Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/nbJhDqh0Cp0Sh3iXEAS7-TMF9_U.roa
File:                     nbJhDqh0Cp0Sh3iXEAS7-TMF9_U.roa (raw, json)
Hash identifier:          eQcQgtf8UdsxuLrQ2Ngxm4PoA10/NI8nLPszhuZTYws=
Subject key identifier:   9D:B2:61:0E:A8:74:0A:9D:12:87:78:97:10:04:BB:F9:33:05:F7:F5
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       8E
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/nbJhDqh0Cp0Sh3iXEAS7-TMF9_U.roa
Signing time:             Thu 31 Oct 2024 01:30:50 +0000
ROA not before:           Thu 31 Oct 2024 01:30:50 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        147.192.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Oct 31 01:30:50 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=9DB2610EA8740A9D128778971004BBF93305F7F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:c0:d8:4b:ef:2d:01:05:a1:d3:0a:6a:1b:
                    38:23:37:f3:49:c6:26:7f:d0:53:f7:d7:5d:8b:3a:
                    de:5b:4a:a3:2c:ec:39:59:f0:8b:37:57:f1:a9:3f:
                    81:bc:6c:f0:83:4e:07:04:ab:de:a4:4f:ab:da:b1:
                    cb:dd:e8:2b:3c:4a:01:7a:c7:4b:f3:e8:18:c3:8b:
                    9f:65:7c:b0:ea:79:45:ec:3b:b2:b5:b1:f9:c7:ed:
                    8c:ff:bd:02:82:31:f3:a0:84:a9:2b:8d:f6:79:e1:
                    8f:01:32:f2:2d:86:49:31:61:73:66:63:d2:b0:e4:
                    41:4c:22:b4:33:4d:f8:19:c1:86:c4:ee:cf:ea:a3:
                    7d:04:ef:99:67:52:81:35:0b:ca:7d:4e:bd:1f:5e:
                    2b:76:d0:34:53:1e:23:39:6a:cd:23:70:33:ae:87:
                    3c:85:2a:d9:90:41:54:89:89:a4:e1:7e:77:f3:2d:
                    c2:ff:07:74:5b:da:91:e8:d3:ba:9e:a6:9c:23:cb:
                    50:5e:8c:0f:7b:69:2e:bc:cd:d7:35:20:ad:7f:14:
                    bc:3e:4c:2e:5b:eb:e5:23:5c:89:6b:e4:ec:f3:bc:
                    0c:7c:f3:2e:cb:8f:4c:fd:cb:e3:5c:9f:e6:1e:55:
                    d3:f8:e4:75:bb:23:c3:6b:2b:d0:9c:1a:e2:77:b5:
                    6d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B2:61:0E:A8:74:0A:9D:12:87:78:97:10:04:BB:F9:33:05:F7:F5
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/nbJhDqh0Cp0Sh3iXEAS7-TMF9_U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.192.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7e:df:ff:45:fe:39:19:a1:10:a9:4e:38:20:23:cf:40:1e:e7:
         a2:12:dd:01:90:2f:4f:bc:5f:4a:bc:7a:af:ba:92:34:2f:89:
         78:e0:66:38:2b:14:bd:17:b4:d9:c1:f3:00:16:6e:f4:c7:39:
         0b:24:44:6f:e2:09:26:78:7b:f3:9d:8d:1f:ee:57:1a:6c:a6:
         da:08:7b:a9:c4:e1:54:b9:cb:19:d0:8f:9d:94:54:4a:2a:07:
         0e:47:fa:23:8b:c7:42:57:92:30:b4:4b:ba:f0:4b:81:2e:5d:
         4d:58:a9:95:c9:eb:dd:20:23:ea:22:8f:22:50:51:8e:89:96:
         3f:90:38:1f:71:bb:24:0c:cc:2e:1f:56:02:d3:41:0c:44:a2:
         12:c9:e1:be:9d:1c:c5:df:ed:b3:a4:c7:38:13:4b:2b:7d:73:
         98:2a:fc:ae:d2:dd:8a:e6:ed:f0:a6:76:c7:50:08:c0:05:f8:
         99:d5:ac:f5:eb:a4:9a:ca:45:82:aa:b8:83:69:71:86:ee:eb:
         e1:82:57:e0:f6:08:da:ad:f2:95:d9:2d:c0:06:96:29:c1:b8:
         ce:03:9d:f4:a6:5a:d1:6a:cd:6c:b2:e7:3d:7c:a2:c7:54:26:
         24:75:ba:41:e8:12:51:aa:ea:de:80:11:17:0f:9d:44:80:70:
         27:04:5f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:44 2024 by rpki-client on console-ams.rpki-client.org