Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Ou5lk33Np9oeQQHZbw4crf32kpg.roa
File:                     Ou5lk33Np9oeQQHZbw4crf32kpg.roa (raw, json)
Hash identifier:          XhdBg4n5RY747BnK9CXCYTlK76JBMEWhzbIYMr19nzE=
Subject key identifier:   3A:EE:65:93:7D:CD:A7:DA:1E:41:01:D9:6F:0E:1C:AD:FD:F6:92:98
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       014E
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Ou5lk33Np9oeQQHZbw4crf32kpg.roa
Signing time:             Thu 31 Oct 2024 01:30:47 +0000
ROA not before:           Thu 31 Oct 2024 01:30:47 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        124.219.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:30:47 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=3AEE65937DCDA7DA1E4101D96F0E1CADFDF69298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:75:de:63:5c:72:b0:32:ae:b2:0e:62:ba:c1:
                    83:35:e2:bc:ae:14:26:a7:cb:dd:09:75:ed:e1:70:
                    1b:88:ae:77:35:97:66:55:83:d1:fb:c4:6d:f2:f0:
                    d9:2b:c9:f8:a3:35:a0:fd:63:78:25:0b:37:76:70:
                    f0:76:8e:4a:a1:4b:58:c8:6f:1c:e8:86:fa:24:a9:
                    14:f4:51:52:3e:a6:62:da:b5:f3:52:59:c3:23:c2:
                    0f:30:9d:e1:41:90:f5:59:7e:61:d5:89:21:4a:71:
                    d6:cf:dd:c0:e1:e2:5a:3d:c9:98:a4:6c:e5:1b:c5:
                    fd:f2:b3:8d:f1:de:55:58:a8:65:33:fd:91:b7:c8:
                    5b:f4:de:6e:7c:e4:db:09:77:81:55:b2:ef:ce:55:
                    a6:35:fc:b1:82:84:64:cd:97:e0:cf:65:7b:be:74:
                    b1:3a:6f:00:67:4b:27:48:74:48:90:5e:a2:4d:53:
                    1c:6d:fa:77:01:66:6b:b8:ef:71:df:8e:87:fc:87:
                    f5:c9:7c:57:a4:96:b7:a1:a1:f4:7a:4d:0d:62:ba:
                    17:61:48:5a:43:36:00:1b:61:5d:49:0f:44:21:50:
                    61:40:65:b2:0d:27:92:78:2c:eb:cc:ba:8e:95:2f:
                    33:cf:cc:48:60:f1:92:4f:be:8b:a3:bc:e0:ea:af:
                    ab:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EE:65:93:7D:CD:A7:DA:1E:41:01:D9:6F:0E:1C:AD:FD:F6:92:98
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Ou5lk33Np9oeQQHZbw4crf32kpg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.219.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         64:4a:e5:59:70:c4:87:69:31:bd:67:6e:70:54:7b:28:75:b4:
         79:bd:e6:40:81:c4:6d:58:6b:7d:63:9d:1b:3c:37:65:8b:28:
         3e:c1:ce:5e:d2:06:bb:f1:9a:17:3d:da:e2:21:bd:be:2e:e7:
         fc:41:76:a2:4c:c4:c2:d9:fa:08:70:ec:f5:db:fe:9d:f9:be:
         25:8b:6a:07:e1:2b:89:1a:89:17:5b:8c:da:7b:fc:75:7b:22:
         f4:a5:50:8c:4c:12:f1:67:be:af:fb:91:5a:f9:41:93:df:c4:
         17:1d:8a:9e:e4:48:8f:a7:34:cb:f7:4f:a7:29:05:dd:13:14:
         a2:14:f8:88:4b:9c:7d:19:8e:ee:c9:30:c1:e6:5e:5d:6e:d1:
         90:b5:94:47:3a:6d:40:f1:89:20:8c:c7:6f:6c:6b:93:64:d0:
         11:ea:75:21:d1:61:0b:6a:0e:99:35:d9:8e:c6:ba:93:32:0c:
         ba:b4:3d:93:d0:d1:8d:05:8c:f6:84:64:71:5a:3e:ce:cc:7e:
         48:4b:97:da:1f:c5:d4:d6:98:1c:da:90:3c:d1:6e:76:be:75:
         82:90:0e:bd:1a:cc:68:85:23:98:e4:ab:29:66:fd:27:0c:71:
         66:f4:41:cf:8f:be:3b:21:68:ac:b2:ae:87:f2:48:42:99:a0:
         9e:9b:ad:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:04 2024 by rpki-client on console-fra.rpki-client.org