Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/5A3yss3Pw4P0IvWxjU4fN6Ahj9E.roa
File:                     5A3yss3Pw4P0IvWxjU4fN6Ahj9E.roa (raw, json)
Hash identifier:          0Ag+KzYLpGmVHuYfyhxVyDubhhZwd8t7K/pB257SOPg=
Subject key identifier:   E4:0D:F2:B2:CD:CF:C3:83:F4:22:F5:B1:8D:4E:1F:37:A0:21:8F:D1
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0174
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/5A3yss3Pw4P0IvWxjU4fN6Ahj9E.roa
Signing time:             Thu 31 Oct 2024 01:34:27 +0000
ROA not before:           Thu 31 Oct 2024 01:34:27 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        61.211.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:34:27 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=E40DF2B2CDCFC383F422F5B18D4E1F37A0218FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:d9:78:23:e3:5f:c3:a1:da:33:be:73:95:
                    84:1b:42:2a:59:63:5f:63:07:96:b3:81:2c:3a:e6:
                    69:d5:85:e4:31:da:b6:b7:10:43:88:11:0e:45:70:
                    70:65:7d:9e:c6:6a:f4:95:80:fb:11:32:10:7e:a3:
                    1e:80:fc:6f:82:2b:22:27:74:10:e0:04:26:f1:94:
                    04:c0:87:b7:c3:e9:51:2b:71:14:e2:a0:7b:7e:2d:
                    65:01:f5:56:fd:3d:6c:78:0d:8c:3a:66:56:19:d7:
                    e6:53:7b:ab:7d:5d:86:8b:41:63:83:29:58:9d:c1:
                    d4:5d:12:02:e4:c9:e6:7d:19:78:1f:dc:c9:87:5e:
                    76:9e:de:08:fc:75:4f:9e:43:05:43:81:e7:a7:a6:
                    ad:d6:cc:89:19:7f:9c:ba:41:4e:fb:48:e3:24:55:
                    51:19:a3:db:62:a4:46:a8:2b:96:6f:89:12:77:f1:
                    a3:0c:80:99:40:25:a0:bb:2e:b1:fc:c6:af:9a:9f:
                    5d:78:b0:2c:c3:a6:88:7b:33:48:59:0b:59:b2:c3:
                    2c:af:12:f2:98:e2:ad:4b:3a:6a:98:29:12:d2:7c:
                    03:ac:ed:d9:26:54:45:6e:54:e5:c9:1c:3d:f2:82:
                    1c:f4:5d:de:bd:90:ce:a2:ff:a4:13:e8:e6:47:3c:
                    d3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0D:F2:B2:CD:CF:C3:83:F4:22:F5:B1:8D:4E:1F:37:A0:21:8F:D1
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/5A3yss3Pw4P0IvWxjU4fN6Ahj9E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         29:8d:fa:80:88:5c:7b:2a:9c:86:70:6e:7d:54:df:e0:85:1b:
         20:6e:87:b9:80:18:74:04:47:3f:57:2a:b3:04:50:98:9e:bf:
         cb:8a:6e:38:e9:86:4e:8c:c0:49:f0:36:83:9b:1f:08:ae:8b:
         05:af:38:a3:39:5f:5b:b4:39:a0:3d:e1:51:ff:fe:55:e1:22:
         bb:06:5d:f8:b3:f3:c6:fa:0a:5c:eb:54:9f:0f:34:4c:b2:f7:
         89:8a:2b:37:9f:4e:6e:b8:3e:68:93:7e:1b:3a:52:a5:d2:c3:
         4d:67:0c:ee:8b:43:4d:71:e8:b8:08:85:06:01:5b:51:a8:fb:
         b9:b4:bd:21:e1:52:3d:4e:d5:50:d4:dc:e0:cc:5d:e6:8c:ae:
         a0:e1:be:96:5c:08:89:28:5d:7d:b9:57:66:7e:01:35:c1:94:
         13:73:10:a6:62:8b:cd:fb:e4:70:37:f2:c6:7b:a5:44:f8:a8:
         39:a1:68:3f:9c:8c:45:e4:c4:12:61:fa:f1:e8:9d:3a:47:a0:
         77:00:89:7d:7f:d1:09:27:8d:68:84:73:ae:f6:2e:44:a7:73:
         13:9c:e6:0f:f6:c8:e0:f4:60:b2:75:c7:ab:7d:4b:be:44:8e:
         c7:1c:c2:ad:f9:14:73:9c:d0:ff:ea:6a:55:21:15:6e:16:5f:
         0c:ee:84:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:44 2024 by rpki-client on console-ams.rpki-client.org