Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/YZy23Y9Z0doJvPpLxrU-7o4sfDc.roa
File:                     YZy23Y9Z0doJvPpLxrU-7o4sfDc.roa (raw, json)
Hash identifier:          h6zSwmdgGl78GGUesMsEecTEHiz3slDB4UQqCOvu6ik=
Subject key identifier:   61:9C:B6:DD:8F:59:D1:DA:09:BC:FA:4B:C6:B5:3E:EE:8E:2C:7C:37
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       5C
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/YZy23Y9Z0doJvPpLxrU-7o4sfDc.roa
Signing time:             Thu 29 Feb 2024 01:30:19 +0000
ROA not before:           Thu 29 Feb 2024 01:30:19 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     45680
IP address blocks:        103.235.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: Feb 29 01:30:19 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=619CB6DD8F59D1DA09BCFA4BC6B53EEE8E2C7C37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:56:93:54:ac:49:83:52:83:1d:c1:2f:86:
                    b0:10:7f:04:1e:0f:24:e5:f7:24:53:b0:01:78:7c:
                    67:eb:da:36:23:10:d6:9f:bd:8f:82:7f:5b:f0:38:
                    14:8e:8a:dc:a9:8d:c3:95:d6:76:db:24:39:47:8c:
                    ab:2e:92:ea:a1:34:e2:5d:d8:b5:b2:30:5c:8a:24:
                    c6:37:d0:92:05:e6:36:b3:12:a7:d0:8c:43:11:30:
                    d8:e0:13:c9:6a:77:97:b2:d2:be:c9:2a:47:ee:9d:
                    73:3e:c7:ad:d5:ff:f6:41:84:82:7b:70:01:0c:5f:
                    c8:af:fa:62:fb:5b:7d:2c:9f:61:62:5d:01:46:51:
                    c0:38:d1:81:af:38:a6:90:1a:36:3c:46:2f:d6:dd:
                    be:44:7d:1e:6b:36:06:c8:2b:54:68:68:17:f0:09:
                    53:92:85:ec:c3:36:bc:e5:9f:8a:c5:24:f4:43:53:
                    c8:55:ec:9c:5b:99:2d:35:ea:f3:ce:33:f4:08:e1:
                    e0:bb:a3:8e:49:ad:de:b5:3d:58:ee:5d:f7:33:ee:
                    48:eb:ab:45:09:c2:c9:bc:be:ad:2d:8f:f3:d2:5e:
                    24:86:eb:4c:35:ef:4c:d0:94:cc:16:2d:8a:63:c0:
                    13:6e:e8:8f:74:de:f5:63:20:c9:4d:16:d1:09:47:
                    ef:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9C:B6:DD:8F:59:D1:DA:09:BC:FA:4B:C6:B5:3E:EE:8E:2C:7C:37
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/YZy23Y9Z0doJvPpLxrU-7o4sfDc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:68:6f:35:36:f9:10:3b:20:8c:ca:f3:67:3f:2e:7b:f9:2b:
         5a:af:0d:ab:3b:83:60:82:e0:6d:50:05:3e:7a:58:75:ec:f8:
         9f:16:42:ed:86:81:92:a1:90:c0:6b:20:de:8c:e2:4b:ad:94:
         e4:58:54:7f:a1:24:e0:34:3a:dd:71:2c:80:36:fd:64:55:4c:
         d6:90:1c:24:8e:50:d8:82:5a:1c:bc:10:b0:f0:0b:09:28:da:
         c3:be:aa:84:a9:c2:b8:d9:dc:01:15:16:69:5e:a8:6d:b9:e8:
         58:91:f5:28:cd:b3:65:f2:b9:97:bf:15:f9:bc:45:8b:5d:5e:
         f6:62:26:2f:1e:a1:0d:23:34:db:33:aa:5b:2b:35:ce:6f:d1:
         74:06:34:01:b9:ff:5c:1e:30:86:18:43:99:8f:e5:c4:c6:07:
         29:d2:99:31:49:f1:fe:1c:54:25:8d:64:8e:e0:91:3b:35:ea:
         30:a8:40:b8:7d:55:52:8b:9b:a3:a1:dd:36:16:17:04:a9:fd:
         20:ad:eb:22:d1:82:78:80:5a:4b:ab:86:f6:bd:fd:ce:29:c6:
         2e:70:63:fb:52:5e:4d:dc:07:a1:20:ba:75:d3:b4:23:34:fa:
         f3:1b:4d:49:a6:74:cc:79:ac:ed:2c:e3:a4:a9:78:79:48:13:
         a6:3b:a5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:54 2024 by rpki-client on console-ams.rpki-client.org