Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/cW2ogj9w92h0UxeN4EkyHFwsavE.roa
File:                     cW2ogj9w92h0UxeN4EkyHFwsavE.roa (raw, json)
Hash identifier:          Tc3pN7WjD9W4BVWkA/4kG9DdQ4Vet8DkDpmHT3XQCS0=
Subject key identifier:   71:6D:A8:82:3F:70:F7:68:74:53:17:8D:E0:49:32:1C:5C:2C:6A:F1
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0151
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/cW2ogj9w92h0UxeN4EkyHFwsavE.roa
Signing time:             Thu 31 Oct 2024 01:30:48 +0000
ROA not before:           Thu 31 Oct 2024 01:30:48 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        118.236.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 23:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:30:48 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=716DA8823F70F7687453178DE049321C5C2C6AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:47:d7:e6:c5:b5:43:9e:04:b5:ef:64:74:20:
                    8f:b7:8c:f6:78:4d:49:3a:ea:06:49:3a:32:08:a8:
                    fc:28:1a:a8:43:42:01:5e:80:10:0c:78:d7:e9:64:
                    4e:ff:52:31:0b:f4:e3:d8:f3:41:0c:f3:28:fb:16:
                    09:60:de:10:eb:04:52:8e:dc:ee:2c:ec:eb:9b:07:
                    85:ff:96:75:14:12:e1:ab:14:29:36:74:d2:63:92:
                    3b:85:69:2d:3f:3a:40:99:72:fd:a0:bc:e6:9a:e2:
                    c1:29:2a:4f:95:9d:7b:b0:03:d3:7a:03:e5:9a:c4:
                    e0:12:51:de:ef:4f:9f:e5:81:2e:e8:9d:62:82:22:
                    f9:8e:b6:4b:3a:08:a6:68:7d:c2:d9:20:0a:c9:46:
                    5a:b2:a2:5a:47:93:8b:cf:d5:ad:e9:3f:4b:c4:14:
                    4e:1e:92:47:91:be:7c:df:d2:46:6d:48:c1:87:ae:
                    16:bb:c9:f1:2f:10:f8:62:12:77:c0:a7:4d:f9:a9:
                    5d:f6:1c:63:d2:fd:6f:dc:c6:97:e3:f5:76:91:1e:
                    9c:88:b9:fa:5b:6d:80:d0:32:4e:d4:b4:c1:99:c2:
                    e4:c8:74:fd:2e:19:27:75:8a:da:e9:ec:f7:36:5b:
                    7f:b5:49:b4:31:3e:dc:f0:43:39:2c:96:08:f3:ec:
                    d8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6D:A8:82:3F:70:F7:68:74:53:17:8D:E0:49:32:1C:5C:2C:6A:F1
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/cW2ogj9w92h0UxeN4EkyHFwsavE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.236.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         5f:b8:d1:bc:fd:75:d6:18:ed:08:3e:e0:99:72:fb:74:01:8e:
         9b:e8:72:5e:6c:22:6c:15:3b:be:c6:63:6b:07:bf:8b:1d:df:
         8a:f1:74:a5:31:d4:91:7a:b0:48:5c:82:32:8a:5f:78:5b:6d:
         c0:ad:21:b3:4d:30:68:93:e0:b9:d1:96:56:83:ac:19:36:c0:
         09:50:bd:7f:2d:ec:69:0f:a6:ad:d9:50:b9:e7:c0:bf:29:ea:
         5d:24:cf:fc:ff:3c:9b:86:41:99:aa:db:7e:6b:4a:89:35:36:
         fc:e2:81:1b:30:ba:8d:e5:f3:c4:17:45:07:24:2e:dc:28:0c:
         c6:c5:54:2d:f4:18:c3:9d:70:30:29:65:5e:fb:57:bd:d6:7b:
         62:46:7b:1b:a4:aa:2f:93:c9:e2:4d:42:87:11:3c:55:c2:8d:
         1b:cf:0f:81:02:03:76:1b:db:c5:38:fe:b2:e7:f1:d9:1d:10:
         f5:f0:95:d6:86:78:5c:d5:78:08:26:6f:81:41:22:ac:50:7a:
         94:93:bc:36:10:3b:d8:43:88:94:fb:a1:7b:54:3f:11:72:cd:
         b6:b2:b2:31:c5:a3:63:03:c7:42:5c:4d:02:d3:cd:16:09:7f:
         61:52:ec:78:ef:bb:96:06:65:39:04:b6:ce:33:4f:e1:a0:20:
         35:07:d6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:24 2025 by rpki-client