Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/IbRY4-uFX_e9KbfFFl0tby0A5CA.roa
File:                     IbRY4-uFX_e9KbfFFl0tby0A5CA.roa (raw, json)
Hash identifier:          JJF0x2MLrAmD++EH3kInRjKuzlFEAa71/552+e+lBcA=
Subject key identifier:   21:B4:58:E3:EB:85:5F:F7:BD:29:B7:C5:16:5D:2D:6F:2D:00:E4:20
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       010D
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/IbRY4-uFX_e9KbfFFl0tby0A5CA.roa
Signing time:             Fri 01 Dec 2023 01:30:14 +0000
ROA not before:           Fri 01 Dec 2023 01:30:14 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        110.66.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Dec  1 01:30:14 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=21B458E3EB855FF7BD29B7C5165D2D6F2D00E420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fd:a5:3f:e7:b8:ff:2a:b0:25:b8:8f:f8:0f:
                    1d:b7:47:22:10:e9:cd:70:92:19:e7:63:36:60:9d:
                    a5:b1:fa:3b:5f:34:30:ff:06:37:e9:30:c0:c1:f1:
                    87:0a:53:d9:71:42:72:05:54:73:29:1e:36:c1:69:
                    c4:7f:ad:87:f8:05:9e:da:31:dc:13:8e:00:b3:76:
                    d2:33:31:1c:47:2a:e4:48:0a:1c:43:97:2c:52:10:
                    72:00:ef:86:c6:10:d7:ee:bb:85:5c:e5:8b:22:ac:
                    ce:23:a7:25:f2:74:43:8b:75:6b:65:bc:41:7e:0d:
                    2c:b6:d6:e9:a8:15:b4:1c:05:cf:78:0d:0a:e8:6e:
                    38:5f:be:40:3b:e5:12:b5:d0:94:05:c7:2e:c2:2b:
                    ce:32:af:4e:f0:f9:ae:7e:a6:bf:30:66:20:5e:9b:
                    5b:40:b0:a2:e9:db:61:9f:46:e0:3b:70:c6:0f:b9:
                    34:82:64:4c:66:b9:10:d4:15:87:34:45:0a:ee:5a:
                    30:36:90:bb:82:1e:78:72:9f:9d:b4:dd:de:bb:39:
                    5b:e7:49:03:c2:0f:2f:9b:ea:d6:a2:92:e4:8a:68:
                    86:e3:fc:92:7a:a6:1c:70:27:cb:65:41:1d:c1:79:
                    55:ee:a6:1e:37:cb:c6:8f:a8:c1:3c:19:55:a8:2c:
                    4d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B4:58:E3:EB:85:5F:F7:BD:29:B7:C5:16:5D:2D:6F:2D:00:E4:20
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/IbRY4-uFX_e9KbfFFl0tby0A5CA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.66.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         20:6a:7a:1a:b0:23:cf:da:fc:2f:db:8b:0a:c1:a1:8c:15:d7:
         c7:ef:38:8c:d2:b5:f9:3b:58:4d:2c:22:2c:f0:5b:c1:a7:6e:
         26:59:67:c4:4a:f7:1e:df:d6:72:01:08:fb:5b:85:b3:85:b0:
         82:44:ed:1c:fe:b5:c7:ab:4e:4e:f8:72:43:61:ac:08:ca:12:
         19:a3:68:bd:e8:ed:a0:39:60:de:0b:d9:3b:ba:c1:db:60:2c:
         7f:1e:83:32:b5:47:6e:aa:a0:64:d3:16:a8:16:59:7a:48:d6:
         d4:a0:5f:6c:9c:85:b4:5b:4e:3f:b0:93:4b:53:8b:9c:50:58:
         4a:3b:c8:f0:db:28:92:da:95:4c:f5:54:57:b5:9a:7b:38:c7:
         8d:83:53:1b:04:93:35:69:98:77:8a:ad:cc:cb:43:d5:6f:e0:
         c0:ca:35:b5:ee:35:95:2f:30:18:a6:83:2b:1d:b0:64:2e:38:
         77:82:8f:36:f1:09:5f:b0:3c:f3:42:17:c3:fb:14:67:69:de:
         e5:d5:fb:d5:db:00:93:10:ce:a2:90:ba:10:7b:0f:10:e9:9b:
         fe:d2:cd:b6:4e:db:18:1e:8a:5d:e9:3d:d8:8d:91:36:a8:83:
         79:06:ff:1a:38:4e:21:34:b0:b8:fd:e9:c1:50:c7:38:a8:d3:
         68:b2:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:52 2024 by rpki-client on console-fra.rpki-client.org