Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/NrfCq5nijQjP7WteADioNXSqKb4.roa
File:                     NrfCq5nijQjP7WteADioNXSqKb4.roa (raw, json)
Hash identifier:          qpxkr/2cI7U0cSwokX6u1NC/UfJiYAdKZZcwnt92Nl4=
Subject key identifier:   36:B7:C2:AB:99:E2:8D:08:CF:ED:6B:5E:00:38:A8:35:74:AA:29:BE
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       07
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/NrfCq5nijQjP7WteADioNXSqKb4.roa
Signing time:             Wed 02 Aug 2023 02:05:45 +0000
ROA not before:           Wed 02 Aug 2023 02:05:45 +0000
ROA not after:            Thu 01 Aug 2024 01:47:14 +0000
asID:                     24259
IP address blocks:        103.246.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Aug  2 02:05:45 2023 GMT
            Not After : Aug  1 01:47:14 2024 GMT
        Subject: CN=36B7C2AB99E28D08CFED6B5E0038A83574AA29BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:75:d5:50:f0:05:62:c3:69:6d:14:65:f2:35:
                    48:a6:6e:79:86:b6:80:d9:68:6c:5c:db:44:42:74:
                    61:db:1d:0e:2b:7c:96:c4:f9:97:a3:b3:92:2b:62:
                    5f:24:4b:55:7a:cf:dc:7c:fd:68:9c:84:83:e6:69:
                    41:a6:c2:0e:4d:89:63:b7:04:b5:04:e6:09:e0:2d:
                    90:a5:82:2b:07:c4:25:6d:d2:e3:5e:82:0d:ca:a8:
                    2d:f6:c8:bc:7d:58:d3:96:b9:96:c9:dc:b0:33:f7:
                    94:1f:b9:e8:14:0c:1c:85:b3:10:6b:50:7e:13:7d:
                    21:a3:ff:57:48:7e:44:92:58:c0:b4:0f:d6:9e:70:
                    9c:fe:53:06:18:6c:ed:c3:a4:4e:cd:9d:2b:af:69:
                    b3:81:59:19:26:fb:eb:c6:ad:bc:54:25:f8:21:e6:
                    d1:af:f3:49:b5:fd:18:af:e2:6d:c1:f8:6c:d6:cd:
                    a6:8d:3d:5d:3b:b5:1e:f5:34:dc:f6:c5:66:79:5a:
                    2c:e7:12:1d:80:67:da:84:8a:b0:35:09:77:d5:4e:
                    72:3e:1b:cd:8e:f6:f6:bd:fe:12:08:d5:75:2c:b8:
                    ec:22:88:0d:fa:fd:cb:89:5d:32:d3:fc:42:e7:fb:
                    af:42:5f:8a:71:1e:80:81:26:bf:f6:0a:fa:57:76:
                    d5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B7:C2:AB:99:E2:8D:08:CF:ED:6B:5E:00:38:A8:35:74:AA:29:BE
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/NrfCq5nijQjP7WteADioNXSqKb4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:e0:88:18:8b:de:8c:f5:9d:ac:22:8d:d6:ef:4f:72:b7:d9:
         6b:dc:ae:2a:db:c0:82:49:9a:eb:a8:cc:7d:e2:85:74:71:02:
         ef:73:24:9d:f4:be:f0:eb:70:76:a8:3c:a1:9d:17:9f:fe:f9:
         3a:a8:8c:65:af:d4:ca:b6:0b:74:b6:56:fb:09:a4:bc:4b:ba:
         4e:d2:05:f6:1d:78:e8:5a:65:a1:71:b4:49:b4:24:a3:64:52:
         8c:3a:8c:50:e1:90:31:bd:d8:dc:f8:32:0f:c2:76:dd:80:6e:
         b9:ee:73:88:1e:19:c4:2e:95:7c:3c:af:70:a2:ea:64:da:02:
         98:85:d5:c1:c4:17:f6:db:c1:0f:fc:27:06:19:64:af:a1:97:
         35:7a:dc:86:9e:6a:84:dc:67:08:68:40:69:e6:14:5e:d1:ae:
         47:fe:32:c3:a3:29:cb:47:b3:cf:be:5f:dd:43:af:25:fe:04:
         ef:5e:6a:59:9e:ba:8c:ef:37:32:9b:6b:a1:64:1f:d0:5f:32:
         c7:57:5b:f9:0c:08:06:ab:56:2b:15:aa:d4:d5:b7:1f:d6:a2:
         ca:33:96:d7:43:89:a0:86:f6:bf:11:24:77:c8:a3:27:e3:6d:
         bb:1a:e3:13:4b:37:b3:3f:54:fc:9d:71:2b:54:60:cf:fe:c9:
         68:83:f0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:54 2024 by rpki-client on console-ams.rpki-client.org