Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/RM0Au40C4KABQm_eGeF3ixvHOb0.roa
File:                     RM0Au40C4KABQm_eGeF3ixvHOb0.roa (raw, json)
Hash identifier:          fbP4t92PIpG+fx9jcUPF8Ki6LH+wPAYyJOjhc11kQMU=
Subject key identifier:   44:CD:00:BB:8D:02:E0:A0:01:42:6F:DE:19:E1:77:8B:1B:C7:39:BD
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       010C
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/RM0Au40C4KABQm_eGeF3ixvHOb0.roa
Signing time:             Fri 01 Dec 2023 01:30:11 +0000
ROA not before:           Fri 01 Dec 2023 01:30:11 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        210.156.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Dec  1 01:30:11 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=44CD00BB8D02E0A001426FDE19E1778B1BC739BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:38:df:89:32:b3:c1:5a:ad:de:28:59:02:e3:
                    17:b5:4a:a6:a1:c3:5e:ef:f6:00:bd:57:4b:8e:e1:
                    ec:4b:7c:b4:45:b2:aa:a2:3d:df:0e:7d:b6:39:7c:
                    7d:0b:5c:27:be:8e:a0:d9:25:b3:e1:a0:a7:e4:ef:
                    03:ec:d1:a3:c5:2e:1e:89:9b:14:92:64:30:8b:bf:
                    90:e3:ed:4a:8d:d2:23:12:34:6d:50:1c:cf:06:e7:
                    3a:f9:42:5b:70:54:b3:58:af:54:a0:d5:41:cf:35:
                    60:2a:65:de:dc:2d:f5:cd:ac:0d:c0:5a:af:7a:b7:
                    7f:fe:3d:22:47:26:64:44:29:89:0a:3f:17:dd:7d:
                    9b:0c:01:a8:7a:3f:a9:90:f6:78:80:8f:5d:1e:70:
                    e2:a5:5c:68:bf:8b:5b:3b:5a:50:20:40:6b:80:2e:
                    68:05:9f:1c:9e:13:fa:d5:b9:c0:3c:34:9a:bc:2a:
                    df:c0:91:f2:cd:cf:80:b1:1f:88:6b:39:f4:dc:81:
                    45:50:99:ff:cd:96:77:b5:30:a9:7f:47:88:c7:02:
                    40:24:c4:e2:1e:63:3c:72:c1:0f:28:ac:31:90:08:
                    50:4a:fd:ff:2b:5a:31:bf:a9:c7:b3:b8:5b:31:b1:
                    db:a9:86:18:5e:f2:e3:6a:86:d4:2d:97:87:c7:7e:
                    75:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CD:00:BB:8D:02:E0:A0:01:42:6F:DE:19:E1:77:8B:1B:C7:39:BD
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/RM0Au40C4KABQm_eGeF3ixvHOb0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.156.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:23:c7:45:60:78:96:62:ea:e7:b3:c1:a6:34:3f:99:4b:76:
         69:bf:de:00:36:f8:26:5e:5c:27:33:26:dd:04:cc:4d:b2:eb:
         be:c1:16:39:5a:3a:7a:91:e3:0c:ce:67:62:73:6b:be:c1:83:
         10:12:4d:bb:cd:b7:15:df:dd:9d:81:52:65:09:0c:ac:26:0c:
         fe:ab:cd:3a:27:41:ce:11:00:5c:d5:04:78:2f:60:49:e6:49:
         2c:75:e7:8b:6d:84:52:0b:27:8d:99:62:f8:0f:36:a3:ea:fa:
         15:80:b6:a8:99:33:1f:bd:08:5d:9b:c1:9b:fb:76:57:f2:2b:
         3c:28:5d:f5:42:7d:c7:4f:f5:98:83:03:40:65:70:0a:c2:de:
         ac:2d:ee:5e:49:e1:6d:35:f1:1a:d6:36:81:9d:45:ec:b7:b6:
         c6:9f:7a:21:36:36:65:56:02:86:1e:13:c8:6b:97:3d:e9:92:
         a4:f0:63:e1:06:50:3c:6f:4e:dd:f4:ef:a6:2a:7d:40:2c:b4:
         77:60:7a:bb:ca:f0:25:bf:0c:21:5b:e1:81:83:d5:15:d2:df:
         9a:b2:96:44:6b:e7:b4:28:33:20:25:e8:a2:71:1c:0e:f5:1d:
         ef:e3:8e:df:13:43:b1:a9:92:56:67:0e:7b:67:db:69:65:c2:
         f6:b3:0d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:29:00 2024 by rpki-client on console-ams.rpki-client.org