Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/925/ChIYvB20E4LjNyxz6zjydPwXnx8.roa
File:                     ChIYvB20E4LjNyxz6zjydPwXnx8.roa (raw, json)
Hash identifier:          d1JhskVfDcsaD2idFFD1oooRMsV2wlbdD/2A8WmNC/g=
Subject key identifier:   0A:12:18:BC:1D:B4:13:82:E3:37:2C:73:EB:38:F2:74:FC:17:9F:1F
Certificate issuer:       /CN=1426C384E2A49283FA747D079E83DD32B65D7E85
Certificate serial:       35
Authority key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/ChIYvB20E4LjNyxz6zjydPwXnx8.roa
Signing time:             Fri 19 Apr 2024 07:53:42 +0000
ROA not before:           Fri 19 Apr 2024 07:53:42 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     24289
IP address blocks:        103.18.60.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1426C384E2A49283FA747D079E83DD32B65D7E85
        Validity
            Not Before: Apr 19 07:53:42 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=0A1218BC1DB41382E3372C73EB38F274FC179F1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d8:92:db:2e:fc:ec:2f:08:fe:0d:c0:98:9c:
                    3e:77:dd:f4:ee:4c:11:f0:f8:74:38:e6:56:86:bf:
                    c4:05:a4:82:60:98:11:c4:9c:18:90:98:d6:0e:4e:
                    e4:3d:fa:74:de:b6:aa:a3:78:4a:a5:09:0d:70:f6:
                    b6:36:8f:d1:3a:fa:98:de:f8:45:26:0f:20:bf:a3:
                    c7:06:7e:8d:87:77:63:27:30:ee:d8:28:9d:0c:21:
                    1e:3e:d9:90:f7:c4:94:f8:a8:ba:05:18:97:80:d6:
                    f9:96:a3:98:e8:35:14:62:ac:8a:71:43:78:a7:ba:
                    2a:83:75:cd:d9:dd:4d:8c:83:56:2f:36:ba:b3:6e:
                    d5:1b:ec:8c:f9:88:f8:42:00:40:6c:64:80:aa:df:
                    6e:2f:0e:04:7c:69:80:aa:2c:3f:40:a2:cc:29:4a:
                    b7:9f:89:f3:d0:07:15:14:f3:98:f2:35:5b:a0:36:
                    28:16:ea:0b:6e:53:20:35:b9:54:86:2a:08:0c:54:
                    ba:9f:76:8f:4c:e0:c7:2b:d4:f5:39:9d:40:8f:16:
                    e1:ec:3b:8b:01:87:70:2d:c0:3d:38:43:7b:16:4d:
                    b6:a7:80:1e:65:c4:6c:55:1c:a4:1a:c5:92:a5:4b:
                    f2:eb:93:41:f3:6f:a8:e5:07:83:77:2d:08:8a:8b:
                    8b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:12:18:BC:1D:B4:13:82:E3:37:2C:73:EB:38:F2:74:FC:17:9F:1F
            X509v3 Authority Key Identifier:
                keyid:14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/ChIYvB20E4LjNyxz6zjydPwXnx8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:d5:89:ef:53:a3:3b:48:a9:b3:83:0c:83:8f:d3:f3:31:f0:
         74:ba:38:ca:f2:42:51:7f:67:f0:c2:18:d1:7a:41:3f:9f:46:
         63:6d:bd:81:9d:66:ef:a7:a2:68:d0:65:a9:f7:0a:99:b8:6f:
         27:9f:e7:71:a7:79:b9:ac:eb:93:06:a5:58:c2:12:7a:ea:5e:
         fb:60:e3:b0:6b:ef:66:ed:35:8c:15:60:45:c6:37:72:5b:33:
         fb:fc:85:48:f2:56:85:19:0b:dd:cb:d1:ff:3e:a6:a0:0b:8b:
         ea:35:d5:95:10:cd:bf:a4:5a:f6:37:89:ac:9b:17:90:4b:95:
         05:be:d7:4c:c5:fc:79:02:66:09:fe:b9:d6:8d:d4:10:19:7b:
         d8:f7:49:c8:1d:f4:ff:59:b6:d1:c6:da:c5:a4:28:1d:4e:5d:
         fa:5f:67:73:39:66:46:29:c2:2e:5f:06:78:a4:7e:36:f8:af:
         18:a8:a6:25:18:07:bd:67:5e:dd:10:e6:99:c3:07:59:3e:55:
         d5:4e:b6:93:5e:09:ff:32:1d:37:71:02:92:23:8b:53:9a:5d:
         6c:6e:3a:93:ed:cc:50:0e:76:b6:c2:4e:53:93:15:32:4a:a5:
         fe:cf:28:b9:44:81:54:a9:b7:fe:3e:96:6d:2c:77:85:44:80:
         ea:13:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:53 2024 by rpki-client on console-fra.rpki-client.org