Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/UaldJ83EeFcHEf6BA8U0camICAw.roa
File:                     UaldJ83EeFcHEf6BA8U0camICAw.roa (raw, json)
Hash identifier:          tXykxreGvde/OZcgN9AmH/S/1S8kp1pHn08GRBO1HR8=
Subject key identifier:   51:A9:5D:27:CD:C4:78:57:07:11:FE:81:03:C5:34:71:A9:88:08:0C
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0125
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/UaldJ83EeFcHEf6BA8U0camICAw.roa
Signing time:             Fri 01 Dec 2023 01:31:59 +0000
ROA not before:           Fri 01 Dec 2023 01:31:59 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        198.144.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Dec  1 01:31:59 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=51A95D27CDC478570711FE8103C53471A988080C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a5:5c:9f:77:53:07:22:b2:0f:5d:08:68:6f:
                    2f:6d:4b:02:6b:74:13:7b:81:9f:02:28:83:7b:de:
                    c8:18:9b:53:e4:1c:b1:d8:53:61:dc:d4:58:d2:17:
                    ef:44:3d:11:60:ce:6d:ea:b4:96:72:a8:a2:07:e2:
                    62:8a:19:bf:f8:6a:e2:46:5c:f0:1d:65:ee:b1:e5:
                    80:50:c4:93:36:97:fb:3a:53:32:15:72:94:8a:09:
                    81:6a:e0:65:45:58:dc:2f:9a:58:c4:c9:1b:2a:d5:
                    7b:62:1d:e4:73:b4:23:28:73:39:c0:d6:35:26:a8:
                    19:96:7e:09:98:93:a4:bd:11:44:45:af:e6:7b:be:
                    71:c3:bd:50:0a:4e:2b:b3:4d:e7:db:59:0f:4e:c0:
                    d9:1b:7c:06:e2:e9:fa:ce:43:ce:09:8b:5b:b4:06:
                    2c:36:dc:8f:e7:41:2e:c6:26:16:0c:8c:f8:f6:6b:
                    28:78:5a:f6:4e:49:bd:24:e3:c6:0b:d6:76:d0:99:
                    8b:1e:f5:39:e0:ba:81:d4:ab:3b:3c:85:75:96:71:
                    6c:12:7b:08:1f:bb:03:b3:00:fb:24:18:9d:7a:34:
                    17:23:d1:82:1f:db:e9:4a:af:a7:b3:aa:39:46:65:
                    8a:64:e8:83:bc:e0:44:2c:85:1f:7f:0a:ec:79:53:
                    ed:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A9:5D:27:CD:C4:78:57:07:11:FE:81:03:C5:34:71:A9:88:08:0C
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/UaldJ83EeFcHEf6BA8U0camICAw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.144.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:1e:bb:90:fa:dc:cf:a4:7f:e0:5a:5d:35:06:ae:d0:3e:97:
         ab:2b:82:71:7c:66:bb:2b:d8:a2:80:e9:a2:e4:ff:c4:ce:96:
         b5:d1:95:fc:40:9f:3c:8f:26:2a:97:e3:4f:8e:2b:c5:f6:25:
         40:32:7d:ca:72:f3:97:71:37:56:e3:ad:67:31:fa:44:95:e5:
         bd:8d:e3:e4:69:71:4c:10:21:d3:01:c7:d4:15:48:72:10:ab:
         7e:a5:b9:a7:82:47:55:41:16:20:a2:1f:03:78:f5:2f:26:99:
         84:ff:04:8c:dd:4f:02:6e:b3:bb:02:b8:9e:97:f2:42:ea:b9:
         cf:a4:b3:f4:b2:d9:e9:3f:11:c1:2e:2d:f3:f3:60:75:53:80:
         d6:9a:44:77:e4:f2:8e:8f:50:c6:8f:82:ac:71:38:68:3b:c3:
         9f:29:e2:6e:bc:e8:c8:4c:97:1b:f5:73:99:22:ea:7c:32:00:
         08:21:e3:02:95:af:bd:cc:8c:d7:89:d9:6f:14:0a:cd:31:2d:
         f7:2d:96:44:57:d0:99:84:b8:37:82:de:a9:1e:03:64:a5:bb:
         0e:4a:13:7f:46:57:de:f3:7b:49:dd:7a:9b:e9:de:70:ca:e3:
         fc:ea:ed:bf:c6:0e:68:13:f0:02:3d:25:e3:48:dd:44:9f:b0:
         b1:5b:6e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:52 2024 by rpki-client on console-fra.rpki-client.org