Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/TjVdRVEod2y35EWXfZsctjrDVIk.roa
File:                     TjVdRVEod2y35EWXfZsctjrDVIk.roa (raw, json)
Hash identifier:          XFsGTGOESCJpJSGo0UrdgryDlZHcx8xV3OPv0BOor0o=
Subject key identifier:   4E:35:5D:45:51:28:77:6C:B7:E4:45:97:7D:9B:1C:B6:3A:C3:54:89
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0129
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/TjVdRVEod2y35EWXfZsctjrDVIk.roa
Signing time:             Fri 01 Dec 2023 01:32:01 +0000
ROA not before:           Fri 01 Dec 2023 01:32:01 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        121.103.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Dec  1 01:32:01 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=4E355D455128776CB7E445977D9B1CB63AC35489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fd:c4:59:34:40:70:ca:f7:62:98:9b:1e:a4:
                    5d:75:a1:22:7d:a0:6f:29:53:aa:da:aa:20:a3:b4:
                    3b:0e:93:63:47:e3:e7:fe:a8:08:aa:3b:41:62:12:
                    6c:d1:83:d8:6d:da:25:67:56:95:28:70:16:14:62:
                    ff:39:1b:58:22:42:24:5f:64:cf:b6:5d:8f:f9:a2:
                    ce:68:14:7d:99:fd:9e:5b:28:ec:43:7a:0f:6d:62:
                    23:5f:9a:e7:7d:47:74:d1:bb:e6:69:5c:0c:ae:95:
                    fe:9c:2c:e1:d6:ad:69:37:7f:4c:3d:ac:5e:6b:40:
                    24:b1:4f:e3:5b:87:38:99:ed:92:73:6c:09:66:29:
                    d5:4d:fb:23:b0:fd:9e:d4:da:58:e8:0d:a7:27:53:
                    66:85:fe:1a:2f:90:7b:73:d0:46:ec:17:d4:e9:0a:
                    fe:57:8e:01:34:be:ab:59:53:cc:71:1f:96:4f:08:
                    b5:ce:60:a6:58:a0:48:dc:5c:b2:f7:49:d4:54:b3:
                    89:5f:ed:17:d0:e1:ee:ce:a1:0e:a3:35:ee:b4:1a:
                    6e:f7:fa:85:d1:50:e2:e0:2d:98:f5:8d:7a:a6:0d:
                    af:d3:13:f9:ce:25:8b:6e:ca:48:d6:c8:1e:21:58:
                    82:8e:52:01:af:85:f9:ca:4d:50:0d:f4:95:4d:97:
                    fe:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:35:5D:45:51:28:77:6C:B7:E4:45:97:7D:9B:1C:B6:3A:C3:54:89
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/TjVdRVEod2y35EWXfZsctjrDVIk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:2c:4d:c8:ec:4f:62:a4:c3:8a:35:5a:f7:37:a8:99:9d:39:
         84:fe:53:7d:a0:36:6a:f3:17:24:bb:f3:62:38:a0:46:a5:c5:
         db:84:b6:62:d0:e8:62:cd:ee:29:81:c3:d5:5d:e7:e7:d7:3c:
         9e:7b:64:9f:7f:50:b5:90:b0:50:99:05:a5:93:c1:e2:b1:76:
         47:28:6a:8b:a5:9c:30:ce:8c:9a:a1:83:21:7d:06:6e:6e:42:
         96:e7:40:28:99:e8:e5:f9:69:f2:0a:25:a2:e6:bd:ef:ac:f9:
         93:72:01:7f:44:20:62:da:a8:a0:24:44:09:16:86:1c:94:fd:
         00:a2:7a:d6:c2:a2:6c:5c:69:35:31:c4:c2:a2:b3:d9:d3:9c:
         24:14:91:77:ed:2f:6d:65:f4:22:d7:73:66:cd:00:8b:f5:2f:
         b7:98:73:46:e6:03:07:61:e6:53:61:98:c1:66:c7:c5:11:60:
         d7:fb:f4:ac:f0:4d:34:3b:19:2f:fb:28:80:4d:21:b8:91:0e:
         bd:ed:a3:97:f8:13:0b:8f:21:01:39:2e:a7:d5:2e:ec:12:e1:
         3a:c8:d7:55:60:9f:fb:af:ae:8f:bc:3e:04:59:56:1d:6a:69:
         0d:1c:77:40:c9:6e:64:51:55:e0:1a:24:55:a5:70:08:7a:f8:
         fa:24:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:52 2024 by rpki-client on console-fra.rpki-client.org