Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/6LKAS8tOVJT9gnNq8Jsm_f3Ls4c.roa
File:                     6LKAS8tOVJT9gnNq8Jsm_f3Ls4c.roa (raw, json)
Hash identifier:          rsJTsQ2zR4MCD6f668PvkN5qEG/QJFD5Weo/d4qzL6Y=
Subject key identifier:   E8:B2:80:4B:CB:4E:54:94:FD:82:73:6A:F0:9B:26:FD:FD:CB:B3:87
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0150
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/6LKAS8tOVJT9gnNq8Jsm_f3Ls4c.roa
Signing time:             Thu 31 Oct 2024 01:30:48 +0000
ROA not before:           Thu 31 Oct 2024 01:30:48 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        210.250.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:30:48 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=E8B2804BCB4E5494FD82736AF09B26FDFDCBB387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:77:69:1d:e2:e3:58:15:11:bd:61:fc:f0:
                    bd:2c:ac:31:d2:0e:f2:cf:81:22:72:a5:8d:8e:fd:
                    2b:e9:f4:a5:30:25:18:0b:e0:e8:c1:9b:b7:1a:ba:
                    2e:8c:ca:d7:4a:ed:74:f4:45:70:ec:80:1a:e7:da:
                    e0:e9:00:96:1e:8c:b8:d6:ca:10:db:a6:f1:54:2a:
                    2c:85:fa:72:73:5a:a8:34:7c:0b:02:fe:12:58:8a:
                    ae:bd:e0:8c:af:d7:9b:0f:d0:fa:0e:4d:6e:56:64:
                    84:66:e9:ed:51:d3:75:cd:cc:f0:57:51:41:d9:52:
                    f9:31:60:4d:2f:38:8d:ed:bc:75:2c:66:72:9d:52:
                    af:a7:31:75:96:46:b4:4a:d7:9f:6f:a0:96:a0:b4:
                    4e:b9:f9:c9:a2:97:17:a9:9f:cd:11:77:72:e9:b8:
                    1a:04:be:70:2d:70:60:92:89:80:c8:0c:88:73:88:
                    35:ce:3c:3b:28:01:ea:5b:e1:86:0f:85:99:19:f7:
                    03:e2:bc:fc:9d:a0:f5:1d:1d:67:3b:3f:8c:df:38:
                    c2:8d:6e:77:ad:8c:18:d2:1e:67:bb:60:1e:38:2a:
                    53:7c:a1:11:94:cb:3f:6b:10:ea:0c:e6:38:ad:44:
                    27:b7:a3:32:5e:93:bd:df:a8:5c:8f:c8:16:9d:88:
                    33:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B2:80:4B:CB:4E:54:94:FD:82:73:6A:F0:9B:26:FD:FD:CB:B3:87
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/6LKAS8tOVJT9gnNq8Jsm_f3Ls4c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         81:58:ed:c5:13:18:b3:36:be:06:70:bc:27:75:4f:ff:1d:e1:
         da:a8:a1:6d:27:2a:83:bb:f7:24:f7:eb:e5:c1:52:36:ee:18:
         a5:21:d4:e8:30:1b:17:68:7d:b0:af:23:0b:1e:47:01:63:b0:
         49:33:a9:ff:18:41:eb:44:65:29:d6:af:7e:d1:0b:fc:e1:46:
         31:d5:ca:ba:2f:17:31:b6:5b:81:70:50:b4:f1:81:21:d2:50:
         0d:3b:0b:14:0c:d0:70:83:27:8d:1f:4e:f4:38:ea:67:ce:4c:
         37:10:66:d8:7c:62:43:54:86:da:05:17:d5:2d:6d:37:54:e4:
         48:68:38:61:d3:ee:7e:f6:3c:ae:3b:b7:09:53:64:45:00:34:
         ed:6b:44:2c:6b:d3:49:8b:53:d3:1e:00:d6:ef:7c:9d:3b:b6:
         4b:ec:3f:41:6f:e5:89:06:39:bb:fc:7a:1a:a6:38:bf:55:30:
         77:97:f1:2e:70:bb:1a:d7:d6:2f:f2:07:e3:cd:14:6c:14:44:
         99:98:9d:2b:a9:4a:53:7f:3a:d0:56:94:a3:32:c0:92:54:04:
         93:7a:ea:00:22:61:8d:6a:2f:fc:12:c7:32:7a:e3:b0:0c:b6:
         b0:e4:b5:95:40:09:10:14:3c:b8:90:56:d0:51:1c:15:29:01:
         8c:63:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org