Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/X5Hr_ElODHzK0cETl39vG_DklhM.roa
File:                     X5Hr_ElODHzK0cETl39vG_DklhM.roa (raw, json)
Hash identifier:          lW1O3+N6c2xErFQvD9JEo49FQEeg+pIWPg82CMlslcg=
Subject key identifier:   5F:91:EB:FC:49:4E:0C:7C:CA:D1:C1:13:97:7F:6F:1B:F0:E4:96:13
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0107
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/X5Hr_ElODHzK0cETl39vG_DklhM.roa
Signing time:             Fri 01 Dec 2023 01:30:06 +0000
ROA not before:           Fri 01 Dec 2023 01:30:06 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        202.213.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Dec  1 01:30:06 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=5F91EBFC494E0C7CCAD1C113977F6F1BF0E49613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:db:9c:d7:ff:3c:92:bd:53:41:27:9c:0c:
                    a5:6d:b7:72:d5:92:59:b6:c1:e7:cf:c9:24:6b:fa:
                    23:4b:6f:d0:60:66:b9:f0:fb:ec:a1:57:c9:52:26:
                    e7:36:46:65:28:c5:90:aa:32:e8:d9:6b:ee:75:28:
                    e9:da:4f:ea:f0:e9:8b:6e:4e:73:1a:82:df:32:28:
                    a6:4c:7d:f5:bf:c8:15:82:8c:90:a0:70:ff:b2:d6:
                    1d:cd:40:2f:e7:73:7a:4b:ae:f3:8a:fe:b1:38:39:
                    e4:61:b9:d6:c8:66:14:72:d8:a0:4d:d3:87:b3:49:
                    b6:c7:b6:44:9c:a1:4a:67:d9:03:fb:ff:5f:9d:d0:
                    fc:3f:f0:db:54:1a:05:c1:40:a9:89:4a:2f:6d:fd:
                    b1:c3:b6:f8:91:2b:89:26:2e:50:e6:28:70:9a:90:
                    ed:2a:a7:92:f0:89:18:54:c1:98:98:68:dd:98:7c:
                    b8:d5:79:4f:1a:e4:25:4c:8f:66:b1:92:d5:d2:10:
                    1f:66:39:ae:69:b5:27:6f:bc:37:d7:36:d3:51:e9:
                    7f:b8:5f:cf:6c:1c:2e:62:19:33:b0:7e:cf:bf:ed:
                    64:db:ae:92:47:88:01:ff:8d:ac:e7:f5:60:ae:56:
                    a3:70:6e:f2:8b:a5:18:5d:fd:11:6d:8c:83:bd:bd:
                    05:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:91:EB:FC:49:4E:0C:7C:CA:D1:C1:13:97:7F:6F:1B:F0:E4:96:13
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/X5Hr_ElODHzK0cETl39vG_DklhM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.213.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0f:50:cd:fc:47:90:67:ed:54:62:e7:bf:75:10:1f:85:19:94:
         f1:00:22:d5:d0:8c:92:e1:1a:dc:71:07:0e:c4:ff:cf:bf:0e:
         72:0f:ce:87:19:24:a7:66:68:ca:a3:ed:06:58:39:e1:82:44:
         6c:18:a9:c5:15:21:3d:1b:0b:93:ec:ea:5f:75:91:af:aa:92:
         cb:4a:38:af:79:7c:2f:3b:23:91:78:c4:62:18:f0:89:3b:bf:
         b0:45:ca:98:6e:1c:6e:32:bc:a1:50:40:8d:21:a9:c1:72:13:
         21:2e:5a:4d:7f:ac:4e:93:18:58:97:4d:aa:cc:93:72:30:dc:
         6c:09:ab:ce:ba:78:1d:df:fd:12:b4:96:eb:31:ee:bc:e4:15:
         aa:0e:cd:f8:e0:90:b6:fe:cd:c9:c1:cd:3d:73:25:3e:c6:77:
         48:45:25:46:af:dd:bb:74:c1:c8:a0:f7:f9:4b:39:42:7f:91:
         ce:e4:cd:25:e3:91:8a:c1:b9:6c:b0:0e:2a:5d:8b:09:2d:ee:
         09:f9:fc:5a:bb:50:fc:2b:38:57:3d:86:08:ad:93:27:02:18:
         c7:83:08:9a:51:9f:63:c6:93:31:43:71:ee:e7:b8:2e:aa:99:
         74:52:9d:2d:e8:ab:72:8f:b8:49:2b:f1:9c:1c:c7:7c:3d:62:
         02:b7:a1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:52 2024 by rpki-client on console-fra.rpki-client.org