Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/pPYLtTo1OTd7EtfDd6S74McSg2U.roa
File:                     pPYLtTo1OTd7EtfDd6S74McSg2U.roa (raw, json)
Hash identifier:          szDiJRaqyx+5SGgVUDUyooKAnHoRTKvVKcU38o4m5Jc=
Subject key identifier:   A4:F6:0B:B5:3A:35:39:37:7B:12:D7:C3:77:A4:BB:E0:C7:12:83:65
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0149
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/pPYLtTo1OTd7EtfDd6S74McSg2U.roa
Signing time:             Thu 31 Oct 2024 01:30:42 +0000
ROA not before:           Thu 31 Oct 2024 01:30:42 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        110.232.152.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:30:42 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=A4F60BB53A3539377B12D7C377A4BBE0C7128365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:36:f0:7a:96:33:df:9f:df:72:f3:03:79:
                    e8:14:8f:38:dc:70:1c:7f:a8:b2:49:c9:1b:59:8f:
                    93:89:fe:a8:65:79:7d:72:fa:65:6a:f6:41:6d:89:
                    94:3a:38:41:9b:8b:16:bb:0e:dd:6d:73:04:d9:6b:
                    38:27:19:28:23:b9:4c:c5:a8:a3:80:55:da:70:39:
                    df:f5:28:52:bb:95:a4:58:9e:fb:7a:69:5a:64:e5:
                    8d:3a:0b:f6:57:2a:3d:f7:98:53:73:b5:43:ee:b4:
                    77:63:4c:ce:75:87:14:51:f6:15:8a:78:ca:5c:30:
                    74:19:66:bc:94:39:68:ec:99:2b:4c:ed:8c:ec:c2:
                    d7:9e:3c:61:31:6f:58:88:f9:05:5e:87:5c:3f:11:
                    57:c1:83:90:c7:e0:6d:12:8f:7f:8a:a9:76:41:cf:
                    7f:22:df:0c:28:29:6d:ca:27:9f:97:34:21:70:07:
                    36:99:83:9b:a3:2b:94:d8:09:7c:e4:5e:37:c4:87:
                    c7:a0:d1:1d:02:db:7d:5c:0a:66:df:75:bc:e4:4d:
                    04:bd:e8:f3:a3:54:68:22:09:1e:44:13:95:43:64:
                    92:8c:1f:29:07:36:66:b9:83:a5:09:e3:82:46:50:
                    ed:40:73:de:b3:eb:df:fb:08:40:6c:95:f2:49:92:
                    a1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F6:0B:B5:3A:35:39:37:7B:12:D7:C3:77:A4:BB:E0:C7:12:83:65
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/pPYLtTo1OTd7EtfDd6S74McSg2U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         af:b9:b1:e2:f9:b9:1b:ca:68:3b:a8:24:fc:38:06:06:fd:a3:
         d9:96:3c:00:d1:16:e7:20:e0:dd:38:66:bf:b7:f0:fc:51:71:
         b7:33:bd:f2:6b:26:23:63:0a:1c:99:02:1f:c0:28:bd:43:1f:
         47:73:bf:52:a8:bf:2b:9a:19:e8:0e:d8:ce:c9:1d:c1:27:eb:
         8f:fa:28:e9:3a:5f:3d:e1:34:7d:1c:7a:89:52:df:fa:c2:10:
         09:8b:5b:e9:b3:7e:f2:46:30:6e:cd:41:bb:3c:9c:8c:b1:76:
         29:8f:f8:0f:6f:59:72:86:4a:5b:a8:70:d4:24:19:7f:5e:58:
         84:2e:89:20:c6:1c:d2:20:7b:bb:05:10:4c:ee:61:27:c7:be:
         ba:ee:19:0f:66:0c:d4:cc:ff:1d:29:8c:47:91:3a:c6:06:a3:
         35:5a:97:29:b1:77:df:30:88:3a:6d:a9:14:44:30:ce:9f:23:
         9a:0d:9c:9c:c6:fb:6c:c0:62:cf:ab:ee:bb:86:27:88:f6:f0:
         57:e1:7e:0a:1e:68:c7:5a:7a:6f:5a:e5:c9:2c:01:a0:41:22:
         53:41:31:54:ab:ab:bd:39:a8:d0:ad:8b:07:18:ae:ba:a5:74:
         88:e0:3e:df:b6:18:86:26:6f:9c:d9:6c:1e:18:13:c3:96:86:
         09:6a:fe:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:14 2024 by rpki-client on console-fra.rpki-client.org