Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/5ne0Vm8si7fTzKRQNviJHsoddIw.roa
File:                     5ne0Vm8si7fTzKRQNviJHsoddIw.roa (raw, json)
Hash identifier:          2nUICU19OlLk+bX4+cdbFkAhmontqzcTnzCk7vteDck=
Subject key identifier:   E6:77:B4:56:6F:2C:8B:B7:D3:CC:A4:50:36:F8:89:1E:CA:1D:74:8C
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0116
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/5ne0Vm8si7fTzKRQNviJHsoddIw.roa
Signing time:             Fri 01 Dec 2023 01:31:50 +0000
ROA not before:           Fri 01 Dec 2023 01:31:50 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        115.162.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Dec  1 01:31:50 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=E677B4566F2C8BB7D3CCA45036F8891ECA1D748C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:51:3f:76:ae:36:c9:c4:1f:ba:88:c3:69:30:
                    64:ab:79:64:99:95:07:e3:0b:d9:42:ef:66:c8:3b:
                    3c:40:a6:8b:5f:a4:29:f6:2f:a3:91:7e:91:f0:bd:
                    4d:39:25:df:d8:14:31:51:a8:80:47:55:78:04:65:
                    23:58:d4:a0:46:d0:ad:f1:bb:72:84:e1:88:e0:ee:
                    ec:66:fb:d3:ce:aa:a0:e0:6f:85:43:24:b2:04:3f:
                    df:11:df:7a:86:95:db:25:9f:46:a2:40:ab:7d:74:
                    3c:c2:9f:ed:2f:a5:71:44:7f:90:47:1c:40:3e:35:
                    88:c2:b6:9b:a2:cd:b4:6f:9b:d1:ae:03:94:c5:e8:
                    57:c2:55:34:0e:f1:a6:d1:b9:35:eb:74:96:ed:15:
                    b8:6b:87:e6:3f:a6:2c:c3:55:6e:5d:93:98:e0:39:
                    50:8f:f4:c2:cc:9b:b7:40:f9:ce:ef:bd:4d:b7:2c:
                    d5:d6:22:25:ff:19:a6:97:1b:49:e5:b2:1c:94:f3:
                    af:7d:d5:fe:2b:f1:e6:b2:1f:cc:cc:75:6b:28:12:
                    5d:1a:c5:ce:ae:ca:81:37:4f:e4:57:69:91:0f:3f:
                    cc:1f:db:b8:2e:2c:40:d0:8e:57:08:24:c0:f8:3a:
                    02:38:33:dc:0e:c5:89:f9:65:33:dd:d4:4f:b1:3e:
                    6b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:77:B4:56:6F:2C:8B:B7:D3:CC:A4:50:36:F8:89:1E:CA:1D:74:8C
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/5ne0Vm8si7fTzKRQNviJHsoddIw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.162.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         bb:11:e6:5c:88:c5:2a:f3:b8:aa:61:0f:f8:e9:90:84:53:79:
         9c:b6:c5:09:53:d2:cb:df:b8:b6:29:ca:0f:44:ff:f9:21:11:
         89:23:2a:e1:da:2f:4c:8b:a9:4d:49:7c:41:66:51:da:a5:fe:
         07:3c:dd:ac:35:a7:b5:ff:5e:2b:8f:f3:b4:a7:76:aa:b6:aa:
         bd:54:54:6e:29:2d:dc:d9:69:46:3e:66:10:ce:1d:12:9b:bb:
         68:7d:11:1f:be:09:06:48:dd:db:aa:9b:fb:c8:e0:08:3a:97:
         57:6e:28:ea:25:d1:58:f9:80:e6:56:6c:27:c2:3c:b0:4e:65:
         b1:f6:1e:1c:67:75:12:3d:d6:47:df:49:96:de:05:de:90:16:
         04:c1:ca:1f:09:38:ae:fa:18:0e:b1:68:7c:e2:5a:a1:f9:df:
         8a:ad:a6:3a:3d:01:c7:fc:f2:6b:6e:89:ea:50:4c:34:2c:7a:
         59:a9:04:27:16:dd:48:35:d3:d5:9f:41:d0:a1:65:fd:e8:e3:
         6b:29:00:f8:72:2c:e1:db:73:cd:2c:c6:a0:27:61:56:16:e4:
         fc:6b:12:20:4a:57:0f:4f:e4:d9:dc:fb:0e:a1:53:ee:30:35:
         2e:fa:c9:9b:99:06:6e:29:32:7d:f2:94:de:e7:d5:28:1c:7c:
         8c:81:bf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org