Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/VMpkLv6mQm2KIot_1yYv-8BJV3s.roa
File:                     VMpkLv6mQm2KIot_1yYv-8BJV3s.roa (raw, json)
Hash identifier:          2s9tk7kONZ61d8Xvb25xNevy7rS+lplht6HkPR3w2/g=
Subject key identifier:   54:CA:64:2E:FE:A6:42:6D:8A:22:8B:7F:D7:26:2F:FB:C0:49:57:7B
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0154
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/VMpkLv6mQm2KIot_1yYv-8BJV3s.roa
Signing time:             Thu 31 Oct 2024 01:30:51 +0000
ROA not before:           Thu 31 Oct 2024 01:30:51 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        111.216.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:30:51 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=54CA642EFEA6426D8A228B7FD7262FFBC049577B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:52:6f:0b:a9:9d:3a:45:a0:a2:36:14:d5:20:
                    84:3b:8b:34:48:b9:89:db:03:01:b4:c1:ff:5c:8f:
                    b6:5a:3b:06:bf:c2:72:3c:62:0b:09:9f:19:57:aa:
                    48:89:ee:e5:8a:3e:93:14:47:9d:84:1c:22:0c:3e:
                    7f:58:0f:1a:e7:e4:6a:f5:ef:20:60:f8:1a:52:db:
                    23:8b:36:99:36:5c:5d:37:d6:17:3c:06:d4:f8:0b:
                    78:c3:2c:3f:4e:09:b6:2c:94:d2:93:63:d9:db:8c:
                    4c:9d:f1:94:d7:24:24:e7:16:2c:20:90:d7:e3:f9:
                    a9:94:ce:fc:8f:63:1f:24:f8:5e:ef:40:82:76:07:
                    72:7f:78:57:44:1b:e0:5a:38:03:5e:c0:e3:6a:ec:
                    12:8c:53:31:c7:4e:37:eb:14:16:bf:b3:b3:b9:ec:
                    bb:c3:70:b9:d2:06:b0:d4:d4:ca:1c:4e:e1:61:c3:
                    c0:a6:9e:ee:5c:7e:b5:8e:56:08:a3:7b:32:be:4c:
                    6a:f1:4b:ac:98:10:c6:bf:c0:93:aa:2c:c4:e8:3f:
                    12:72:02:bd:a8:b0:a9:a1:62:ab:20:7b:f8:c7:84:
                    55:38:81:b4:b1:62:6c:ba:85:e0:4d:67:1f:88:33:
                    73:3c:c4:38:72:66:0f:48:e2:60:67:78:f4:e5:92:
                    a9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CA:64:2E:FE:A6:42:6D:8A:22:8B:7F:D7:26:2F:FB:C0:49:57:7B
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/VMpkLv6mQm2KIot_1yYv-8BJV3s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.216.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b3:41:7a:ae:11:10:b1:d9:37:23:27:e7:49:ce:2e:a5:3d:7d:
         11:84:75:fe:2f:dc:ed:b3:22:04:97:a1:ff:b9:e5:52:82:dc:
         18:65:33:29:e2:4f:af:a3:2d:68:f6:32:04:cf:e0:a8:3c:36:
         7a:87:b2:11:f3:1f:73:56:b0:d9:1c:7e:f2:e9:d7:6e:22:a2:
         df:fe:25:66:94:ef:89:73:c0:9b:d4:78:75:ab:bc:21:26:2d:
         77:78:26:88:07:d5:f6:99:c6:ac:c1:5b:2f:5c:53:d0:19:4a:
         17:a1:37:a7:30:21:83:7f:ec:0a:30:ed:96:f6:d4:a4:01:9e:
         75:1b:30:58:89:a5:e9:9e:d5:93:90:ad:b0:ee:b0:1a:e8:fc:
         5f:13:6e:9f:03:5a:20:16:eb:d1:84:e8:30:ee:f6:99:6f:6c:
         6d:db:c5:a4:ac:1d:d0:d5:16:23:12:64:4c:e8:76:b2:98:8e:
         71:e9:24:ff:15:89:a3:87:d6:1a:9c:1b:0f:96:07:ec:e8:79:
         a8:43:ec:c0:f1:b6:b0:57:ce:3d:06:fc:8d:83:76:3f:30:c3:
         62:57:37:45:e3:09:03:41:f5:40:e2:da:2f:63:20:fc:9c:08:
         e1:00:fd:0c:22:9d:f2:fb:50:78:24:12:0c:0e:09:c5:46:df:
         6a:25:e8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:14 2024 by rpki-client on console-fra.rpki-client.org