b:24:fb:b4:0d:0d:c7:49:95:5b:fe:28:fd:24:96:
                    6a:e4:22:fb:84:30:3e:1f:ce:c0:f4:df:fe:b8:c7:
                    8b:36:42:37:c2:8d:b8:d4:92:e2:a8:10:87:d8:1d:
                    c5:23:fc:eb:04:c5:3b:54:46:2e:06:03:f5:bd:7f:
                    cc:92:a9:c5:7e:85:dd:d0:4c:d0:c8:b6:16:b5:f5:
                    10:f8:2d:be:e2:b4:d5:6c:7a:8f:8c:07:14:15:2f:
                    fa:13:22:95:cd:71:91:52:4f:1c:9c:17:50:c5:5c:
                    8f:a6:7c:ce:37:60:dd:71:6c:6b:57:b2:eb:2b:47:
                    43:27:8f:3b:e1:79:fe:9b:29:71:1a:76:25:95:8d:
                    15:da:b7:32:3e:1b:1a:f7:ff:b0:8e:86:80:9e:ba:
                    e7:57:36:e9:2d:1f:34:76:4b:37:aa:0d:c7:c7:a1:
                    dc:62:99:45:a4:c1:c9:c0:7d:4c:3b:0d:d0:5c:10:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:27:29:2A:EA:D0:BD:CC:A6:33:12:B5:A0:B5:2B:2B:9B:54:4E:C3
            X509v3 Authority Key Identifier:
                keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/EScpKurQvcymMxK1oLUrK5tUTsM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:51:1f:67:6c:65:17:4b:6b:4d:78:ba:16:17:9c:4a:54:a5:
         fb:a2:e3:fd:e7:be:a0:60:36:65:55:55:4d:74:1a:95:e1:40:
         0f:a2:51:5a:67:e2:1d:35:cf:97:9c:8d:66:75:83:8c:87:d4:
         c8:07:c4:75:66:ea:d9:01:38:53:d7:20:9a:78:80:2b:ed:4b:
         af:fe:32:e2:b2:cb:0c:50:5f:8d:7c:e9:37:9b:22:82:06:30:
         d5:b6:22:04:cd:36:97:48:8f:91:37:9f:84:42:b9:2d:3c:91:
         46:1c:96:67:e1:7e:22:05:41:1a:f9:31:f0:f1:16:20:e1:69:
         2d:c5:57:41:aa:14:5b:f7:8d:49:f3:72:45:25:87:24:42:1d:
         86:58:d9:c9:59:50:98:e2:18:d1:cc:a8:3f:b7:de:bc:97:be:
         79:49:56:d0:d6:8c:3e:7c:a3:e2:0a:96:e3:81:4d:6b:5b:31:
         d2:be:8a:3f:c6:d3:d2:83:45:d6:b5:88:7d:46:3e:04:58:fa:
         ce:0a:17:76:35:e9:0a:91:4e:58:fa:f4:67:29:63:61:2d:c9:
         1c:e2:40:11:7f:9f:f0:70:c3:be:95:8e:dd:95:03:d8:e6:d7:
         c9:f5:5c:d4:2a:a5:1e:81:0d:e4:ac:b1:50:96:f6:50:09:a7:
         eb:6f:6c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:17 2024 by rpki-client on console-fra.rpki-client.org