Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/nej3gE9alUC8LkaamZ_Jgsv_YKk.roa
File:                     nej3gE9alUC8LkaamZ_Jgsv_YKk.roa (raw, json)
Hash identifier:          pLO5TpTBxe5QJ4vjP0upCcCFCwf2NDzfy6Foq5iBTd8=
Subject key identifier:   9D:E8:F7:80:4F:5A:95:40:BC:2E:46:9A:99:9F:C9:82:CB:FF:60:A9
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0119
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/nej3gE9alUC8LkaamZ_Jgsv_YKk.roa
Signing time:             Fri 01 Dec 2023 01:31:51 +0000
ROA not before:           Fri 01 Dec 2023 01:31:51 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        202.238.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Dec  1 01:31:51 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=9DE8F7804F5A9540BC2E469A999FC982CBFF60A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:25:79:5d:4e:af:0d:de:bc:b2:d7:c1:1b:
                    0d:9c:c1:6c:10:40:84:b8:0b:18:20:5a:c3:fc:d9:
                    d2:6e:f6:75:5a:5d:0c:9b:6f:21:b3:f6:13:1c:ed:
                    1e:85:c2:e9:23:da:71:fd:be:2f:ab:08:3a:c0:f1:
                    b4:71:38:e9:0e:5b:99:a0:b0:01:ff:08:13:0d:d2:
                    b0:af:48:07:22:6c:f5:6d:84:be:49:75:9c:6f:3b:
                    1a:4d:5b:f1:b6:00:27:f2:4c:c2:99:61:7d:77:4a:
                    ed:46:9a:29:7b:fc:b2:22:f1:7a:fa:0e:aa:6c:51:
                    7d:20:bd:65:30:77:fd:57:cd:99:0d:8a:2a:a9:cb:
                    e5:dc:b7:27:52:75:94:d2:54:56:cb:73:55:7e:18:
                    64:f2:0c:4b:38:bb:e7:f9:f6:2b:ae:d3:be:26:e8:
                    2b:03:f9:d0:0a:08:51:db:6c:eb:1f:eb:39:87:96:
                    f3:6a:c3:ff:bd:a6:e6:1e:03:f4:f9:63:c5:1e:e5:
                    9a:48:cb:bb:35:42:3e:29:81:3d:cf:0a:86:f4:04:
                    10:c8:68:e1:21:7f:39:7f:87:10:e4:20:23:58:ed:
                    8f:a6:2b:bd:06:19:8e:5a:4b:6a:ce:b1:93:da:9f:
                    4d:8d:d5:cf:4a:15:00:0f:09:ee:74:de:7e:18:b2:
                    00:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E8:F7:80:4F:5A:95:40:BC:2E:46:9A:99:9F:C9:82:CB:FF:60:A9
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/nej3gE9alUC8LkaamZ_Jgsv_YKk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.238.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         46:f3:e2:ff:d3:4f:29:89:2d:2b:22:b8:55:3d:ec:bb:d8:1d:
         8f:ff:ee:8f:1d:65:12:9c:78:f1:0f:b8:9e:92:7e:e9:53:24:
         42:2f:f0:b0:cf:3f:6a:93:ed:8e:5e:39:cc:86:19:05:6c:4f:
         86:73:b8:ba:bd:19:b4:dd:9f:46:40:8a:67:e9:d5:51:cb:34:
         93:c9:f1:c9:fd:86:2d:2b:8c:6f:26:84:d0:b8:8d:2b:e6:91:
         11:b2:7a:71:0b:24:cc:6c:32:83:b2:d4:ee:35:2a:b8:d0:7a:
         58:7c:08:49:c0:20:1a:48:a8:50:62:cf:43:84:96:39:4b:af:
         ad:9b:c0:43:3c:14:95:df:9b:29:f9:5e:ef:80:0e:45:00:78:
         7b:24:2a:2a:b0:de:e1:36:d2:2d:36:06:f7:72:f8:7a:95:a9:
         2d:28:ed:a5:ad:48:6c:86:02:6d:76:ca:3c:f6:90:56:a2:29:
         93:67:9e:96:c3:0f:23:af:b7:5b:ee:33:29:e8:98:01:5b:12:
         b5:f1:45:c4:05:b7:07:5d:a0:96:63:e3:7c:20:19:29:e0:33:
         f6:b6:da:8a:ae:63:56:66:90:39:bf:52:6b:b7:47:fe:6e:1d:
         42:7e:5b:c0:f2:6d:1b:0a:26:92:ba:e9:ec:20:0c:da:79:91:
         43:b1:bb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:52 2024 by rpki-client on console-fra.rpki-client.org