Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Tk0Y4oBr6BjjKm_TL4nAehqRA0c.roa
File:                     Tk0Y4oBr6BjjKm_TL4nAehqRA0c.roa (raw, json)
Hash identifier:          xmj3LMwEYPjoDMmSNZxYCWmaKvjgmodE/c2dC9G7MPs=
Subject key identifier:   4E:4D:18:E2:80:6B:E8:18:E3:2A:6F:D3:2F:89:C0:7A:1A:91:03:47
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0161
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Tk0Y4oBr6BjjKm_TL4nAehqRA0c.roa
Signing time:             Thu 31 Oct 2024 01:34:15 +0000
ROA not before:           Thu 31 Oct 2024 01:34:15 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        59.146.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:34:15 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=4E4D18E2806BE818E32A6FD32F89C07A1A910347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:86:e7:f3:9d:c3:2b:aa:36:18:91:95:8a:8f:
                    16:6b:bc:f0:c3:73:f0:a1:34:01:80:cc:15:36:4e:
                    17:78:d9:06:a3:2b:9d:b2:b5:69:4f:47:5d:fe:03:
                    37:fd:19:bd:6d:8e:db:8d:4d:34:90:97:8a:5a:58:
                    e1:7b:4d:73:e4:84:55:3d:b2:87:3c:a8:1f:26:56:
                    0a:df:e4:e3:43:39:46:13:2f:61:ee:f7:af:9c:c9:
                    4b:b8:5e:8f:7c:f0:55:8f:8f:fe:07:e0:d0:86:46:
                    33:79:40:33:26:1a:0b:85:93:ad:6f:b6:87:3a:11:
                    5f:cc:6d:92:57:de:d1:8a:ca:f1:e8:49:cd:d2:89:
                    4a:c2:0c:13:8f:54:f8:37:1a:50:ac:a8:71:97:0e:
                    82:6d:3c:75:56:a0:47:0a:26:9d:5e:8a:c7:72:73:
                    13:ed:0a:bf:1c:11:2d:32:5c:68:06:3c:8c:63:2c:
                    ef:e4:f9:f7:24:4e:97:09:72:c0:f8:17:eb:6c:84:
                    a1:a6:a6:61:95:07:82:32:85:96:9c:b3:e4:c9:a4:
                    bc:52:e7:82:96:06:33:ce:ed:b1:ec:7d:f5:35:ea:
                    f2:4f:8f:34:c0:bd:e6:ac:14:82:b9:7c:1d:40:f9:
                    4d:07:6d:79:2e:39:78:50:d6:60:8b:2a:ba:69:e6:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4D:18:E2:80:6B:E8:18:E3:2A:6F:D3:2F:89:C0:7A:1A:91:03:47
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Tk0Y4oBr6BjjKm_TL4nAehqRA0c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.146.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         11:f5:d4:dc:de:a3:e6:81:d5:a4:78:17:df:ac:95:24:ed:b4:
         43:87:f9:b5:18:96:a6:2c:5e:21:7d:48:94:e8:3d:72:9d:29:
         77:c3:23:0a:3c:0b:2a:7e:85:7f:51:7b:fe:bc:c1:e2:18:59:
         13:a1:20:f1:4e:cc:d0:45:33:83:55:9d:19:08:90:65:b1:79:
         c7:f9:39:9d:17:4c:3e:b0:33:f9:8e:a9:0c:59:9b:0a:d1:ee:
         52:26:80:b1:bf:56:4f:22:6f:ab:39:5d:89:48:1e:21:12:81:
         af:b7:85:18:c5:3a:f8:9f:34:3f:d9:94:35:86:b4:c9:dd:72:
         44:c5:85:f8:3c:ca:3e:c7:1f:26:ce:eb:04:fd:32:79:f1:f5:
         cd:61:fc:8b:5f:d8:55:bd:34:0f:08:14:0e:5b:61:30:08:42:
         b7:de:f5:af:e8:e1:84:0e:5d:eb:14:43:08:6e:64:fa:59:41:
         51:25:f7:25:72:7d:ee:8e:ca:7b:0b:28:04:d3:fd:da:4c:c7:
         09:5e:7c:38:8e:14:34:e8:d3:43:ab:f8:75:a0:bd:87:bc:9a:
         17:70:d3:37:f7:ca:49:90:2c:55:12:74:02:2c:00:4c:85:16:
         3e:88:34:09:0c:e5:41:74:dc:fa:20:6b:eb:d7:25:73:59:7d:
         48:ba:a0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:04 2024 by rpki-client on console-fra.rpki-client.org