Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/jLB2y4Yk1-zaeX4_wCg8QgmshLA.roa
File:                     jLB2y4Yk1-zaeX4_wCg8QgmshLA.roa (raw, json)
Hash identifier:          MTBYEqskFGwYeAMqUISZ90hl3J858/phHrXjtmNEfEA=
Subject key identifier:   8C:B0:76:CB:86:24:D7:EC:DA:79:7E:3F:C0:28:3C:42:09:AC:84:B0
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0123
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/jLB2y4Yk1-zaeX4_wCg8QgmshLA.roa
Signing time:             Fri 01 Dec 2023 01:31:57 +0000
ROA not before:           Fri 01 Dec 2023 01:31:57 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        61.120.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Dec  1 01:31:57 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=8CB076CB8624D7ECDA797E3FC0283C4209AC84B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a2:7a:1f:3a:a7:8b:25:56:d5:65:43:cd:49:
                    58:f2:2d:e2:45:21:ec:8d:c0:40:af:64:64:38:e6:
                    dc:0b:01:7e:2a:b1:05:2e:5f:95:a7:51:16:32:d5:
                    ab:4b:4f:a7:33:b7:56:21:e0:e9:2b:eb:5c:45:4c:
                    44:a6:a2:1c:7e:7c:3e:96:58:d4:74:eb:c9:bb:b7:
                    09:c3:ad:97:42:c9:f8:b5:9a:f0:2b:cb:29:05:3f:
                    e0:25:80:44:1f:53:62:e8:df:46:c6:db:4b:73:7c:
                    e8:a2:a8:77:49:bd:62:51:93:50:85:9a:d9:84:eb:
                    f8:55:b4:70:24:7a:c1:de:0e:e6:0f:9b:67:0c:6a:
                    95:a9:4a:c1:6e:fe:5a:85:3c:02:fb:0a:3b:e7:9a:
                    87:e9:41:25:d8:c5:ef:45:f1:ae:9b:fd:a8:89:46:
                    22:dd:4f:f1:0d:93:1a:48:c6:26:c1:a3:4f:81:d3:
                    a4:69:16:a6:f8:b5:15:69:18:ad:37:83:b9:08:ef:
                    76:1d:37:12:9e:f4:11:95:c4:d4:eb:26:7e:b1:6d:
                    87:4c:fd:db:2f:ba:c5:e1:c0:ab:34:c5:46:05:26:
                    f7:0f:8f:10:48:58:d1:b0:6e:91:03:bb:c5:6f:7b:
                    04:09:bf:f5:93:0d:d7:d5:04:3d:1a:4b:49:89:34:
                    b2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B0:76:CB:86:24:D7:EC:DA:79:7E:3F:C0:28:3C:42:09:AC:84:B0
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/jLB2y4Yk1-zaeX4_wCg8QgmshLA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5a:4a:8d:96:bd:88:4c:de:4c:9c:b9:54:27:13:01:f4:4c:fd:
         08:b2:e7:83:74:0b:ff:69:9d:65:b8:e9:9c:ea:e5:d4:a6:c2:
         e4:52:b5:10:46:b4:2e:b3:6b:68:b3:42:7a:6e:41:f0:f1:cd:
         8c:7b:dc:5d:18:e9:1a:eb:e6:69:17:db:80:1c:a2:22:06:ad:
         f2:a2:b4:a7:2a:67:82:ff:c1:52:f2:3b:b2:ed:bc:55:60:3d:
         01:d8:0f:ee:dc:21:6f:0b:70:0c:64:4d:74:f6:dc:9a:96:a4:
         3b:09:ad:51:94:ef:15:9f:11:a7:d4:77:ca:06:4e:72:0e:81:
         3b:6d:8d:fe:bb:83:da:fe:cf:7d:27:3f:20:48:db:04:82:1c:
         53:40:31:ba:d0:55:85:b7:d0:6a:61:13:01:ac:cf:fd:84:0c:
         f2:13:7d:b1:06:01:b9:98:d6:ba:0b:10:6a:cb:71:6c:8f:46:
         61:db:92:ba:0a:67:f7:ae:4f:77:a2:8c:40:35:c5:6d:9d:87:
         26:63:ca:05:b7:c3:53:c1:70:27:7f:c6:bc:fb:9e:bd:05:50:
         f8:48:61:76:23:c5:e0:73:b3:09:c6:d0:e2:81:12:54:b2:be:
         c2:db:73:46:60:96:37:3c:ed:f8:0a:6d:29:ca:a9:0f:e6:4e:
         42:61:0b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org