Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/J9CV6D_DzBGStythcJB08eIjipM.roa
File:                     J9CV6D_DzBGStythcJB08eIjipM.roa (raw, json)
Hash identifier:          9ouuqYQssazxRSJkJGNoJ2u5TfN5dasBEnaUh9KI9I4=
Subject key identifier:   27:D0:95:E8:3F:C3:CC:11:92:B7:2B:61:70:90:74:F1:E2:23:8A:93
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       8F
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/J9CV6D_DzBGStythcJB08eIjipM.roa
Signing time:             Thu 29 Feb 2024 01:30:38 +0000
ROA not before:           Thu 29 Feb 2024 01:30:38 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     38631
IP address blocks:        103.2.30.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: Feb 29 01:30:38 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=27D095E83FC3CC1192B72B61709074F1E2238A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:51:f6:a8:5a:ee:c3:27:6f:d4:3e:4d:6d:
                    30:da:81:7a:7c:91:29:04:0a:24:54:d4:29:b8:7b:
                    a0:ad:8d:96:f0:aa:04:32:54:88:fa:ba:86:d2:da:
                    ce:16:db:53:eb:e2:1b:f3:76:7b:f9:3d:f6:1e:c0:
                    b8:bd:33:5c:be:61:a3:54:d0:24:bc:73:e2:d3:35:
                    f1:7d:ed:02:93:2d:54:37:d4:32:c6:8b:0b:96:74:
                    16:d0:28:30:c2:7a:88:ea:cd:d1:a2:43:81:42:2d:
                    ee:49:b9:30:94:d4:20:fe:8e:bd:a4:06:69:14:17:
                    d1:36:e2:07:ee:a7:6e:0a:73:d2:fb:d2:0e:a6:60:
                    33:da:49:32:d8:24:e2:bc:b1:1a:a6:1b:b8:85:b2:
                    bd:16:9c:e9:a4:bb:36:74:61:cf:60:45:e9:98:a7:
                    91:0b:f2:26:f2:a6:57:2b:b9:e2:12:bd:8d:22:df:
                    a2:cd:a2:2e:e3:65:01:11:e9:d6:c9:c9:04:13:e0:
                    c2:e6:5a:f2:84:c9:69:eb:9c:0b:2a:b9:22:bd:4b:
                    20:61:c6:42:98:16:84:e2:7d:a7:db:51:29:14:53:
                    64:95:4c:01:13:cb:88:d7:28:6d:15:bf:06:e0:26:
                    85:38:e1:12:80:f0:b9:ec:d8:57:fc:20:1d:40:33:
                    1e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D0:95:E8:3F:C3:CC:11:92:B7:2B:61:70:90:74:F1:E2:23:8A:93
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/J9CV6D_DzBGStythcJB08eIjipM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:43:4e:7f:f0:af:dd:d7:23:93:55:f7:00:2c:94:f3:35:71:
         86:e6:d2:cd:15:57:c4:33:24:82:70:45:97:36:5f:a7:9f:0c:
         95:43:01:8b:34:fe:f0:f5:03:4b:69:be:8f:57:32:b5:16:f3:
         3a:b2:5b:ca:fa:82:c6:f1:82:d6:1b:5d:a1:3f:3b:a7:3d:24:
         e0:3d:66:c5:11:43:41:dc:7f:d0:8c:27:95:40:77:85:83:85:
         b4:74:d3:22:12:f0:c3:cc:fc:42:6a:0e:a4:d4:12:3a:d7:66:
         7a:d2:62:7b:30:17:12:f9:e4:85:b6:f1:b4:fa:84:31:ca:71:
         87:8a:9b:88:78:d7:5d:3a:ce:2e:98:13:30:3d:11:6d:b6:cb:
         d6:ee:44:04:b9:db:ca:c4:a9:e2:19:a2:78:bf:43:d3:0f:54:
         4d:4c:75:14:67:eb:5a:33:33:0f:f1:91:5d:7d:f8:e0:3f:c8:
         04:7a:e8:f9:d3:46:7c:74:4a:93:96:ff:1d:27:8b:b3:ca:a6:
         f8:31:f9:08:fb:54:95:11:10:36:0c:33:cd:c6:d6:53:4e:5c:
         b7:85:02:09:80:94:61:03:ad:8a:35:93:75:51:1f:21:01:f3:
         b5:03:43:8b:95:c1:cf:e0:2b:79:b7:5a:2e:18:5e:aa:d5:62:
         48:3c:67:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:54 2024 by rpki-client on console-ams.rpki-client.org