Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/4_VuhAAyeDOCGN6zC17w5VxKPBU.roa
File:                     4_VuhAAyeDOCGN6zC17w5VxKPBU.roa (raw, json)
Hash identifier:          RAXjQW+//oCD3apfyLcLmihzHcJCAE4gwkUxY7cTmyo=
Subject key identifier:   E3:F5:6E:84:00:32:78:33:82:18:DE:B3:0B:5E:F0:E5:5C:4A:3C:15
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0117
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/4_VuhAAyeDOCGN6zC17w5VxKPBU.roa
Signing time:             Fri 01 Dec 2023 01:31:51 +0000
ROA not before:           Fri 01 Dec 2023 01:31:51 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        103.2.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Dec  1 01:31:51 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=E3F56E84003278338218DEB30B5EF0E55C4A3C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:ce:aa:19:67:57:2d:a9:c5:1e:5b:84:83:d7:
                    fe:d6:a3:e9:5a:08:77:d2:45:c7:60:7c:82:dd:c6:
                    c6:ab:b0:18:5e:04:0e:38:5f:d9:3b:30:9d:ff:69:
                    31:9e:3d:b1:11:e4:cd:4c:02:b2:d9:b9:cb:0c:62:
                    d3:d1:9b:df:b5:32:31:bb:a3:84:5b:d9:0d:c7:0b:
                    7d:e3:5e:ea:4c:20:78:da:f0:76:73:e7:4d:4e:72:
                    82:d8:6c:5e:9a:ef:52:cc:bc:1a:02:5d:bb:05:a2:
                    54:ab:5e:c7:66:de:96:5f:9a:b6:0d:d1:af:ff:13:
                    d1:66:6a:dd:b3:97:c3:44:92:43:7c:4b:7f:a1:ce:
                    c0:fe:a8:91:ea:97:64:52:fb:e3:03:8e:5e:90:57:
                    71:dc:17:93:ff:88:53:94:3f:25:a2:4b:69:0b:fd:
                    71:51:39:e4:de:f7:3d:ed:4a:21:4f:86:81:34:d6:
                    23:d9:e7:08:9e:4d:ee:bc:be:74:3b:f8:55:51:ec:
                    49:b0:2a:aa:3b:bc:4c:d1:01:64:c5:cd:13:78:1e:
                    9d:fe:05:36:00:68:1f:91:ff:43:07:c8:98:33:01:
                    55:0c:cf:5c:6d:3d:4b:0c:45:94:f1:43:ba:b6:6e:
                    4a:9a:b7:ac:19:0c:ce:95:3e:24:62:1e:2c:35:2b:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F5:6E:84:00:32:78:33:82:18:DE:B3:0B:5E:F0:E5:5C:4A:3C:15
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/4_VuhAAyeDOCGN6zC17w5VxKPBU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:e9:ae:12:dc:84:fd:94:64:e1:15:ac:0f:8e:94:98:d3:16:
         dc:7d:3e:d8:5a:48:5f:ae:c8:a2:ab:d8:8f:12:d3:9b:69:13:
         cc:b9:c0:ea:a8:1e:02:9d:5c:46:12:b9:a2:79:83:89:cd:ef:
         b1:f8:38:c1:04:dd:aa:28:2b:d7:91:de:2f:0d:2e:24:d4:f7:
         5c:5e:2a:f4:d2:7e:38:73:91:eb:72:74:c6:c9:e5:92:72:68:
         fd:3a:c1:3e:3b:30:8d:47:0e:ce:67:81:29:94:08:c4:11:3d:
         0a:67:a0:45:9a:47:de:a6:0c:a2:7f:75:79:ae:5b:f1:13:e3:
         26:b7:86:78:7b:d1:28:21:f4:85:11:05:8a:dd:ea:19:f6:2a:
         f9:80:02:3a:ae:b4:6b:ec:7a:9c:99:cc:21:dd:7c:a6:a7:21:
         52:09:7c:bc:16:c0:ba:81:de:60:a3:96:44:7a:0c:ba:df:e3:
         3e:b8:b7:73:b8:ee:c7:7f:94:3b:69:f3:87:c3:d7:97:c7:11:
         f1:a6:e9:99:ab:ae:b8:72:85:8f:88:b7:f5:23:e6:f1:50:d8:
         45:1b:19:e8:80:f6:49:bc:01:84:a9:19:b2:40:41:92:6f:23:
         a1:fd:ce:37:c1:43:b9:76:08:67:ba:34:ba:b9:d5:f0:6e:bb:
         92:0e:25:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org