Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/xFOODJPaw8qE8vB-TeBDNGfZJAI.roa
File:                     xFOODJPaw8qE8vB-TeBDNGfZJAI.roa (raw, json)
Hash identifier:          kG2D1twu7Hysk/lRHnRZbNA1gMDcv2Hnw64bKj+SUdo=
Subject key identifier:   C4:53:8E:0C:93:DA:C3:CA:84:F2:F0:7E:4D:E0:43:34:67:D9:24:02
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       2D
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/xFOODJPaw8qE8vB-TeBDNGfZJAI.roa
Signing time:             Fri 04 Oct 2024 07:08:28 +0000
ROA not before:           Fri 04 Oct 2024 07:08:28 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     59127
IP address blocks:        101.203.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Oct  4 07:08:28 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=C4538E0C93DAC3CA84F2F07E4DE0433467D92402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a2:bf:ac:8e:b0:8c:9e:ab:fc:40:c8:0b:b2:
                    87:6d:14:ba:d5:bd:51:94:df:2a:80:a0:7b:8b:6f:
                    af:4f:2c:e7:d3:bf:2d:a4:ed:c3:4e:1d:e2:91:dd:
                    2b:33:b4:d7:85:ff:13:a5:f1:4f:23:1d:cc:1c:f3:
                    a3:49:1b:17:30:8b:dd:07:00:22:0a:82:56:2a:31:
                    df:f6:12:a7:ca:73:a8:72:eb:17:a7:32:15:7e:43:
                    6c:93:8a:3b:34:7c:0f:98:c8:a6:a6:2f:54:3e:4b:
                    46:e4:fd:75:07:0d:bf:ca:60:7a:e7:e0:5e:af:1e:
                    22:5d:71:2a:3d:7c:94:19:1b:33:4b:3b:b6:38:11:
                    27:1c:7c:65:23:36:94:77:06:5b:ca:dd:a3:16:30:
                    a0:aa:32:e3:00:97:84:b3:68:97:9c:86:d4:97:ed:
                    84:14:32:27:c4:fa:91:2c:af:52:9b:dd:f6:92:79:
                    bc:76:00:a4:bd:45:38:5e:55:12:f1:3b:99:83:0f:
                    d3:ad:ea:85:d1:cc:96:cb:dc:85:b1:91:6e:d0:1d:
                    83:9b:cf:05:73:83:4a:22:4b:db:52:ea:97:74:40:
                    0d:76:60:d1:22:38:1b:af:ea:8a:a0:ea:8c:a7:97:
                    6f:da:6c:62:f5:58:91:41:19:d9:1e:2f:76:40:30:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:53:8E:0C:93:DA:C3:CA:84:F2:F0:7E:4D:E0:43:34:67:D9:24:02
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/xFOODJPaw8qE8vB-TeBDNGfZJAI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:94:dc:6c:56:9b:c3:39:ab:7e:a2:4b:b8:d0:1d:80:0e:26:
         a2:30:d1:49:00:74:4a:bc:ff:68:2b:95:17:0d:c0:6b:3d:c6:
         bd:df:77:8f:eb:36:4e:46:d1:70:a1:5c:4e:36:2b:88:54:10:
         b3:b3:ee:5a:5e:eb:72:c1:b0:0f:34:3e:1a:c2:1c:9e:90:49:
         32:42:80:14:b6:e7:fc:f7:ba:8a:15:20:69:e3:1a:77:4c:20:
         57:44:56:81:58:c4:34:6f:2b:6a:f9:f2:c8:5b:19:f9:39:b3:
         78:48:d7:8e:a2:ee:87:9e:21:a6:39:13:f9:d0:04:93:26:46:
         7b:9c:76:a6:2d:d7:ad:6d:a2:77:38:4e:5d:ee:7d:1d:7c:c3:
         3f:8f:b3:0a:5d:9b:b4:92:a0:39:5c:b7:b9:4f:cf:92:b0:38:
         24:eb:c2:d9:c1:25:01:28:16:84:0a:73:5e:d7:af:49:b1:c9:
         cb:b9:2e:3a:41:53:b6:10:e3:94:c2:8b:88:f5:68:13:80:71:
         ca:0c:2b:f6:99:33:12:1a:94:07:c8:84:1d:ed:6a:98:fd:72:
         ce:d2:df:11:f6:37:98:e1:6a:b4:ff:f8:da:f7:f4:2e:ec:e2:
         8a:e0:22:94:51:3e:d9:6f:ce:5d:44:45:0b:63:48:a4:a6:02:
         78:60:43:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:32 2024 by rpki-client on console-ams.rpki-client.org