Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/DBOyniotYkiBK4iNtMsld9xv0qs.roa
File:                     DBOyniotYkiBK4iNtMsld9xv0qs.roa (raw, json)
Hash identifier:          JXuoKAD8dAcma1fZOW5QXLLQYpVBQ1IAFGCa2Iqh3xQ=
Subject key identifier:   0C:13:B2:9E:2A:2D:62:48:81:2B:88:8D:B4:CB:25:77:DC:6F:D2:AB
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       015D
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/DBOyniotYkiBK4iNtMsld9xv0qs.roa
Signing time:             Thu 31 Oct 2024 01:30:55 +0000
ROA not before:           Thu 31 Oct 2024 01:30:55 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        103.2.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:30:55 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=0C13B29E2A2D6248812B888DB4CB2577DC6FD2AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:dd:2c:79:bc:b5:74:24:e2:64:4c:73:03:
                    70:ba:45:8b:56:4b:66:36:91:ea:35:a4:be:d0:ed:
                    f0:2e:04:b4:7b:c3:db:fb:83:d4:1b:06:2a:61:f8:
                    48:43:ee:2b:80:71:f8:9e:03:7f:56:37:9b:c6:35:
                    96:4b:0b:9a:2c:4b:16:38:fd:b8:7c:4e:b7:be:b9:
                    12:0f:de:f7:3a:c1:f5:60:87:ed:2e:e8:94:3e:45:
                    b7:33:ee:06:6e:1a:8c:94:7d:8b:26:4c:b2:f8:b3:
                    48:bc:8b:03:d5:61:0c:46:96:35:98:08:62:71:5d:
                    9c:80:fc:f9:fc:bf:16:d9:35:6f:f1:c3:a2:1a:95:
                    2f:b2:c3:73:24:4b:1b:30:c9:b2:d0:7d:10:eb:67:
                    70:0d:8c:6b:20:99:22:0b:e6:2f:5a:7c:ad:2b:6d:
                    2f:f5:2b:19:1b:b8:07:f7:9c:fe:32:4b:d2:04:23:
                    29:ac:eb:1b:e2:28:92:31:4b:66:7a:26:02:a4:37:
                    ba:df:99:02:81:55:73:af:1f:c8:73:b4:da:1a:a1:
                    7b:9d:c8:2c:35:c8:93:3e:db:8e:37:6a:4e:da:e6:
                    8d:33:4a:d2:6b:7c:c7:d7:75:40:6c:c5:84:e2:c7:
                    4b:19:57:6e:05:c1:cc:9d:bd:96:a7:79:00:9d:45:
                    6b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:13:B2:9E:2A:2D:62:48:81:2B:88:8D:B4:CB:25:77:DC:6F:D2:AB
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/DBOyniotYkiBK4iNtMsld9xv0qs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:c8:cd:a2:e1:ae:b3:4e:f9:fa:bd:cc:8f:4f:35:9f:37:e9:
         f7:42:da:97:b2:30:3f:0a:f4:d0:8f:40:65:13:43:04:ef:b6:
         9e:e7:d0:b7:56:6f:d6:50:ce:e2:1c:5c:d1:3e:55:c0:dc:4f:
         28:30:3d:4b:6c:00:8e:e7:d2:e5:2d:35:6a:8f:92:63:fe:b6:
         a8:d1:9d:51:01:45:29:41:46:0b:9c:cd:33:2d:6c:0c:6e:b4:
         81:06:b7:3d:96:a7:d4:1a:2c:ec:cc:d4:63:c4:5c:fa:f0:8f:
         8a:73:5f:d9:3c:3f:21:59:89:c2:a3:46:a9:55:55:58:82:55:
         80:d2:2b:f5:48:92:76:96:7b:b7:69:80:ee:45:1c:7f:26:bf:
         e5:19:9e:62:38:3a:85:db:16:6b:62:29:92:2b:aa:3c:49:64:
         b7:7d:5e:91:da:9b:1e:98:36:7c:1f:94:c1:76:e1:6c:49:75:
         e3:62:53:44:94:81:19:d1:36:7d:06:d3:03:c3:04:65:a9:53:
         6b:e0:cb:f1:80:64:db:03:e2:0e:ac:64:ec:f5:e3:8e:2d:5e:
         ef:10:be:30:f0:75:76:7c:a2:41:48:9c:c8:0f:2b:af:00:04:
         cb:e8:0f:50:e5:2c:72:54:ea:b3:df:ee:a9:aa:e1:32:ba:21:
         78:e4:7e:db
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNDEwMzEw
MTMwNTVaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBDMTNCMjlFMkEyRDYy
NDg4MTJCODg4REI0Q0IyNTc3REM2RkQyQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3L90seby1dCTiZExzA3C6RYtWS2Y2keo1pL7Q7fAuBLR7w9v7
g9QbBiph+EhD7iuAcfieA39WN5vGNZZLC5osSxY4/bh8Tre+uRIP3vc6wfVgh+0u
6JQ+Rbcz7gZuGoyUfYsmTLL4s0i8iwPVYQxGljWYCGJxXZyA/Pn8vxbZNW/xw6Ia
lS+yw3MkSxswybLQfRDrZ3ANjGsgmSIL5i9afK0rbS/1KxkbuAf3nP4yS9IEIyms
6xviKJIxS2Z6JgKkN7rfmQKBVXOvH8hztNoaoXudyCw1yJM+2443ak7a5o0zStJr
fMfXdUBsxYTix0sZV24FwcydvZaneQCdRWsbAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUDBOyniotYkiBK4iNtMsld9xv0qswHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My9EQk95bmlvdFlraUJLNGlOdE1zbGQ5eHYwcXMucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZwIwMA0GCSqGSIb3DQEBCwUAA4IBAQBNyM2i4a6zTvn6vcyPTzWfN+n3QtqX
sjA/CvTQj0BlE0ME77ae59C3Vm/WUM7iHFzRPlXA3E8oMD1LbACO59LlLTVqj5Jj
/rao0Z1RAUUpQUYLnM0zLWwMbrSBBrc9lqfUGizszNRjxFz68I+Kc1/ZPD8hWYnC
o0apVVVYglWA0iv1SJJ2lnu3aYDuRRx/Jr/lGZ5iODqF2xZrYimSK6o8SWS3fV6R
2psemDZ8H5TBduFsSXXjYlNElIEZ0TZ9BtMDwwRlqVNr4MvxgGTbA+IOrGTs9eOO
LV7vEL4w8HV2fKJBSJzIDyuvAATL6A9Q5SxyVOqz3+6pquEyuiF45H7b
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org