Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/13WmuWVc8hRRMv3JIyyOqcG8lZA.roa
File:                     13WmuWVc8hRRMv3JIyyOqcG8lZA.roa (raw, json)
Hash identifier:          rhjddtIc/yaHuZgTJuBPB8QVcgMrcQs/XubIgsTqrMg=
Subject key identifier:   D7:75:A6:B9:65:5C:F2:14:51:32:FD:C9:23:2C:8E:A9:C1:BC:95:90
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0169
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/13WmuWVc8hRRMv3JIyyOqcG8lZA.roa
Signing time:             Thu 31 Oct 2024 01:34:20 +0000
ROA not before:           Thu 31 Oct 2024 01:34:20 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        61.120.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:34:20 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=D775A6B9655CF2145132FDC9232C8EA9C1BC9590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:be:74:be:65:42:ce:18:10:99:d0:49:4f:ed:
                    ca:92:5b:22:f0:f5:a8:f9:a0:8e:95:a1:1c:a7:67:
                    63:42:3b:34:7c:f0:fe:d0:ed:50:06:b3:4f:94:0f:
                    f3:56:f7:df:83:4c:92:a5:4d:45:3a:81:4f:de:f0:
                    ba:4f:ae:3c:20:a1:f8:1d:c6:f2:eb:b3:3e:c0:a8:
                    cf:9a:65:31:7d:26:1e:cf:dd:97:ca:a1:51:e1:f7:
                    20:40:ff:fa:8b:44:55:e8:2f:fa:14:cc:43:46:b2:
                    28:6e:e2:ca:0c:e3:a7:be:c0:04:4c:48:4f:47:01:
                    53:a0:90:08:ee:6d:a9:d1:73:4d:74:fa:bd:7e:74:
                    9d:4a:0b:0b:76:99:e1:47:df:fb:a8:e5:c9:f7:18:
                    e8:c1:fd:4e:5e:f9:ff:12:b8:d0:45:3b:0f:e3:c9:
                    ab:c4:e8:27:3a:2a:64:98:6f:96:5c:73:63:eb:fd:
                    de:42:28:b1:f0:1c:69:1c:10:91:0e:7b:db:dd:91:
                    4f:e4:d9:64:e9:eb:b7:8b:d0:45:4b:e3:38:4d:9c:
                    7b:ab:bd:e7:14:fd:84:23:f5:c1:83:ca:2a:e8:ee:
                    2e:d0:51:ca:00:b3:1f:15:e9:64:12:cd:08:7b:34:
                    69:ba:f3:5a:1c:b7:ce:67:2c:0c:03:74:69:29:d7:
                    3c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:75:A6:B9:65:5C:F2:14:51:32:FD:C9:23:2C:8E:A9:C1:BC:95:90
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/13WmuWVc8hRRMv3JIyyOqcG8lZA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0c:37:b0:0d:4f:c7:83:81:c4:20:ed:3c:40:ec:74:6c:dd:53:
         31:62:90:72:4d:c5:ef:b7:b8:e0:1f:f5:93:01:57:b8:d3:3a:
         c0:02:8a:20:f4:1b:b7:81:43:55:90:32:ce:78:f2:05:11:8d:
         73:7a:b9:2a:dc:f7:2d:90:fe:24:ae:72:00:85:e5:9e:0e:8e:
         2e:9e:29:5e:d8:32:1c:88:23:98:0a:80:77:c3:15:72:04:2b:
         5e:01:21:fb:d7:45:d3:47:39:a5:c7:4f:3f:a7:30:6b:a8:05:
         62:7e:83:58:1f:76:b2:10:79:8e:82:91:18:7a:ed:da:0e:4c:
         fe:1a:b8:31:11:bd:84:ef:5f:69:fe:f6:54:25:c7:28:23:7b:
         34:91:34:0e:08:ab:50:5c:6b:b7:11:da:0d:d7:4b:79:88:8e:
         3c:9f:bd:ed:51:7b:a6:d5:f7:c1:65:e6:b3:99:db:68:3e:4c:
         41:e8:e1:9f:50:33:03:69:61:50:7b:19:9c:da:c1:a0:49:9f:
         a4:5b:44:7c:0e:7e:ac:4c:b0:85:d5:7f:f7:37:43:1c:6e:fa:
         e0:09:89:38:c5:95:56:88:44:2b:24:c3:20:61:c2:e7:4e:36:
         f9:5c:0c:63:6e:b0:d3:24:ee:48:cf:f8:26:6c:b4:ec:60:e1:
         c0:f8:10:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:04 2024 by rpki-client on console-fra.rpki-client.org