Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Q1pc80mXNVSJEU_NlSoDchnH4Hk.roa
File:                     Q1pc80mXNVSJEU_NlSoDchnH4Hk.roa (raw, json)
Hash identifier:          R5fxn9BUHHpwvzn64cCA0qzbO5xkN7mbuKaMbkjsMGo=
Subject key identifier:   43:5A:5C:F3:49:97:35:54:89:11:4F:CD:95:2A:03:72:19:C7:E0:79
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0158
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Q1pc80mXNVSJEU_NlSoDchnH4Hk.roa
Signing time:             Thu 31 Oct 2024 01:30:53 +0000
ROA not before:           Thu 31 Oct 2024 01:30:53 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        118.238.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:30:53 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=435A5CF34997355489114FCD952A037219C7E079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b5:9d:18:43:0d:81:71:74:49:33:9b:95:d8:
                    49:54:18:fd:56:e0:4d:7c:78:2b:e3:57:47:a8:17:
                    58:71:78:16:12:9d:ac:3a:f3:b4:0f:86:7c:7e:88:
                    4a:31:d5:9c:66:11:c9:04:33:14:de:e8:9e:21:8a:
                    25:82:70:21:07:73:b7:aa:02:91:67:5b:7a:2f:c8:
                    27:b4:d1:90:28:39:60:19:17:f0:2e:b9:dc:6f:74:
                    e2:a2:46:55:19:91:63:86:9f:29:d0:85:be:92:bd:
                    1a:49:97:6d:da:29:43:10:fa:0c:67:55:56:2c:80:
                    4c:6c:f3:a4:3e:65:f0:31:98:ca:c1:8e:b4:50:60:
                    56:0c:d2:0b:6e:6a:52:51:b9:70:7a:2d:37:a3:7d:
                    9e:d1:48:da:a3:ce:41:f7:b5:7a:d3:79:3b:4b:be:
                    5d:6c:29:50:fd:49:21:9d:d4:42:93:d3:83:fe:a1:
                    22:04:3d:76:95:88:0c:64:ba:83:d0:9c:14:38:1c:
                    d5:7a:ca:2b:47:ea:98:53:ac:4e:9a:79:53:a9:0b:
                    80:c6:f4:b5:0b:22:2b:2a:4c:d4:05:cb:7e:68:bd:
                    2c:b9:72:74:ab:8b:8c:d8:2d:e9:66:24:03:2d:85:
                    e6:c7:4c:64:7b:55:29:bc:5a:aa:16:c7:46:b8:f0:
                    35:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5A:5C:F3:49:97:35:54:89:11:4F:CD:95:2A:03:72:19:C7:E0:79
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Q1pc80mXNVSJEU_NlSoDchnH4Hk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.238.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3b:3d:de:11:bb:2b:11:7c:8b:af:fe:60:ea:2e:92:34:8f:ee:
         cd:5f:a7:63:44:01:50:20:19:d6:de:89:c4:ff:df:46:cd:dd:
         97:a3:2d:7c:16:e4:57:c9:e6:35:2c:65:2c:12:ac:26:3e:07:
         ef:a4:4a:2e:d3:9f:56:a9:6e:6e:6f:b0:ba:7c:d3:ec:b9:84:
         28:db:1e:c5:53:3c:f2:ed:b6:ab:b1:27:62:65:7b:7b:cc:9d:
         41:5d:33:5e:07:3a:35:34:70:de:fd:77:73:c2:42:00:8e:24:
         7f:7e:c0:54:ef:6c:db:42:1c:63:3a:b8:ca:33:ad:d3:2e:db:
         84:5b:87:5d:36:53:68:eb:52:6e:e4:52:e0:3f:ba:0b:b9:98:
         5d:e9:3d:f0:d7:57:2f:0d:ef:d3:21:da:e3:b5:e4:21:e1:0b:
         10:3d:b8:32:5f:4d:a2:6a:0a:9a:bd:c5:de:26:b9:c4:ab:cf:
         cc:e3:fc:6a:9c:e5:1b:1d:f5:75:d7:4f:ee:d8:4a:ce:da:58:
         44:31:2d:26:86:be:a8:68:61:9c:e7:38:a2:d1:11:6a:10:65:
         64:93:95:b8:34:23:70:86:60:5f:b7:32:a2:04:91:26:8b:b9:
         0b:7e:f6:23:4b:3e:4c:38:32:f7:51:33:82:d8:de:8c:c1:d1:
         f8:c3:62:78
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNDEwMzEw
MTMwNTNaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQzNUE1Q0YzNDk5NzM1
NTQ4OTExNEZDRDk1MkEwMzcyMTlDN0UwNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqtZ0YQw2BcXRJM5uV2ElUGP1W4E18eCvjV0eoF1hxeBYSnaw6
87QPhnx+iEox1ZxmEckEMxTe6J4hiiWCcCEHc7eqApFnW3ovyCe00ZAoOWAZF/Au
udxvdOKiRlUZkWOGnynQhb6SvRpJl23aKUMQ+gxnVVYsgExs86Q+ZfAxmMrBjrRQ
YFYM0gtualJRuXB6LTejfZ7RSNqjzkH3tXrTeTtLvl1sKVD9SSGd1EKT04P+oSIE
PXaViAxkuoPQnBQ4HNV6yitH6phTrE6aeVOpC4DG9LULIisqTNQFy35ovSy5cnSr
i4zYLelmJAMthebHTGR7VSm8WqoWx0a48DWDAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUQ1pc80mXNVSJEU/NlSoDchnH4HkwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My9RMXBjODBtWE5WU0pFVV9ObFNvRGNobkg0SGsucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQHdu4AMA0GCSqGSIb3DQEBCwUAA4IBAQA7Pd4RuysRfIuv/mDqLpI0j+7NX6dj
RAFQIBnW3onE/99Gzd2Xoy18FuRXyeY1LGUsEqwmPgfvpEou059WqW5ub7C6fNPs
uYQo2x7FUzzy7barsSdiZXt7zJ1BXTNeBzo1NHDe/XdzwkIAjiR/fsBU72zbQhxj
OrjKM63TLtuEW4ddNlNo61Ju5FLgP7oLuZhd6T3w11cvDe/TIdrjteQh4QsQPbgy
X02iagqavcXeJrnEq8/M4/xqnOUbHfV110/u2ErO2lhEMS0mhr6oaGGc5zii0RFq
EGVkk5W4NCNwhmBftzKiBJEmi7kLfvYjSz5MODL3UTOC2N6MwdH4w2J4
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:44 2024 by rpki-client on console-ams.rpki-client.org