Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/58unwNFsUXQTM0m4KhA2J3pynpk.roa
File:                     58unwNFsUXQTM0m4KhA2J3pynpk.roa (raw, json)
Hash identifier:          adhh6rU6xVDUaJ9U1Vh1Ip/dY7OWnUEw7wHMcg+l0IY=
Subject key identifier:   E7:CB:A7:C0:D1:6C:51:74:13:33:49:B8:2A:10:36:27:7A:72:9E:99
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0159
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/58unwNFsUXQTM0m4KhA2J3pynpk.roa
Signing time:             Thu 31 Oct 2024 01:30:54 +0000
ROA not before:           Thu 31 Oct 2024 01:30:54 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        210.139.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:30:54 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=E7CBA7C0D16C5174133349B82A1036277A729E99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:93:ad:c5:bf:21:c9:24:a0:a1:63:e4:44:
                    a1:06:11:05:7e:2b:e4:c9:92:50:32:32:83:1e:e3:
                    c2:26:f7:cc:dd:e9:ae:8f:92:c6:e9:3e:a4:02:d4:
                    59:69:d9:b9:28:a4:3f:c6:c8:72:51:91:5e:5e:b0:
                    8b:af:e2:91:e8:d5:01:72:e9:3e:e5:9b:cb:ce:44:
                    6e:f4:b5:c6:8e:57:41:d8:2a:37:eb:33:27:29:11:
                    2e:be:91:52:01:01:37:c9:05:24:5d:91:a2:46:18:
                    e0:1d:8b:d3:3a:75:88:98:68:9b:78:8f:5b:79:13:
                    35:27:17:04:01:08:54:3a:24:8c:e5:8a:05:30:2a:
                    62:f3:93:f1:61:88:fa:15:a8:ae:45:38:f6:69:8f:
                    89:fe:4e:42:02:a6:10:b4:90:5a:22:a4:2f:00:6d:
                    05:8b:a6:f2:5d:b4:f0:0d:02:f8:f9:cb:0c:c1:8c:
                    6b:22:e8:aa:89:47:40:cd:57:6b:92:ee:57:02:38:
                    bf:b6:ca:92:c6:81:e1:54:ed:4a:7c:59:9c:c1:3a:
                    d2:d5:5f:2e:52:d2:26:09:f6:74:8f:54:0f:0e:88:
                    c0:68:11:f7:4a:59:1a:83:d7:99:7f:f5:d2:95:3d:
                    c0:31:53:bd:a4:84:bf:54:60:6c:4b:64:e6:7d:ce:
                    ab:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CB:A7:C0:D1:6C:51:74:13:33:49:B8:2A:10:36:27:7A:72:9E:99
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/58unwNFsUXQTM0m4KhA2J3pynpk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.139.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         10:eb:d8:12:b2:3c:02:02:53:cd:6b:e1:4e:81:4c:95:66:9c:
         bf:7d:e3:d2:08:5e:1a:9d:34:3a:3e:82:d8:bd:da:5b:04:39:
         6e:fe:b7:a9:39:92:12:0c:32:ab:bd:32:33:eb:34:4b:87:63:
         64:57:f6:02:df:d6:55:f7:c5:11:49:40:ad:76:e9:98:17:ff:
         38:f7:83:e1:2d:1d:df:f5:19:9d:09:70:23:2d:16:f7:40:9e:
         df:6b:8c:80:9b:b9:db:31:6e:a5:1a:94:35:c2:01:90:2b:96:
         88:86:4f:dc:f3:e3:3e:08:e1:7d:1e:5b:6c:14:04:74:72:fc:
         a1:3a:29:a8:e1:d2:4a:4e:d4:14:77:dd:d6:16:04:47:f5:28:
         8b:62:73:ef:95:a4:67:d3:02:06:8c:67:94:88:01:85:73:ce:
         5f:0e:cb:b1:60:c6:b6:f7:75:88:39:6b:5a:32:1a:60:52:b2:
         ee:1f:a6:06:aa:a4:7f:79:74:43:d0:4a:12:43:5b:84:9d:8d:
         8e:4c:3d:09:68:85:5a:0b:32:c1:f0:64:79:b3:f4:d7:4d:ac:
         1f:0f:38:6b:54:05:00:98:b6:df:dc:83:4b:b4:67:96:96:ea:
         23:79:a5:09:8d:cd:a8:bc:8e:3f:4c:90:5a:33:4d:32:59:be:
         aa:50:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:04 2024 by rpki-client on console-fra.rpki-client.org