Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/RhOzihLW1cfSWqvne4gClQJNqTo.roa
File:                     RhOzihLW1cfSWqvne4gClQJNqTo.roa (raw, json)
Hash identifier:          URUwOPPqEA7SSGoe/JG8zZ8nwNwjCg+uxUagyspKEy0=
Subject key identifier:   46:13:B3:8A:12:D6:D5:C7:D2:5A:AB:E7:7B:88:02:95:02:4D:A9:3A
Certificate issuer:       /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial:       02
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/RhOzihLW1cfSWqvne4gClQJNqTo.roa
Signing time:             Mon 26 Feb 2024 08:10:59 +0000
ROA not before:           Mon 26 Feb 2024 08:10:59 +0000
ROA not after:            Sat 22 Feb 2025 06:48:19 +0000
asID:                     23831
IP address blocks:        103.235.112.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
        Validity
            Not Before: Feb 26 08:10:59 2024 GMT
            Not After : Feb 22 06:48:19 2025 GMT
        Subject: CN=4613B38A12D6D5C7D25AABE77B880295024DA93A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:35:7e:24:5b:b1:a8:fd:8b:ab:3f:a7:90:
                    37:58:a6:37:97:5b:94:6a:8d:49:00:bc:35:32:3e:
                    2d:74:9a:29:81:3a:f0:d2:9a:32:fa:c4:79:84:5b:
                    6e:37:76:79:75:41:79:48:ce:94:40:4a:e7:13:d1:
                    da:29:2c:fc:2f:f1:22:e1:a4:44:56:54:bf:ec:2d:
                    d3:2d:d5:3f:a7:a1:ed:69:31:06:0c:45:de:27:01:
                    ce:f2:46:63:86:db:9c:e9:b0:2b:27:eb:16:8e:4b:
                    d1:18:42:f2:e4:d5:63:a0:4b:37:de:71:d0:d1:e4:
                    21:ca:cc:91:b2:ab:2d:e1:cf:63:62:06:9b:c1:c6:
                    d1:79:b5:35:53:8c:33:3d:55:90:01:d3:6e:62:21:
                    b2:be:cc:8a:e1:8d:6a:78:be:06:e4:c9:30:02:05:
                    c7:96:c8:8f:17:47:d0:68:c2:94:72:81:06:ba:20:
                    d6:19:dc:f6:31:01:46:1d:f8:8b:01:05:22:1b:85:
                    0a:1b:72:32:5a:a2:12:ad:19:7c:3d:6f:ab:6f:a4:
                    71:d0:be:a0:2d:ab:66:0b:ce:4d:c2:30:a9:75:0d:
                    bf:28:34:33:a7:22:8b:6c:4d:60:ee:a6:3e:ae:6e:
                    5a:81:57:ee:22:9c:5e:d1:92:92:06:ee:37:37:68:
                    62:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:13:B3:8A:12:D6:D5:C7:D2:5A:AB:E7:7B:88:02:95:02:4D:A9:3A
            X509v3 Authority Key Identifier:
                keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/RhOzihLW1cfSWqvne4gClQJNqTo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:2a:22:25:2d:e6:1d:74:70:77:37:0f:44:96:ea:1c:40:c1:
         27:7c:85:80:99:01:c2:f5:c0:fc:e1:e5:9a:b1:34:20:9d:c8:
         4a:53:e8:89:90:c2:b2:79:8d:0d:32:e5:7f:40:95:99:5b:7d:
         a8:59:5d:53:95:d5:04:41:d3:95:ce:c6:eb:14:9c:2f:c4:84:
         4f:7b:57:1f:f2:b0:55:e6:99:b5:11:cb:70:09:15:d1:3e:b9:
         0a:d5:04:18:ba:cd:5b:3d:58:44:0a:bb:85:a5:4f:4b:cc:ac:
         c0:e1:28:9c:fd:74:50:78:c8:3f:38:2a:b1:ac:da:bc:b8:37:
         d0:3e:39:32:6a:cc:5e:bd:c7:49:99:df:3c:86:eb:9f:9a:7e:
         ab:dd:56:47:3f:36:c5:70:c4:aa:e4:61:d2:78:82:eb:0d:dd:
         9e:32:d1:8d:6d:9d:b4:4a:2c:c8:17:17:9e:88:73:74:67:b6:
         59:6d:1a:2a:4d:af:64:1a:31:42:06:28:9c:1d:49:ab:3e:d5:
         60:67:68:45:e3:bb:9e:c3:52:93:7d:53:95:bb:c5:7e:cb:aa:
         18:da:d8:b0:c9:c2:a6:da:1e:24:fa:d3:65:8e:72:f7:30:b3:
         c7:2a:6b:53:52:e1:f8:f3:e3:c0:eb:76:4e:55:13:bc:b2:a6:
         5f:75:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:58 2024 by rpki-client on console-ams.rpki-client.org