Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/vTvjC4EuKvQsxHhIlFowoV8CG8U.roa
File:                     vTvjC4EuKvQsxHhIlFowoV8CG8U.roa (raw, json)
Hash identifier:          e8epzosR9Ts3CLf+wqeCyLd5db0R1fqVLjnYXzqt8qo=
Subject key identifier:   BD:3B:E3:0B:81:2E:2A:F4:2C:C4:78:48:94:5A:30:A1:5F:02:1B:C5
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       2C
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/vTvjC4EuKvQsxHhIlFowoV8CG8U.roa
Signing time:             Fri 04 Oct 2024 07:00:32 +0000
ROA not before:           Fri 04 Oct 2024 07:00:32 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     59127
IP address blocks:        101.203.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Oct  4 07:00:32 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=BD3BE30B812E2AF42CC47848945A30A15F021BC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f9:90:79:9f:64:28:91:70:26:72:31:fe:f6:
                    6a:fd:3c:56:da:08:d1:9e:89:48:12:a1:f0:34:58:
                    4f:f6:c7:50:cd:fc:b6:c0:72:49:d2:27:b7:66:cd:
                    3a:33:e5:24:fe:35:f6:f9:09:a2:b0:a5:9c:1f:07:
                    f1:c7:b9:86:a7:dc:be:0f:10:6c:4a:bc:28:74:3a:
                    7f:c2:51:47:87:67:90:1a:87:67:4e:3c:f3:a5:3d:
                    e6:7c:31:fc:22:89:51:b9:68:ad:94:0e:0b:3d:35:
                    0e:75:11:e0:34:83:5a:73:23:14:70:86:79:13:b0:
                    0b:70:90:ad:fc:c9:45:e0:e7:75:34:4d:60:d8:59:
                    40:8e:e0:38:46:87:3c:df:b8:fd:1f:ad:f9:2d:84:
                    dd:c7:49:06:df:d7:f4:83:4d:c3:76:f7:8a:29:3f:
                    30:06:7d:10:45:b6:81:c8:d5:e6:47:5b:35:3e:00:
                    af:c0:d7:44:bf:30:21:cf:fd:6e:bd:c1:32:d6:fe:
                    5a:a4:b1:5b:87:29:97:95:83:50:4f:ef:1c:f7:be:
                    8d:cb:78:4c:f4:20:3e:48:09:a5:7e:bf:a4:25:07:
                    33:f5:1c:96:22:2a:10:71:9f:26:3b:2f:47:4c:f0:
                    aa:b3:1c:6a:b4:10:6b:3e:78:f9:54:20:8c:40:bf:
                    04:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3B:E3:0B:81:2E:2A:F4:2C:C4:78:48:94:5A:30:A1:5F:02:1B:C5
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/vTvjC4EuKvQsxHhIlFowoV8CG8U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d8:a2:02:b5:37:34:60:72:18:14:96:d2:0d:5c:12:34:5f:3b:
         b9:9c:6c:0b:61:e2:82:83:68:94:58:a7:7c:a0:7e:ac:e7:6e:
         c8:f6:d8:50:97:d0:d9:a1:06:8f:63:32:a7:1e:ef:3d:4e:20:
         2e:e3:31:e7:63:9f:ce:cd:c5:b6:f6:e8:a0:9d:9f:a9:16:b4:
         ee:0a:69:21:58:b2:25:4a:ac:3b:b5:0d:dc:e5:9f:2c:b4:34:
         d0:9c:5c:6f:bc:53:73:86:12:6c:95:b4:63:87:9e:a7:72:11:
         e5:ee:90:77:76:93:d9:8c:7b:09:ff:f1:51:f2:03:67:ae:fd:
         ca:05:77:4a:3b:c5:30:15:0b:28:3d:40:cf:91:d1:8b:6a:77:
         fc:0f:8c:63:34:5d:0e:6d:e4:8c:a4:22:b2:04:13:56:72:b3:
         ce:20:e9:93:04:16:ed:27:bd:a0:d0:86:b3:fa:d9:f2:53:62:
         56:d2:db:54:68:22:b6:71:33:03:73:59:8b:91:c6:92:fb:75:
         ed:a8:6b:da:1b:d8:1a:02:a9:85:28:53:58:df:45:ca:27:d2:
         ec:58:01:bd:aa:ff:cb:97:f6:42:4a:95:03:eb:ef:42:a4:c8:
         6a:13:03:5b:68:c9:66:bb:15:70:10:13:f8:d1:01:c0:8b:85:
         ce:fb:5e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:17 2024 by rpki-client on console-fra.rpki-client.org