Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/acVxE7Hz80YNId4ubv1_ZVTfHcI.roa
File:                     acVxE7Hz80YNId4ubv1_ZVTfHcI.roa (raw, json)
Hash identifier:          ZLFOTlaURL67mV7ZHx02t9YZfSuNmRzOpTvbbJ0z1i4=
Subject key identifier:   69:C5:71:13:B1:F3:F3:46:0D:21:DE:2E:6E:FD:7F:65:54:DF:1D:C2
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0139
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/acVxE7Hz80YNId4ubv1_ZVTfHcI.roa
Signing time:             Tue 30 Apr 2024 01:29:12 +0000
ROA not before:           Tue 30 Apr 2024 01:29:12 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        36.2.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Apr 30 01:29:12 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=69C57113B1F3F3460D21DE2E6EFD7F6554DF1DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fc:83:66:c1:dc:6b:ed:57:b3:55:36:56:55:
                    16:25:68:66:e8:f7:46:f2:39:8b:e6:1c:65:4f:5c:
                    8e:c9:d4:c7:19:29:a0:a6:49:fd:7c:f5:83:79:66:
                    aa:5f:09:82:5b:5f:e9:2f:ba:6f:e0:07:f0:61:85:
                    d9:49:0c:d9:e2:c5:ff:a9:36:4f:18:da:74:e0:4f:
                    82:cb:b4:7c:bf:e2:52:e4:fb:22:a2:c8:d9:80:63:
                    f7:1c:ee:83:33:d8:20:d2:03:dd:2e:ab:08:2a:5a:
                    31:a0:67:d5:05:cc:26:b4:8b:19:ca:3e:8b:91:44:
                    5d:52:96:59:42:f4:0d:f4:51:67:7a:e0:d6:b8:c1:
                    ae:53:92:4d:ec:79:de:5a:9b:a9:62:8a:59:ea:00:
                    c3:5a:7b:f6:45:3a:d2:ba:d6:07:51:e0:c9:09:77:
                    d6:d5:f0:7c:36:6e:34:b8:b3:72:d3:42:ce:24:d1:
                    83:af:14:1e:94:86:0d:97:05:fb:4b:08:ae:bd:b8:
                    a2:b7:15:09:75:bf:02:1f:6e:62:1d:07:60:99:d7:
                    5e:09:18:b6:68:73:49:5f:72:13:e8:30:5a:d4:25:
                    7f:2d:81:a1:46:d6:ab:1b:b6:b5:bb:68:1c:1d:b1:
                    95:a1:0a:29:88:7d:bc:4f:ec:1c:bc:a4:7c:dc:db:
                    9e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C5:71:13:B1:F3:F3:46:0D:21:DE:2E:6E:FD:7F:65:54:DF:1D:C2
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/acVxE7Hz80YNId4ubv1_ZVTfHcI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.2.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         82:ac:07:a8:5e:60:0c:fc:ff:26:11:a4:a3:c7:36:ca:b8:de:
         42:b3:8d:11:71:dc:b8:1d:0d:28:48:e9:bc:47:90:8a:9e:12:
         4a:ae:2a:04:03:22:f6:c1:96:83:63:e8:aa:df:67:0f:8d:01:
         b1:9d:32:9d:89:e5:6f:30:43:8e:82:5a:a0:5c:c0:77:97:22:
         fd:88:8c:59:cc:3b:3b:19:7d:01:81:f0:8e:7e:04:f5:f7:33:
         49:41:8f:7f:7a:92:2a:a7:f2:b9:04:7d:b3:85:d1:5b:1e:61:
         94:5d:0b:da:14:ca:f2:a4:39:8e:0f:b7:f0:bc:24:ae:fb:b7:
         58:4d:15:c8:b2:01:9e:33:74:86:45:48:3a:e1:d2:c5:86:db:
         74:7f:ca:b8:99:ef:6d:95:d4:41:48:39:7d:89:5b:cf:7a:06:
         56:a4:88:d5:d4:d2:6e:14:01:22:56:e3:05:7f:54:ca:fd:09:
         94:d2:41:3d:af:75:78:cd:e1:8d:66:d5:c6:91:c9:76:4c:31:
         d7:07:d9:3f:a0:57:46:0b:71:03:3f:b7:7b:50:82:2c:bf:62:
         fd:16:c7:7a:6e:46:c8:fc:77:f3:2f:3c:ed:81:a9:03:ff:53:
         ca:f1:e2:37:d8:b5:ed:bf:fb:3c:31:9b:d4:91:d0:7b:62:1a:
         ba:8c:21:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:52 2024 by rpki-client on console-fra.rpki-client.org