Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/p9TKr128jSPls1T7iDuHcLPhpfA.roa
File:                     p9TKr128jSPls1T7iDuHcLPhpfA.roa (raw, json)
Hash identifier:          nj9uwTdis8nVRpsn5HjeXq9wB/JsBX+KnNBlfG1z9BY=
Subject key identifier:   A7:D4:CA:AF:5D:BC:8D:23:E5:B3:54:FB:88:3B:87:70:B3:E1:A5:F0
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0137
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/p9TKr128jSPls1T7iDuHcLPhpfA.roa
Signing time:             Tue 30 Apr 2024 01:29:11 +0000
ROA not before:           Tue 30 Apr 2024 01:29:11 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        36.2.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Apr 30 01:29:11 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=A7D4CAAF5DBC8D23E5B354FB883B8770B3E1A5F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:63:9c:09:e7:12:42:fe:82:e4:d5:8b:dc:8b:
                    40:06:2c:38:74:62:0d:21:f2:56:fd:5e:ca:9e:67:
                    1d:d8:51:08:6b:df:3c:73:83:c2:fe:61:ea:86:f8:
                    c7:c6:3a:ab:34:9c:00:41:93:18:d2:7a:ec:13:3f:
                    cc:e9:61:7b:c8:d4:e8:14:4e:c6:94:23:62:5a:69:
                    a5:74:3c:60:39:1d:4d:46:f8:62:2e:e5:c3:f0:ab:
                    0c:2b:96:cb:8a:19:52:af:cb:6a:54:30:30:c9:32:
                    eb:fb:dc:44:d1:15:6c:07:9a:13:7e:0e:f6:d2:57:
                    82:ef:45:e7:11:51:1f:30:b1:f9:43:6e:28:d8:bc:
                    15:aa:c3:87:83:43:1c:77:bd:5f:5a:c7:1a:36:08:
                    c7:f3:4f:4c:3a:9a:5a:99:fd:38:ff:11:fd:65:b7:
                    36:a4:cc:e0:9a:f3:cd:7e:1e:a9:98:54:e7:1b:b2:
                    fe:29:bf:e5:f5:52:af:42:ef:28:35:fa:44:69:63:
                    fd:5e:fe:f7:32:91:6a:fa:46:0d:fb:d3:f5:86:fe:
                    a3:b2:db:56:fe:b8:92:89:03:e3:21:7d:11:ab:00:
                    65:01:be:dd:c0:ea:47:10:42:d0:89:05:72:85:ec:
                    af:b3:75:b8:21:f1:9d:cf:72:56:2e:ec:2b:00:4c:
                    6d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D4:CA:AF:5D:BC:8D:23:E5:B3:54:FB:88:3B:87:70:B3:E1:A5:F0
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/p9TKr128jSPls1T7iDuHcLPhpfA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.2.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         35:15:76:a4:12:c1:29:39:c2:51:d7:99:34:9a:1f:3a:6d:75:
         a6:fc:d5:27:bd:b4:03:52:31:ef:4c:59:6f:4a:8a:0e:cc:8f:
         5b:33:c9:29:02:56:8e:3b:e2:23:b8:3d:eb:35:32:cc:35:9d:
         98:be:94:e6:85:0f:df:6c:dd:80:12:0e:fd:02:83:3c:a9:2f:
         39:49:be:81:e4:24:fd:3e:d0:8d:71:d5:ef:37:1f:e1:06:5d:
         0d:c3:5d:13:6b:d8:40:b5:36:f9:ee:d3:75:7c:66:18:9d:5d:
         95:a8:52:7f:6c:7b:8d:f8:19:2a:12:18:51:02:11:69:f9:1d:
         22:35:ca:59:6d:b6:3f:5a:bb:47:04:0f:8d:aa:ba:57:19:43:
         42:91:be:80:5d:6c:4d:ac:f9:7a:09:54:2c:56:3b:ad:69:7f:
         86:e1:5e:b9:54:cd:18:76:ef:0e:f2:26:bd:01:52:42:9f:42:
         56:22:67:fc:96:7c:4b:13:e0:28:e4:56:5e:cb:33:bd:fe:85:
         37:21:46:c5:f9:48:c2:05:67:a4:2e:8f:31:95:4e:76:b2:bb:
         eb:66:b7:3e:f3:7a:b4:82:55:4a:e5:90:91:6c:a1:11:e6:17:
         a0:50:90:42:e1:ab:8b:ab:10:35:5d:40:b5:f8:ee:8e:c9:48:
         32:d7:02:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:52 2024 by rpki-client on console-fra.rpki-client.org