Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/AU3clkjPUaCKpN0tKN37bQRMEpk.roa
File:                     AU3clkjPUaCKpN0tKN37bQRMEpk.roa (raw, json)
Hash identifier:          Z7ME0GTRFN/WAOYDwmT5RZ8x0YXw9w94CVKEA+eZ/AQ=
Subject key identifier:   01:4D:DC:96:48:CF:51:A0:8A:A4:DD:2D:28:DD:FB:6D:04:4C:12:99
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       016F
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/AU3clkjPUaCKpN0tKN37bQRMEpk.roa
Signing time:             Thu 31 Oct 2024 01:34:23 +0000
ROA not before:           Thu 31 Oct 2024 01:34:23 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        121.103.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:34:23 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=014DDC9648CF51A08AA4DD2D28DDFB6D044C1299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:e8:f8:fb:f4:23:a3:93:91:10:7b:7b:f9:
                    63:d4:fb:f0:1f:f6:28:0b:c3:0d:ea:0f:5d:1f:7e:
                    71:b2:04:d0:a7:c8:65:49:b2:c1:b3:26:c5:b4:b3:
                    d2:25:31:1d:4e:af:2d:fd:82:ba:66:6a:8e:20:77:
                    70:4f:65:6e:ac:da:13:46:44:e8:6f:9b:15:d2:f9:
                    68:2f:4b:2f:ae:97:c9:41:a4:a1:f6:c4:6e:49:5c:
                    2c:18:d3:a0:2c:88:a3:8e:10:e5:95:ca:d3:cd:3f:
                    33:7a:86:c6:9d:0c:26:09:19:42:f5:da:6f:94:68:
                    99:85:98:f2:eb:73:b5:7b:4b:fc:36:39:7f:93:23:
                    c6:1d:75:73:e0:b1:6d:86:7b:e8:c3:d2:bf:6a:0f:
                    b7:41:6f:b1:03:59:8c:aa:ab:67:31:82:ae:de:80:
                    e2:74:9d:c1:7a:b4:af:67:e2:2c:22:c0:38:9b:e7:
                    e8:7b:a9:76:c0:9a:f8:12:0c:37:cd:df:e6:89:5d:
                    4f:fa:fe:a9:03:b3:31:98:bf:fd:31:8b:38:bf:f5:
                    6a:73:66:dd:0d:47:01:95:f2:2f:87:2f:ed:d6:72:
                    8a:c6:9c:6e:e8:0e:dc:f6:80:a9:eb:9d:99:94:21:
                    bf:2e:00:c5:f2:1d:c8:f1:fb:0d:e1:ea:24:c5:99:
                    60:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4D:DC:96:48:CF:51:A0:8A:A4:DD:2D:28:DD:FB:6D:04:4C:12:99
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/AU3clkjPUaCKpN0tKN37bQRMEpk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         11:64:1a:3f:11:ce:da:e8:96:1b:6e:47:c7:09:58:1d:f5:bb:
         e5:28:a8:49:54:1c:b4:dc:52:46:b6:b6:2b:09:b7:d2:99:b1:
         de:07:30:aa:d6:c6:6e:04:3d:e1:ed:a0:a0:96:b6:ba:d5:87:
         a6:6f:a7:48:60:02:6e:82:3c:54:45:81:0c:20:a2:f1:00:b9:
         7c:b8:a5:e5:56:84:dc:33:2f:eb:c1:40:10:bc:79:7c:63:16:
         51:05:46:bc:33:dd:5a:d1:d8:19:ea:86:0d:22:70:47:45:27:
         e9:a0:8c:78:98:4d:0a:9b:f5:da:5c:82:29:17:75:b8:dc:55:
         5b:b4:13:e1:ee:f4:47:1f:cb:de:7c:71:2d:0e:8f:4b:81:12:
         4b:7d:42:d1:08:c7:0b:ca:6a:ff:18:b3:2b:02:92:11:dd:af:
         59:cb:51:51:09:32:6e:30:8f:00:39:b6:a2:0a:77:05:d2:9a:
         ea:b9:cd:13:d0:08:96:98:7f:74:77:e9:bb:8e:35:f8:74:c0:
         e3:df:ff:1e:1c:01:fe:90:96:46:17:60:1b:04:53:77:c7:c6:
         25:04:59:02:36:fb:d9:1f:d9:fc:cf:fe:9e:06:e7:bc:62:75:
         56:80:bc:ac:39:4b:04:15:5d:f1:dc:34:73:20:cf:40:b4:3d:
         7d:a4:8c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:14 2024 by rpki-client on console-fra.rpki-client.org