Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/cxPKozNwCwlYtFbFeuHTyrvDRlc.roa
File:                     cxPKozNwCwlYtFbFeuHTyrvDRlc.roa (raw, json)
Hash identifier:          yt6rJDgi7ld2vBRzK3aFpZcmGyHmaKMJ6YF6zFeDUsY=
Subject key identifier:   73:13:CA:A3:33:70:0B:09:58:B4:56:C5:7A:E1:D3:CA:BB:C3:46:57
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       015A
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/cxPKozNwCwlYtFbFeuHTyrvDRlc.roa
Signing time:             Thu 31 Oct 2024 01:30:55 +0000
ROA not before:           Thu 31 Oct 2024 01:30:55 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        120.74.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:30:55 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=7313CAA333700B0958B456C57AE1D3CABBC34657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:7d:78:3e:fd:16:ee:71:33:92:1b:22:c0:
                    be:3c:07:be:5d:ff:2f:12:a2:aa:37:c1:db:5e:fe:
                    61:7f:56:29:cc:4d:ae:f8:4f:f0:40:cd:09:f9:8a:
                    01:08:b8:4f:b1:68:5e:b5:d1:35:43:0f:bd:64:fe:
                    2a:9c:86:90:57:d5:75:b9:81:5c:e0:77:83:f2:a5:
                    ec:44:ed:e3:47:ed:88:3e:80:79:83:3e:7b:3d:55:
                    03:72:21:e7:0c:26:6b:14:79:0e:01:30:5f:47:cb:
                    69:82:c2:e8:24:25:c1:45:e4:4a:2f:a1:ca:0e:ce:
                    21:77:44:7a:b3:43:03:e3:f6:0e:0d:16:01:7c:50:
                    49:82:79:9e:f2:db:1a:98:34:db:ca:86:a7:76:e5:
                    51:bd:d2:d8:62:37:c6:88:a6:8b:f1:6f:a4:a5:0d:
                    ee:02:62:67:2b:a6:63:79:87:2f:b7:da:2a:c6:f9:
                    34:d2:ab:0e:b8:bf:37:7d:09:9c:11:1e:c0:c1:a0:
                    a2:1e:e3:bb:ed:bf:2c:09:94:59:8a:cb:26:47:68:
                    85:9a:00:1f:8d:fc:db:23:06:1e:27:d2:04:ff:e8:
                    2c:12:d1:4b:1c:37:a5:75:c4:02:9c:0e:44:39:ad:
                    50:14:c1:ec:9b:78:4f:58:aa:af:f5:9c:73:f7:65:
                    2f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:13:CA:A3:33:70:0B:09:58:B4:56:C5:7A:E1:D3:CA:BB:C3:46:57
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/cxPKozNwCwlYtFbFeuHTyrvDRlc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.74.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         50:57:9f:e7:1d:dd:12:fd:0c:04:07:a4:1b:31:25:3a:1a:00:
         77:39:34:b1:83:50:ba:89:ef:05:d5:e8:fe:5a:58:73:39:81:
         88:05:4e:f3:b8:4d:9b:c1:70:94:26:59:1d:96:fc:74:eb:7d:
         10:ec:bd:27:e3:99:2e:cb:6b:57:f3:b9:3e:21:f5:1f:93:97:
         4c:bc:93:1e:f8:b4:05:96:3b:0a:c5:68:34:ed:03:2d:6c:e8:
         af:95:c6:9e:f4:42:da:7d:a5:c7:6f:e8:26:f2:7d:e0:3b:bd:
         cf:6c:7c:89:07:2c:13:f1:a4:24:de:ba:be:d7:5a:d9:2c:76:
         0b:cb:13:8e:26:cc:56:d3:da:5a:73:f9:d6:81:81:b1:d7:d7:
         19:d0:06:ac:3c:db:5b:78:91:c6:0e:89:08:bb:49:d8:6f:b3:
         7e:86:83:29:17:88:21:b1:8a:45:16:24:67:ae:a3:e2:46:7c:
         60:06:8c:93:ec:07:f0:24:d6:43:86:af:3c:d0:12:83:b8:a5:
         7c:4a:26:f4:bd:26:84:72:6c:10:7f:27:8c:f3:8c:55:2a:c2:
         9a:f3:5e:e8:aa:c1:83:74:94:5e:c4:0e:e3:ea:8a:4b:c2:12:
         36:9f:7a:0d:29:07:fd:e1:c1:63:cc:e7:59:c2:ad:03:2d:d8:
         3b:e8:05:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:44 2024 by rpki-client on console-ams.rpki-client.org