Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/eJFisHYlZkH1vqQOT7qTNWVvq_4.roa
File:                     eJFisHYlZkH1vqQOT7qTNWVvq_4.roa (raw, json)
Hash identifier:          ognQXLjHCSNK65SE4s7KOQXNQmhzsrvJR5s1Y/wcwv0=
Subject key identifier:   78:91:62:B0:76:25:66:41:F5:BE:A4:0E:4F:BA:93:35:65:6F:AB:FE
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0112
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/eJFisHYlZkH1vqQOT7qTNWVvq_4.roa
Signing time:             Fri 01 Dec 2023 01:31:48 +0000
ROA not before:           Fri 01 Dec 2023 01:31:48 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        118.238.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Dec  1 01:31:48 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=789162B076256641F5BEA40E4FBA9335656FABFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1b:c4:1e:23:4b:7c:16:d3:a4:03:21:29:bb:
                    e2:fe:ff:b0:70:b7:77:d9:d5:0b:ed:5d:dc:eb:ad:
                    0b:b8:c8:50:a0:69:33:be:a2:19:17:61:b2:dc:ba:
                    83:33:c5:bc:35:4e:78:fc:cc:6e:6a:21:da:6d:03:
                    3c:4b:09:e5:59:98:09:b7:43:a5:d5:e7:aa:bb:48:
                    9f:c8:68:eb:0b:88:ec:1a:35:ad:c4:92:0a:7a:41:
                    8a:33:82:79:ad:53:b4:52:bd:4a:0a:c6:44:2d:e4:
                    77:12:06:ff:6a:0e:2d:a7:38:8a:08:bc:85:f8:72:
                    9d:05:ec:90:df:2a:c5:68:b3:c9:c4:08:d9:34:4a:
                    66:63:55:b1:c0:da:3c:c9:ef:15:d5:49:43:c5:02:
                    b9:15:81:ac:d7:a3:d8:f2:b7:05:89:1a:af:85:34:
                    a7:74:ba:8c:b4:1e:aa:cc:47:77:1f:28:3b:0e:f8:
                    b7:3e:e2:84:2a:b9:01:b4:c8:92:5a:63:6b:3b:03:
                    7c:5b:fa:50:78:96:12:d1:89:12:88:e9:ba:6c:b9:
                    30:3b:ac:06:48:36:1b:b1:f7:06:84:c1:0d:c8:d0:
                    a1:c6:7a:e3:be:8c:5f:ce:d1:63:bf:8a:03:e5:8c:
                    13:1f:c2:74:19:c3:b5:42:41:0e:15:c1:ef:2d:6e:
                    b2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:91:62:B0:76:25:66:41:F5:BE:A4:0E:4F:BA:93:35:65:6F:AB:FE
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/eJFisHYlZkH1vqQOT7qTNWVvq_4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.238.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a8:da:b7:c7:d8:dd:24:ba:53:f8:f2:ac:f7:f8:e7:3e:2a:f0:
         f9:f8:c8:ee:f6:fc:29:97:b1:b5:a8:98:1c:f9:20:8e:8e:61:
         56:f1:3a:a8:8b:a6:a7:ab:85:b9:42:1c:66:27:52:81:e9:81:
         5f:87:91:8a:ab:5c:40:68:79:1a:5e:87:e8:66:bd:9f:04:8e:
         da:e4:d2:a6:4e:e8:2d:b0:ca:e1:dc:6a:4d:4b:08:4a:57:7c:
         92:7e:26:38:f0:14:bb:47:d9:86:ac:9c:f9:1e:95:12:d1:8d:
         b6:d0:5c:d9:53:fd:d5:67:ea:f6:41:e0:b0:43:19:b4:f7:e4:
         9e:3d:d0:d2:11:a4:88:98:9d:10:41:f8:ef:b8:67:fb:39:6b:
         64:66:8e:3e:49:93:b7:75:47:e9:d6:fb:e0:e2:36:5a:45:64:
         7a:8f:c9:e7:d8:76:f2:b3:f8:fb:94:57:2a:9a:0f:00:45:60:
         d5:d6:e1:bf:d0:a1:d6:10:86:a8:a6:36:9a:10:7c:e5:42:10:
         43:b3:94:fd:c5:d4:5d:92:55:9d:64:a3:6d:51:f7:1a:9a:f5:
         5f:5e:36:09:9a:61:73:32:50:83:9c:a0:c6:c5:c8:6f:ab:ba:
         87:79:95:ea:fb:5f:83:a5:1c:db:0d:6d:b2:40:c6:83:ac:94:
         c9:9a:0b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:29:00 2024 by rpki-client on console-ams.rpki-client.org