Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/g4Yov2NSf4DOqijPkyvHfGZ-JsQ.roa
File:                     g4Yov2NSf4DOqijPkyvHfGZ-JsQ.roa (raw, json)
Hash identifier:          79zbP/Av3uSxQIJ/sHX5k6WYH8YNttMZNYWS9cD2oBA=
Subject key identifier:   83:86:28:BF:63:52:7F:80:CE:AA:28:CF:93:2B:C7:7C:66:7E:26:C4
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0153
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/g4Yov2NSf4DOqijPkyvHfGZ-JsQ.roa
Signing time:             Thu 31 Oct 2024 01:30:50 +0000
ROA not before:           Thu 31 Oct 2024 01:30:50 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        110.66.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:30:50 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=838628BF63527F80CEAA28CF932BC77C667E26C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:37:d5:f9:fd:b5:2f:40:39:b9:89:e4:86:6b:
                    81:c2:c2:79:44:cd:2f:98:4d:95:38:1b:a3:dc:fd:
                    27:6c:9f:f9:f2:1c:e6:fd:5d:e4:da:11:ad:da:a0:
                    86:ff:d3:aa:ca:48:dc:4b:57:02:b8:a8:66:19:37:
                    a2:b1:80:6d:27:e1:02:3d:68:2d:cf:20:e7:5f:19:
                    e1:94:48:e6:ac:19:65:b0:09:b3:4d:cc:81:84:7f:
                    b7:46:6e:fb:b2:4d:9f:12:35:f5:41:3c:40:70:24:
                    63:b9:a4:be:20:38:2f:b3:18:60:a0:0c:25:c3:5b:
                    41:91:4a:64:a6:80:97:81:86:93:d3:7d:af:a2:ab:
                    7a:1f:22:33:9d:ed:2c:a9:15:9d:d2:1a:ae:df:95:
                    71:d0:53:8d:1a:f6:62:0f:06:ff:f0:96:8d:51:b4:
                    92:fc:23:a9:63:c7:d3:ab:26:ce:0c:d6:f9:11:b5:
                    a0:2d:90:42:3b:27:b2:6a:6c:99:cf:17:2d:fd:7b:
                    30:50:fd:5e:d2:d4:dc:2a:92:47:cf:45:68:d3:8e:
                    e1:0e:08:8f:97:98:19:5a:a5:6e:01:f5:ac:da:36:
                    85:e5:4a:8a:88:37:35:e4:57:3e:17:79:a9:ab:ce:
                    99:46:65:77:ea:d8:8e:0a:b5:7e:f5:9a:b8:12:27:
                    11:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:86:28:BF:63:52:7F:80:CE:AA:28:CF:93:2B:C7:7C:66:7E:26:C4
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/g4Yov2NSf4DOqijPkyvHfGZ-JsQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.66.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         3b:ad:6f:8e:e2:15:66:3f:39:42:92:ea:44:03:a1:2a:2a:e1:
         2f:91:2a:79:ee:c5:49:8f:55:7a:04:6f:6a:e9:b0:72:aa:14:
         0c:67:14:c4:cf:12:05:a9:40:00:8e:f0:c4:34:c1:06:98:e2:
         25:5a:b2:37:f5:b9:cb:7f:9c:17:a6:c6:2c:e2:74:fe:eb:76:
         f3:d7:45:25:f6:91:0d:d4:61:d5:6f:cd:7a:14:fb:c1:15:bb:
         75:86:27:e1:44:3a:e8:0d:a9:bd:6d:f1:dd:87:67:49:cd:c6:
         43:92:bb:96:aa:81:2c:a1:6e:31:71:ec:d3:90:16:80:5d:ec:
         20:7b:59:fd:ff:b7:ef:8f:1e:54:d0:d1:02:a8:b3:56:2a:13:
         55:d9:03:82:04:7d:f7:94:cd:9e:ba:0f:d6:a3:9e:98:5a:2d:
         92:fb:2a:e0:ef:d2:c5:42:55:da:43:aa:52:e1:99:02:51:70:
         d1:28:cc:cd:7c:50:6c:c5:ca:33:76:8f:9a:4d:6f:f9:67:9b:
         99:29:0a:26:04:c9:64:78:77:14:18:25:61:3c:2b:58:d3:de:
         6c:96:17:3b:68:a0:93:fa:85:27:ef:5b:e3:6e:0d:80:fe:ef:
         d9:06:1a:53:d3:2f:1f:79:0d:de:c9:24:59:93:e1:78:38:69:
         46:14:8f:21
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNDEwMzEw
MTMwNTBaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgzODYyOEJGNjM1MjdG
ODBDRUFBMjhDRjkzMkJDNzdDNjY3RTI2QzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjN9X5/bUvQDm5ieSGa4HCwnlEzS+YTZU4G6Pc/Sdsn/nyHOb9
XeTaEa3aoIb/06rKSNxLVwK4qGYZN6KxgG0n4QI9aC3PIOdfGeGUSOasGWWwCbNN
zIGEf7dGbvuyTZ8SNfVBPEBwJGO5pL4gOC+zGGCgDCXDW0GRSmSmgJeBhpPTfa+i
q3ofIjOd7SypFZ3SGq7flXHQU40a9mIPBv/wlo1RtJL8I6ljx9OrJs4M1vkRtaAt
kEI7J7JqbJnPFy39ezBQ/V7S1NwqkkfPRWjTjuEOCI+XmBlapW4B9azaNoXlSoqI
NzXkVz4XeamrzplGZXfq2I4KtX71mrgSJxEtAgMBAAGjggIhMIICHTAdBgNVHQ4E
FgQUg4Yov2NSf4DOqijPkyvHfGZ+JsQwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My9nNFlvdjJOU2Y0RE9xaWpQa3l2SGZHWi1Kc1Eucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF
AwMBbkIwDQYJKoZIhvcNAQELBQADggEBADutb47iFWY/OUKS6kQDoSoq4S+RKnnu
xUmPVXoEb2rpsHKqFAxnFMTPEgWpQACO8MQ0wQaY4iVasjf1uct/nBemxizidP7r
dvPXRSX2kQ3UYdVvzXoU+8EVu3WGJ+FEOugNqb1t8d2HZ0nNxkOSu5aqgSyhbjFx
7NOQFoBd7CB7Wf3/t++PHlTQ0QKos1YqE1XZA4IEffeUzZ66D9ajnphaLZL7KuDv
0sVCVdpDqlLhmQJRcNEozM18UGzFyjN2j5pNb/lnm5kpCiYEyWR4dxQYJWE8K1jT
3myWFztooJP6hSfvW+NuDYD+79kGGlPTLx95Dd7JJFmT4Xg4aUYUjyE=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:14 2024 by rpki-client on console-fra.rpki-client.org