Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/952/8-8iMMqxjsFmdue59Q1_sXAUWh0.roa
File:                     8-8iMMqxjsFmdue59Q1_sXAUWh0.roa (raw, json)
Hash identifier:          PSleRFUHiCvJDCr9sGWo1hZOSpiSjMnG5ivnRRwg7C8=
Subject key identifier:   F3:EF:22:30:CA:B1:8E:C1:66:76:E7:B9:F5:0D:7F:B1:70:14:5A:1D
Certificate issuer:       /CN=9E6AFAB04E10E99C322B56C603CB3C9547F22B4D
Certificate serial:       02
Authority key identifier: 9E:6A:FA:B0:4E:10:E9:9C:32:2B:56:C6:03:CB:3C:95:47:F2:2B:4D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/8-8iMMqxjsFmdue59Q1_sXAUWh0.roa
Signing time:             Wed 01 May 2024 02:42:30 +0000
ROA not before:           Wed 01 May 2024 02:42:30 +0000
ROA not after:            Thu 01 May 2025 02:34:07 +0000
asID:                     37922
IP address blocks:        103.239.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6AFAB04E10E99C322B56C603CB3C9547F22B4D
        Validity
            Not Before: May  1 02:42:30 2024 GMT
            Not After : May  1 02:34:07 2025 GMT
        Subject: CN=F3EF2230CAB18EC16676E7B9F50D7FB170145A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:40:a3:55:92:11:83:02:ff:16:04:40:de:
                    c2:0e:7a:96:c2:a0:91:32:60:0b:19:78:bf:7f:18:
                    bf:74:fe:94:30:c7:ee:ef:f1:34:91:84:f1:18:47:
                    c8:d2:eb:7f:bd:d9:b8:4d:1f:20:a9:dc:5f:2d:0c:
                    43:a3:53:bd:dd:f7:d6:ce:bd:29:92:02:c3:92:03:
                    92:c7:8b:9e:14:f2:e6:8d:45:6d:b7:1c:ab:31:9c:
                    bf:c9:2f:5f:03:41:b4:0b:ba:e0:f1:9d:1a:35:17:
                    6a:da:37:5a:15:24:c0:22:93:57:ac:3b:09:da:ca:
                    51:85:2a:ed:0b:9c:71:43:44:d4:f1:4e:b7:d5:d0:
                    32:83:57:d4:40:7d:2d:d5:6a:ab:9c:af:0b:d0:52:
                    96:9b:29:ef:8a:b8:51:f5:1f:8b:b5:5a:dc:b1:54:
                    ad:fb:f5:ff:0c:c9:a8:1d:a9:7b:06:46:1f:0f:c3:
                    44:2f:8a:9b:ae:95:6f:e9:49:eb:98:89:22:14:52:
                    ca:1b:5a:13:f1:8f:82:ed:13:06:54:73:f5:7f:44:
                    14:62:9b:db:6b:a5:91:ba:6d:71:4c:ba:7a:3e:ee:
                    8f:17:fb:05:02:11:3f:2c:8a:28:b1:5c:30:a8:6a:
                    f0:34:ed:57:21:87:5c:5a:bc:89:b6:70:26:dd:1f:
                    17:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EF:22:30:CA:B1:8E:C1:66:76:E7:B9:F5:0D:7F:B1:70:14:5A:1D
            X509v3 Authority Key Identifier:
                keyid:9E:6A:FA:B0:4E:10:E9:9C:32:2B:56:C6:03:CB:3C:95:47:F2:2B:4D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/8-8iMMqxjsFmdue59Q1_sXAUWh0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:d2:0c:90:c9:6e:4c:49:b2:7c:2d:ea:b5:c2:be:be:19:35:
         cf:10:f4:5f:4d:1c:8a:7b:ad:dc:00:cf:c4:38:02:d0:7a:a6:
         89:52:52:53:b1:8a:d4:2f:94:86:0d:93:1a:3b:de:52:42:be:
         cb:3e:c9:b9:da:ae:b4:20:55:29:8d:1d:dc:73:77:59:d8:92:
         6a:16:9f:c4:f2:53:a8:fe:90:84:a5:a6:03:01:e7:9e:e3:bd:
         d7:82:2b:28:64:d1:07:1f:d1:13:3b:57:2a:53:5c:70:2a:d3:
         98:a0:6e:32:9d:1b:f2:9f:39:12:3d:14:3c:9c:c5:69:5f:18:
         49:ee:55:45:6d:8d:47:cb:00:c9:41:06:78:dd:35:9a:50:b5:
         21:be:a2:80:ae:9c:07:6f:4e:20:5f:41:76:9d:b1:0a:60:bb:
         ec:56:6a:20:17:62:39:e9:20:6c:c6:3a:a2:21:d7:24:6e:51:
         0d:af:e3:82:af:0c:88:60:5f:d5:8a:a9:50:24:0d:59:d4:04:
         ba:1c:aa:4c:b1:38:43:58:28:80:e6:5c:e3:f7:69:20:43:5e:
         e6:52:34:c2:5a:b2:57:bc:fc:f3:c4:cf:1f:87:7f:dd:80:9b:
         56:82:c7:3c:bd:9d:81:35:f8:c3:b4:6f:63:98:a5:5c:50:4e:
         ee:6a:06:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:19 2024 by rpki-client on console-fra.rpki-client.org