Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/JEgJw4ZIcvpJjOVC60_timE99TE.roa
File:                     JEgJw4ZIcvpJjOVC60_timE99TE.roa (raw, json)
Hash identifier:          gTZ5uPiZFXVEJ4YDczTIRR5rIPDdgpl+JDoutYQbaCg=
Subject key identifier:   24:48:09:C3:86:48:72:FA:49:8C:E5:42:EB:4F:ED:8A:61:3D:F5:31
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0143
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/JEgJw4ZIcvpJjOVC60_timE99TE.roa
Signing time:             Wed 31 Jul 2024 01:28:16 +0000
ROA not before:           Wed 31 Jul 2024 01:28:16 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        103.241.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jul 31 01:28:16 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=244809C3864872FA498CE542EB4FED8A613DF531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:55:6b:3a:cd:12:1e:ce:f8:61:96:c8:dc:
                    a7:78:2a:c4:be:15:d9:54:cb:b5:c3:25:87:9f:bb:
                    94:20:f7:8d:e7:e0:cf:d5:f1:33:5b:2b:e4:66:83:
                    cf:7a:e7:31:a3:2a:0e:e9:50:1a:c3:e5:43:4c:5f:
                    f8:a5:d8:a2:a6:d8:9b:09:82:5e:f7:16:6a:e7:05:
                    c0:ff:ca:6b:6b:10:d5:9e:fa:46:17:59:87:11:eb:
                    a8:b1:7d:e3:c3:34:2b:96:86:12:04:18:e1:93:6a:
                    6b:4b:01:02:51:0c:68:e9:22:c1:32:96:ae:b4:2e:
                    37:fc:71:69:f9:cc:26:6b:1f:da:71:bb:94:10:20:
                    1d:5c:0a:ad:d6:26:b7:1a:7a:1b:40:d8:dd:31:96:
                    b4:fe:9d:0f:e9:ae:6c:88:3e:a7:0d:68:c3:11:95:
                    8b:19:a4:3f:fd:69:2b:14:61:8e:65:3a:f8:78:78:
                    35:9f:ae:cf:1d:91:5a:00:fe:c5:f8:91:24:29:82:
                    9a:28:4a:53:ae:ba:2a:e2:ac:14:c3:31:89:a9:ce:
                    ee:84:a5:c3:a3:20:96:b3:85:1f:d1:55:0e:0d:32:
                    d0:77:8f:76:04:9b:0c:b2:ed:81:ef:eb:71:46:83:
                    e5:dd:c3:78:40:18:bc:04:dc:0a:82:57:fd:dc:dc:
                    12:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:48:09:C3:86:48:72:FA:49:8C:E5:42:EB:4F:ED:8A:61:3D:F5:31
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/JEgJw4ZIcvpJjOVC60_timE99TE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:e7:25:87:ad:d8:01:70:64:8a:62:b6:73:14:58:98:9d:c7:
         3f:0d:bf:47:6a:0e:8d:0c:7f:83:5c:2a:a7:64:d2:e3:cb:fe:
         1b:8f:ca:5a:6a:a7:73:1c:23:4d:51:b9:98:15:8f:70:ec:2f:
         ee:a9:06:6a:33:80:88:bd:1a:66:d8:49:a5:e0:e5:52:95:b5:
         14:33:99:d6:80:0e:da:a0:9e:c9:72:08:59:15:7a:25:1c:ea:
         b2:0b:7c:38:b8:23:83:3d:fa:78:dc:12:46:5c:d2:f9:32:08:
         f8:89:29:cd:11:5e:70:f0:4d:bd:4c:02:22:bb:65:87:42:54:
         10:fb:f5:14:35:5c:75:cc:da:de:d2:fd:e3:b2:78:2e:87:8e:
         0d:92:7b:f8:f5:75:fb:e3:49:cc:e0:56:19:89:af:f4:da:9a:
         38:f8:78:44:74:b2:10:b8:72:f6:c1:51:b6:ed:63:ac:ac:ed:
         fb:90:46:c2:9c:6e:5f:1e:b9:c6:72:a9:ab:dc:35:1d:db:91:
         94:71:b1:18:96:f1:e1:dc:e6:a4:ff:a3:7c:7b:07:de:10:a6:
         e7:58:a5:bd:24:64:5f:34:a3:2a:32:24:22:55:b0:15:52:71:
         b3:42:dc:2e:7f:50:32:b5:68:2f:70:f6:f1:72:e7:d4:3f:94:
         f4:08:32:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:04 2024 by rpki-client on console-fra.rpki-client.org