Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/p699-YF8sDAHU1TEjMIjnLuZMJA.roa
File:                     p699-YF8sDAHU1TEjMIjnLuZMJA.roa (raw, json)
Hash identifier:          bqAW+hrWbXNMlBHjzgNUtPbfkn/eJR3C7AkbIJNpx1I=
Subject key identifier:   A7:AF:7D:F9:81:7C:B0:30:07:53:54:C4:8C:C2:23:9C:BB:99:30:90
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0106
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/p699-YF8sDAHU1TEjMIjnLuZMJA.roa
Signing time:             Fri 01 Dec 2023 01:30:06 +0000
ROA not before:           Fri 01 Dec 2023 01:30:06 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        150.147.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Dec  1 01:30:06 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=A7AF7DF9817CB030075354C48CC2239CBB993090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:08:5a:8a:8d:89:b8:f6:66:1c:79:57:d2:
                    46:df:9e:0a:97:8e:ea:d4:04:0b:b6:c3:13:33:b3:
                    61:13:9b:b2:7c:2e:f1:1e:0b:70:ce:bb:fa:dd:7c:
                    cb:d5:54:66:ee:5e:c9:81:1c:ff:56:ec:bd:32:ae:
                    7a:8a:e4:65:d4:d1:bf:9e:b9:8f:ae:9a:0e:d0:b4:
                    47:db:89:92:3d:30:db:58:b0:10:6c:4d:69:97:23:
                    ce:e3:b2:fd:e5:cc:7b:ff:5b:ac:65:85:ab:1a:10:
                    67:5e:09:53:15:44:ea:61:72:f1:33:3b:2f:4c:89:
                    f6:ca:a4:12:9b:b5:44:25:e4:62:b5:30:c6:e8:27:
                    61:ff:b2:0b:9e:63:31:5e:84:ff:41:1e:8b:35:f9:
                    72:8d:30:19:bc:a0:68:67:57:51:36:08:1c:90:d4:
                    05:4d:4c:3f:19:54:e3:a3:1f:b9:77:49:bf:f2:00:
                    76:2c:08:69:3a:fa:23:2d:df:50:1b:3a:8b:5e:1c:
                    a8:80:e5:09:9d:c3:f6:6d:a5:ee:92:5d:40:9b:94:
                    64:3c:e4:65:4e:99:ac:e3:64:9e:5f:c5:9d:56:81:
                    c4:c1:17:6d:fb:71:c9:85:e4:35:7d:84:46:a7:8f:
                    03:71:10:ea:04:4a:af:b7:a2:ba:26:41:12:62:0d:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AF:7D:F9:81:7C:B0:30:07:53:54:C4:8C:C2:23:9C:BB:99:30:90
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/p699-YF8sDAHU1TEjMIjnLuZMJA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.147.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6d:39:db:41:8b:b2:90:cf:a9:34:79:e4:b5:3f:36:16:22:12:
         bd:84:1c:0f:ba:ed:0b:91:4d:94:cc:0a:2e:50:44:85:7b:5b:
         c9:3c:ce:18:e4:6a:18:a4:0e:00:24:b4:b8:64:a3:82:1e:87:
         60:fb:ee:8f:62:d0:69:5e:09:ee:30:a0:5a:49:bf:fe:6b:a5:
         c1:c5:2d:00:8d:18:08:b3:45:8f:e9:24:6b:55:f5:42:8a:f9:
         cb:60:56:dc:76:f6:b5:a1:c9:e5:7c:8a:24:40:6c:1b:10:5b:
         37:e6:51:11:7b:93:c9:d4:a2:1e:5c:1d:43:65:11:6f:15:c7:
         fe:48:fd:75:cb:68:3d:72:6a:cd:c9:63:99:79:50:65:d8:41:
         e2:a8:ce:8c:08:f4:41:ca:8e:d6:ef:d2:82:b5:15:5e:7a:d5:
         0a:77:de:95:a3:81:4f:68:a3:a7:7d:9b:7c:03:a6:3e:0e:c5:
         30:29:48:7c:a2:f7:1a:51:15:f4:69:94:6f:a3:36:14:b9:a5:
         7f:2b:9c:57:d7:a4:38:18:76:aa:ae:fe:1c:54:fe:cf:75:0d:
         52:7b:ea:ba:df:c6:88:31:aa:37:29:53:06:cf:e5:d0:3c:2f:
         67:31:9d:2c:54:01:66:79:9b:da:40:75:eb:cf:da:26:e5:f9:
         01:c6:da:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:52 2024 by rpki-client on console-fra.rpki-client.org