Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/fQyzdaGDtsWfcYLQp0pxsIbQZTQ.roa
File:                     fQyzdaGDtsWfcYLQp0pxsIbQZTQ.roa (raw, json)
Hash identifier:          OLHV7Spxg12sfY6IynC7eVZibnH1LeL6mhbj1ENIM/s=
Subject key identifier:   7D:0C:B3:75:A1:83:B6:C5:9F:71:82:D0:A7:4A:71:B0:86:D0:65:34
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       016D
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/fQyzdaGDtsWfcYLQp0pxsIbQZTQ.roa
Signing time:             Thu 31 Oct 2024 01:34:22 +0000
ROA not before:           Thu 31 Oct 2024 01:34:22 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        118.240.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:34:22 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=7D0CB375A183B6C59F7182D0A74A71B086D06534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:33:a9:c5:fe:1d:06:7a:5c:aa:4c:3f:d5:d8:
                    f4:19:c2:23:d8:f6:30:e6:ed:0d:4d:aa:69:e5:42:
                    1f:25:16:ad:79:00:cc:cf:fe:86:88:fb:51:d1:5d:
                    3e:55:c1:a7:29:df:20:3e:27:30:a3:13:65:7e:2c:
                    ed:4a:f7:46:df:4d:15:f6:8e:eb:bc:3e:01:04:5f:
                    eb:4f:80:33:c8:9d:f1:93:9b:0e:41:1b:51:7d:dd:
                    71:47:66:73:dc:9f:61:13:56:fd:3d:73:7e:37:ca:
                    b6:56:6a:9f:9b:d3:6e:f3:a1:6b:59:a4:44:50:09:
                    c5:8e:93:b6:22:fb:41:ac:54:75:b9:8a:90:25:82:
                    0c:48:ae:74:7c:13:1a:fd:98:59:9c:29:85:ff:c5:
                    b2:1f:83:a6:87:6e:a5:83:82:46:5a:71:04:b0:dd:
                    21:b7:53:bc:df:00:eb:01:43:95:5a:bf:d8:bb:86:
                    67:e6:fb:79:84:d2:e3:0c:c4:06:63:67:a8:e0:e6:
                    cf:ea:ce:7b:7f:84:ea:cd:ee:fe:99:b1:ff:1f:ce:
                    91:4f:c0:92:03:0b:7b:c5:77:dc:83:d3:58:6c:59:
                    41:23:a0:b0:7c:c7:60:60:50:df:93:73:07:ec:13:
                    93:e0:52:e4:67:74:59:ed:0f:88:5a:ca:4d:b1:3e:
                    2e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0C:B3:75:A1:83:B6:C5:9F:71:82:D0:A7:4A:71:B0:86:D0:65:34
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/fQyzdaGDtsWfcYLQp0pxsIbQZTQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.240.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         3a:aa:54:76:11:b3:9d:23:07:bd:b7:26:e1:1d:98:5b:92:5c:
         f5:9f:a9:86:7c:29:20:67:49:95:81:27:38:44:8c:d5:1c:c4:
         05:99:90:e0:be:70:a6:8e:03:73:97:7e:7c:88:59:22:b8:96:
         09:4e:e7:3e:53:4a:7d:aa:61:94:2a:64:42:ff:0e:f3:f6:7d:
         0a:e4:a1:cb:83:1f:dc:aa:61:20:d5:72:d7:0b:78:ed:d5:d0:
         2b:d9:ab:02:ab:b6:7e:f8:bc:7b:60:cb:75:8d:1b:31:6e:0b:
         1a:a5:d8:21:f3:c3:50:06:5c:40:cc:13:0d:c8:b9:a8:8a:fd:
         73:21:e4:b7:fe:f5:fd:03:c9:c7:47:ba:4c:4d:13:8a:84:0c:
         de:dc:56:fc:01:66:c5:c3:7c:cf:6a:c6:30:b1:11:fb:62:c9:
         ef:6c:a6:b4:fd:e9:57:e5:75:42:5d:e7:a8:0d:c2:ab:d6:a2:
         a1:52:b7:8c:39:d1:96:d9:24:4b:37:63:a8:5b:91:8d:c3:8d:
         02:c4:c2:00:02:2f:54:21:e5:e6:dc:e0:cf:f1:7e:6e:1b:d2:
         b7:f4:8f:68:13:58:93:89:61:a5:e7:a6:83:92:13:3e:ac:b7:
         9b:c5:22:f3:70:f1:c5:6a:7d:36:a3:28:a5:b9:4d:57:38:fa:
         f1:28:07:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:14 2024 by rpki-client on console-fra.rpki-client.org