Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/YnV9zH-Z-wnhSZAuMZAAwsiBJy4.roa
File:                     YnV9zH-Z-wnhSZAuMZAAwsiBJy4.roa (raw, json)
Hash identifier:          Az1f5HU4tkPc2+okVJXycGjG1Hdd8EyYEbNbNyUT5pc=
Subject key identifier:   62:75:7D:CC:7F:99:FB:09:E1:49:90:2E:31:90:00:C2:C8:81:27:2E
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       011B
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/YnV9zH-Z-wnhSZAuMZAAwsiBJy4.roa
Signing time:             Fri 01 Dec 2023 01:31:53 +0000
ROA not before:           Fri 01 Dec 2023 01:31:53 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        59.146.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Dec  1 01:31:53 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=62757DCC7F99FB09E149902E319000C2C881272E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:86:32:72:0d:59:4c:42:8a:da:00:86:17:
                    f4:ef:d2:d9:85:79:25:35:26:9c:cd:07:cf:2f:c0:
                    62:b5:2b:46:bf:9c:40:d2:aa:85:39:2f:1b:ac:31:
                    16:f2:02:99:8a:75:7c:8d:41:5f:e1:79:89:7b:b6:
                    2d:99:9c:9e:0f:c4:e8:0d:21:e2:af:69:b6:7c:de:
                    98:e3:6e:6f:24:8b:3b:82:99:44:15:5a:0c:60:5e:
                    26:93:6a:fa:ea:88:d0:ca:c6:c4:46:0d:5d:ac:07:
                    43:6a:e1:c4:1f:e0:71:6d:d4:83:07:72:1a:b6:60:
                    15:d0:00:79:a5:da:5d:df:4d:15:7b:cf:5b:6f:a5:
                    18:e1:51:41:19:ce:99:7e:e0:f3:b2:fb:65:ca:f0:
                    a8:bf:f6:fa:75:cb:74:36:56:d9:2d:c4:23:3d:77:
                    ea:05:ec:a0:d1:9d:bd:de:b9:c3:8f:31:a7:da:01:
                    47:07:71:15:8a:d0:b1:fa:d9:00:cc:be:41:6c:5b:
                    5a:dd:ba:d6:ee:b8:be:9d:ca:c3:c8:d6:3c:a0:51:
                    fd:a5:97:4b:20:36:ce:66:ca:b0:de:d7:c0:e4:75:
                    86:d8:ef:0d:27:64:ee:19:e3:43:77:36:f3:0f:f5:
                    65:62:95:44:c1:39:90:f8:91:63:e3:f1:6a:eb:07:
                    b2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:75:7D:CC:7F:99:FB:09:E1:49:90:2E:31:90:00:C2:C8:81:27:2E
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/YnV9zH-Z-wnhSZAuMZAAwsiBJy4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.146.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         62:0f:77:c4:17:2b:da:cc:a2:b6:cb:1e:2b:a5:6f:43:8d:50:
         f5:b3:44:f4:d3:29:05:07:37:c9:85:a5:f5:96:27:c1:eb:cb:
         f1:cb:0c:de:f0:1c:d4:3e:18:f8:e1:c7:d0:7e:88:47:e8:4c:
         d9:74:cd:fa:d1:05:67:dd:82:45:56:1e:57:43:e9:05:14:22:
         03:b7:23:2b:28:7e:16:18:90:23:19:b5:03:06:8c:8b:1c:6c:
         d4:38:49:f1:3e:6f:46:be:59:95:b7:67:92:d2:ab:fe:52:b1:
         68:e5:57:73:ff:a2:77:bd:69:34:f4:39:31:1c:31:aa:5a:45:
         81:b0:48:62:1f:32:f7:98:3d:26:20:9a:a3:65:0a:fa:ef:19:
         9a:c3:80:40:42:58:df:74:53:2b:59:c5:d6:7b:16:8e:20:ba:
         ab:cd:f1:25:be:e5:1e:52:7f:26:03:9e:fd:b3:1b:43:52:22:
         ba:15:9e:e7:bf:5e:c3:e9:53:59:ad:35:8e:9e:13:bc:3d:05:
         c9:e8:d2:a3:ee:ec:24:b0:97:98:c3:09:32:db:c0:64:6f:36:
         ab:01:0f:5d:7d:ff:00:68:0a:6c:c1:0c:a0:9a:7a:a9:6b:86:
         74:6e:33:57:e6:cb:b7:3e:6b:50:b3:cf:05:87:ae:24:f1:69:
         93:58:3f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:29:00 2024 by rpki-client on console-ams.rpki-client.org