Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/9ngKReDFfMmqguob9YvZfelS00U.roa
File:                     9ngKReDFfMmqguob9YvZfelS00U.roa (raw, json)
Hash identifier:          30SJ656w9sX73Xut5vFCuAgt1Fob1qXoqFx8L1bqzrM=
Subject key identifier:   F6:78:0A:45:E0:C5:7C:C9:AA:82:EA:1B:F5:8B:D9:7D:E9:52:D3:45
Certificate issuer:       /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial:       28
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/9ngKReDFfMmqguob9YvZfelS00U.roa
Signing time:             Thu 29 Feb 2024 01:34:29 +0000
ROA not before:           Thu 29 Feb 2024 01:34:29 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     23618
IP address blocks:        103.114.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
        Validity
            Not Before: Feb 29 01:34:29 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=F6780A45E0C57CC9AA82EA1BF58BD97DE952D345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:96:c9:b2:6d:fc:38:cb:0c:81:34:7e:1a:
                    86:c1:7f:ad:f2:1e:11:92:24:d9:ee:77:d7:8b:32:
                    f8:38:8b:c5:6b:5e:b8:15:7e:9a:b8:c2:1f:33:31:
                    de:46:0a:c0:98:3e:65:78:64:21:c3:91:3e:6c:26:
                    cb:29:88:8b:e3:82:a7:87:9c:22:b0:f3:8f:13:39:
                    f7:db:82:e7:09:99:79:9e:ac:96:a6:db:30:25:b2:
                    4a:85:a6:87:54:43:89:65:75:a6:bf:66:75:b3:2b:
                    a4:20:3f:62:02:38:77:fc:e2:70:95:2e:99:b7:e4:
                    d1:ab:7b:e9:8b:c6:80:61:40:b1:bd:0d:47:f6:60:
                    4e:c7:96:53:18:d9:df:9a:d2:91:6e:6d:ad:95:bc:
                    0d:c9:59:36:ce:55:d6:64:b0:cc:df:26:68:c2:48:
                    36:06:b3:df:54:08:a0:53:1e:8f:d2:32:7a:9c:c9:
                    02:58:fd:63:41:f0:9c:4f:51:a9:c4:8a:a5:71:c5:
                    f7:ec:b9:dd:dd:46:5f:84:d9:dd:f0:9d:bf:9d:56:
                    cb:2f:b3:e8:ac:74:bd:83:ae:2d:fb:aa:1e:3e:69:
                    00:bc:1f:3b:45:bf:76:46:0d:25:f1:62:1d:da:5f:
                    eb:58:bb:76:2e:c2:a0:50:8f:98:8f:3e:7f:56:78:
                    56:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:78:0A:45:E0:C5:7C:C9:AA:82:EA:1B:F5:8B:D9:7D:E9:52:D3:45
            X509v3 Authority Key Identifier:
                keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/9ngKReDFfMmqguob9YvZfelS00U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:5f:0c:62:f8:ba:cb:d7:2b:b7:e7:4e:91:52:15:f4:66:ca:
         91:10:86:38:34:1b:e1:68:ba:21:bb:b7:f9:83:f3:6f:50:45:
         21:b1:ab:5e:3f:79:11:08:d9:0f:70:88:76:df:ce:ad:9e:6d:
         61:fd:17:4c:58:cc:fc:8c:f0:cf:5b:a1:2b:f6:d5:aa:06:10:
         d9:15:67:fd:41:7b:bf:0f:1e:50:73:15:3a:59:9b:c8:9e:cb:
         2f:67:0e:af:15:d8:28:23:17:2a:fa:b9:f4:50:16:f8:fa:ac:
         44:86:dd:71:10:fb:a5:db:82:9b:97:56:67:dc:3f:8c:0c:10:
         a0:ef:75:bb:71:46:ec:ad:a2:42:ef:9c:13:99:37:82:5d:f2:
         24:07:6b:61:b1:1a:66:57:52:14:91:98:7b:33:eb:74:de:5b:
         30:3f:3d:70:d4:24:97:12:c5:02:6f:a4:89:c0:5d:fd:9e:4f:
         8d:77:67:e7:42:7f:8a:c9:c2:e2:51:5b:64:47:f3:4b:51:c7:
         8c:96:4c:a0:76:c4:e5:36:d8:67:fa:ba:53:ef:af:85:43:73:
         53:3e:27:73:e3:b6:f7:60:62:de:33:89:a5:7d:8e:d4:49:61:
         4e:cb:29:bf:99:dc:23:42:1c:c8:e5:c1:1a:c9:6e:a2:fc:8e:
         7f:33:c0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:44 2024 by rpki-client on console-ams.rpki-client.org