Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/V0lIEzUaTHmFKJEKFTuetCpJm_s.roa
File:                     V0lIEzUaTHmFKJEKFTuetCpJm_s.roa (raw, json)
Hash identifier:          6znOBloPeSZMG1ShYh79xDg4QMinRkcS2VKosfI6EFg=
Subject key identifier:   57:49:48:13:35:1A:4C:79:85:28:91:0A:15:3B:9E:B4:2A:49:9B:FB
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       8F
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/V0lIEzUaTHmFKJEKFTuetCpJm_s.roa
Signing time:             Thu 31 Oct 2024 01:30:53 +0000
ROA not before:           Thu 31 Oct 2024 01:30:53 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        164.70.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 23:53:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Oct 31 01:30:53 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=57494813351A4C798528910A153B9EB42A499BFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:59:ff:d0:87:db:9c:49:22:76:1d:28:3a:02:
                    a7:46:7f:3f:1f:ef:2b:2a:e3:c1:c4:94:5b:87:33:
                    f0:91:4f:49:94:58:bd:f2:2e:7d:b3:fd:d8:95:c4:
                    d9:ab:af:62:e4:2c:f2:0a:c8:2f:99:57:4b:77:e4:
                    3d:d7:40:10:1b:15:59:b5:e6:f9:00:60:43:12:dd:
                    e4:51:b3:1b:89:21:e7:76:19:0a:a8:62:70:4e:94:
                    7b:fc:0d:bb:22:56:6a:aa:b8:58:b0:0b:81:be:52:
                    f2:ee:0a:6e:e8:33:fd:4e:bf:fa:da:88:3e:f5:ca:
                    ba:ea:cd:69:23:70:c9:11:bf:a4:65:c9:1f:78:43:
                    66:87:0b:74:19:6a:c3:68:a4:21:9a:4a:52:28:8a:
                    6a:b4:4c:e7:11:76:95:e4:79:eb:2a:53:5f:9c:56:
                    92:b9:4f:0c:c8:9c:24:05:54:69:67:d6:29:48:a6:
                    0c:74:b6:61:82:67:a8:cb:84:9d:67:76:b9:fe:98:
                    db:ac:62:f5:c6:0f:f6:e8:14:9e:58:69:1c:1c:57:
                    68:4a:7f:a4:53:fb:ca:e6:33:88:14:59:c2:fc:d1:
                    4d:68:5c:1b:db:ee:a1:e3:1c:48:64:ea:52:fc:21:
                    7e:26:f3:9f:7e:10:47:da:d3:ac:79:b3:85:78:f5:
                    ab:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:49:48:13:35:1A:4C:79:85:28:91:0A:15:3B:9E:B4:2A:49:9B:FB
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/V0lIEzUaTHmFKJEKFTuetCpJm_s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.70.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5b:2d:a0:bf:0b:19:1e:01:1b:4a:96:e6:75:16:26:30:f9:13:
         01:91:3e:42:a1:df:7f:58:e0:ee:38:7d:ab:e3:a2:b1:8c:2d:
         44:df:ee:38:82:aa:27:43:a0:24:7a:66:fe:d9:63:6f:bb:fb:
         b6:8d:c3:38:ed:7c:5f:e7:d0:de:9a:6f:4f:3e:0c:1a:12:40:
         d6:b8:84:07:5f:cf:61:cb:52:4e:11:be:01:0c:c0:5a:f2:12:
         8e:a2:e5:70:05:e5:84:e0:62:0d:ef:82:4d:49:43:4b:eb:12:
         4e:ea:89:14:a9:b8:43:e3:90:24:69:ee:49:b7:80:fe:b3:49:
         71:af:47:77:7a:81:2a:e6:70:aa:57:6e:a9:b0:a5:da:28:bd:
         ea:67:6b:9a:61:64:d1:61:a6:8f:1d:e1:87:d6:9c:57:e7:c5:
         ca:e8:c9:e5:d3:46:d5:7b:c8:24:f8:bd:8f:ed:09:61:9c:3b:
         7e:91:2f:eb:91:32:58:70:2e:04:46:8e:f8:54:26:93:57:ae:
         e0:21:23:bd:b8:2b:cc:2d:17:ea:2d:a6:89:d0:d6:d4:ea:11:
         5a:4e:13:82:6a:c9:22:aa:c8:4e:6e:8f:f2:1f:5e:c5:dc:bc:
         f6:0d:93:04:78:67:a3:08:49:97:03:e8:60:86:55:d3:89:c6:
         00:27:1f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:20 2024 by rpki-client on console-ams.rpki-client.org