Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/niz9cqLodpUVX0WsX55TIUr2smU.roa
File:                     niz9cqLodpUVX0WsX55TIUr2smU.roa (raw, json)
Hash identifier:          ImHxW1jxN2YQxToxGSXJ/L07B+bSNQbpTC/hY4jgS7k=
Subject key identifier:   9E:2C:FD:72:A2:E8:76:95:15:5F:45:AC:5F:9E:53:21:4A:F6:B2:65
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0157
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/niz9cqLodpUVX0WsX55TIUr2smU.roa
Signing time:             Thu 31 Oct 2024 01:30:53 +0000
ROA not before:           Thu 31 Oct 2024 01:30:53 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        58.87.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:30:53 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=9E2CFD72A2E87695155F45AC5F9E53214AF6B265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:60:80:b4:47:44:eb:bc:40:2f:41:84:47:
                    27:fb:a4:8e:a5:65:2b:24:4a:eb:c9:28:9e:12:4a:
                    5e:6a:d8:43:f6:6c:fd:ba:b7:cb:88:9a:3e:8e:1c:
                    c1:7e:e5:ae:2d:4c:94:d9:85:ec:df:43:0d:43:12:
                    d1:bf:b1:89:69:9f:6f:89:81:50:53:34:51:02:83:
                    63:dc:8f:b0:03:8b:1f:c0:e8:8d:0f:d6:34:97:84:
                    ef:f5:2d:af:9b:62:26:75:ce:e8:5b:01:be:10:65:
                    f5:c9:8c:38:95:67:64:7f:c7:e0:0e:88:ba:cf:20:
                    e9:2f:d6:9f:66:f7:57:6a:b6:a5:1c:4b:51:26:16:
                    ae:b6:ee:cc:77:a3:6c:e2:4b:88:6a:39:8d:77:da:
                    c8:eb:60:72:5a:9f:9d:34:51:45:40:5f:45:ae:dd:
                    17:3a:55:4b:65:4f:90:7e:dc:e9:1c:84:f1:b4:80:
                    b7:11:e2:0f:bf:79:c4:1c:bc:20:cc:1b:c6:50:c7:
                    18:9c:ac:ff:ea:55:6c:41:9f:1a:04:94:4f:57:2e:
                    db:89:14:6f:88:d4:e5:31:28:07:b9:08:25:81:8f:
                    64:65:31:ac:45:5f:ae:6f:0a:9e:f1:2d:74:1c:40:
                    6d:69:de:fb:99:ae:2b:f7:1b:45:56:ee:99:a7:95:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2C:FD:72:A2:E8:76:95:15:5F:45:AC:5F:9E:53:21:4A:F6:B2:65
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/niz9cqLodpUVX0WsX55TIUr2smU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.87.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5e:ea:32:74:a5:63:20:00:ef:3d:ed:9d:68:6f:df:c9:32:c7:
         c2:1d:00:ca:01:da:0c:0a:e7:fa:34:0c:2b:e3:d6:ea:d9:67:
         ef:e8:82:c0:25:7d:e1:bb:1a:49:ab:59:bc:56:99:d5:e3:d8:
         03:04:79:5d:38:94:49:df:80:93:83:e4:a3:b2:1c:9b:2f:e8:
         67:3d:f7:2b:df:52:e9:1e:fc:c4:ab:31:35:2f:c8:77:f3:4d:
         50:19:80:52:fc:3e:37:64:1d:42:ac:b5:b4:93:5c:fe:81:c0:
         fe:43:a5:77:7a:60:93:07:d0:78:a7:31:37:b3:30:78:59:cc:
         ff:b6:a3:4b:84:ba:87:9f:2f:64:67:27:0d:40:71:db:43:af:
         04:b3:c0:c4:0a:7a:07:29:86:f1:0d:b9:fc:93:a4:c9:39:e9:
         60:99:14:42:16:34:8d:c6:ad:64:ed:eb:61:e3:52:f3:7c:6e:
         b5:54:64:40:7b:ac:5a:67:11:e7:c7:d6:09:fb:e4:9b:b2:dc:
         2c:3b:c8:2f:3a:cf:02:76:ed:1a:4a:d5:58:82:38:c9:7f:fc:
         a9:4d:f5:3c:d0:c7:4f:ee:8f:74:27:df:cd:84:1c:61:ff:e2:
         ad:74:12:ae:96:1c:94:59:d2:01:22:a9:26:24:b1:bd:f2:72:
         05:01:e0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org