Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/r_srQtU1P_yJLwPTnA2DQXJnUlY.roa
File:                     r_srQtU1P_yJLwPTnA2DQXJnUlY.roa (raw, json)
Hash identifier:          5lC4phFGKyqW1l2AQzOBSfuQnQoe7DFuC79u2AWvqns=
Subject key identifier:   AF:FB:2B:42:D5:35:3F:FC:89:2F:03:D3:9C:0D:83:41:72:67:52:56
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       1C
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/r_srQtU1P_yJLwPTnA2DQXJnUlY.roa
Signing time:             Sun 31 Mar 2024 01:33:03 +0000
ROA not before:           Sun 31 Mar 2024 01:33:03 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     59127
IP address blocks:        101.203.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Mar 31 01:33:03 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=AFFB2B42D5353FFC892F03D39C0D834172675256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:63:ff:c6:0c:3e:59:b3:d7:cd:87:8c:df:9f:
                    2c:8d:3e:19:45:8e:05:2e:50:86:04:cd:23:a1:e3:
                    36:2b:2c:ec:6c:f3:43:fe:36:2d:6d:34:d2:5d:21:
                    b0:72:3d:fc:9d:be:c4:ec:04:4e:c9:26:05:fe:a8:
                    f5:28:ba:ec:dd:ac:02:20:8a:f6:0e:58:6a:0e:36:
                    68:db:bb:54:c3:2b:81:0d:b2:11:ae:03:ea:91:64:
                    00:4e:51:2c:a4:eb:56:93:e2:58:77:68:25:08:26:
                    e4:3e:8b:16:77:50:9d:28:4b:90:2f:e1:c7:ce:61:
                    72:c9:7a:f9:c0:52:e0:31:4b:51:1d:92:02:41:40:
                    7d:eb:cd:07:0c:71:31:58:ee:f8:20:95:34:7e:0a:
                    01:26:e2:ca:c0:d9:22:63:8c:8f:cc:0c:1a:a0:45:
                    7d:dd:66:c3:70:9e:f4:b9:ac:17:5e:16:40:ec:93:
                    dc:4b:db:3c:0d:bb:cf:42:c0:75:36:62:25:3b:eb:
                    30:cc:f6:c5:83:a4:5e:1f:d8:0e:b7:93:e0:0c:3b:
                    fc:02:06:c7:8d:97:cc:27:49:04:8f:65:8f:de:46:
                    79:dd:ec:6c:5f:3e:24:0c:33:02:2a:6e:8f:b2:54:
                    54:99:72:40:31:e4:b1:0b:ff:60:e4:a6:80:14:f2:
                    f5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FB:2B:42:D5:35:3F:FC:89:2F:03:D3:9C:0D:83:41:72:67:52:56
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/r_srQtU1P_yJLwPTnA2DQXJnUlY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:37:09:a2:d6:f8:7d:ed:e3:4a:df:e6:e2:34:fb:d5:b9:39:
         b4:62:da:6a:79:0b:4c:cb:f9:7f:f9:04:1e:6d:b4:aa:b2:0b:
         a6:32:87:b8:70:8b:cc:35:29:18:80:0c:2c:f2:9f:47:62:9f:
         5a:c6:db:af:f5:ef:10:0c:89:b6:a9:0e:cb:eb:5a:78:27:d0:
         3e:53:b6:b8:82:ce:82:a2:28:7d:5a:dc:3b:58:b4:e5:bb:82:
         b4:c7:49:95:91:e2:dd:b3:30:ab:43:77:ce:81:61:c1:93:b1:
         7c:30:60:a3:0c:21:2e:86:41:74:8d:b4:5c:da:2c:e7:97:b9:
         fa:a7:d2:f9:aa:2e:28:e7:68:cc:46:41:7f:60:fb:ee:61:5e:
         34:fa:1b:a9:e3:20:bf:4b:7c:89:16:98:5b:11:58:bc:47:be:
         75:ff:d9:38:ab:32:b3:7b:85:34:2b:57:0a:6d:fe:48:f8:c2:
         ad:50:d6:04:86:b8:bc:33:39:41:0f:10:dc:25:8f:18:26:81:
         a2:08:c3:17:67:87:34:fc:e1:11:f4:71:08:0d:b0:9c:12:f3:
         eb:dd:02:47:18:58:f6:f2:32:af:a8:2e:ba:4e:c4:9e:89:dd:
         22:7f:e1:03:7b:b5:46:30:74:78:94:49:ba:a7:c7:8d:c9:cf:
         e6:41:ee:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:07 2024 by rpki-client on console-fra.rpki-client.org