Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/pkyWafNOah0K3vnTcS4B4XwWzT0.roa
File:                     pkyWafNOah0K3vnTcS4B4XwWzT0.roa (raw, json)
Hash identifier:          ZCsYUwTD+kCND99Xaxd2/yoQqEjvreNI6fmm5TpDBTk=
Subject key identifier:   A6:4C:96:69:F3:4E:6A:1D:0A:DE:F9:D3:71:2E:01:E1:7C:16:CD:3D
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0170
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/pkyWafNOah0K3vnTcS4B4XwWzT0.roa
Signing time:             Thu 31 Oct 2024 01:34:24 +0000
ROA not before:           Thu 31 Oct 2024 01:34:24 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        150.249.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:34:24 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=A64C9669F34E6A1D0ADEF9D3712E01E17C16CD3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:72:69:22:9e:4b:7c:a4:df:f3:75:1e:45:ac:
                    a5:b3:2a:ff:6f:76:53:24:29:d3:74:52:82:1f:59:
                    e4:a5:38:24:ba:da:df:b7:d2:e3:8c:29:21:bb:c1:
                    2c:7c:d0:70:35:de:28:e3:25:a7:a8:af:5f:a3:f6:
                    10:ea:bc:6d:47:22:53:af:55:52:15:00:83:59:dc:
                    24:25:4e:c4:65:4a:5e:d3:11:00:7d:d5:32:0e:58:
                    00:2e:cf:65:a6:df:d5:18:96:39:03:58:3d:31:16:
                    21:34:75:a0:0d:af:44:94:c5:de:6b:c1:8b:d9:a0:
                    5c:69:de:6d:dc:23:f5:e5:4a:e9:c9:49:08:63:85:
                    58:a2:f3:57:00:a7:24:61:66:55:43:eb:b0:86:30:
                    b7:ce:5b:c9:4b:0a:47:63:f9:82:c1:96:b4:c4:30:
                    ed:ac:41:8e:2f:48:b9:40:55:35:81:7e:7b:13:96:
                    1d:b0:c1:f2:25:4f:95:cc:6f:81:ed:39:01:27:27:
                    cc:b0:b0:b0:6d:05:c9:e8:5a:19:de:65:65:a0:a1:
                    4a:46:6b:57:63:80:ef:52:0c:b0:5e:d3:25:8b:e4:
                    74:de:b8:7c:f8:d4:c1:cb:3c:a4:b4:88:c4:e2:c9:
                    e8:f6:5b:c5:95:b9:77:8b:75:3a:46:80:20:af:d5:
                    45:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4C:96:69:F3:4E:6A:1D:0A:DE:F9:D3:71:2E:01:E1:7C:16:CD:3D
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/pkyWafNOah0K3vnTcS4B4XwWzT0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.249.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:93:08:3c:26:96:2a:1a:34:d8:d5:6f:9f:4e:a9:6b:15:a8:
         9e:f6:46:53:69:83:9a:6e:f2:38:cb:fc:69:33:0d:37:9a:93:
         d5:92:cf:a7:93:7c:01:8e:b8:e9:8c:bb:ed:4e:7d:7c:d5:2a:
         41:ca:f5:a7:2d:88:9e:0f:8f:e4:ea:df:0f:0f:8c:02:93:ea:
         03:98:40:24:be:0f:6d:55:e9:79:78:07:ae:77:a9:f8:7f:77:
         f7:81:78:b9:5f:0f:d5:22:03:e3:fe:9f:cd:8e:24:cf:39:81:
         3b:fc:8b:da:f8:bc:cf:d5:00:5b:8b:95:9f:35:01:3a:1b:12:
         0f:c6:f9:b6:4a:00:e9:ac:fd:68:2d:92:1b:85:59:bb:a5:22:
         f0:f2:3a:2d:b8:29:d3:0b:58:63:38:ff:81:8e:b1:5b:dc:84:
         1c:45:76:55:04:2d:c6:7e:fe:c2:06:07:dc:dd:3a:49:1c:5a:
         09:2a:51:bd:d1:bb:98:36:a8:fa:05:fb:d5:7c:07:0f:64:8d:
         97:52:94:73:63:4e:c1:e4:0a:43:a5:6f:3e:96:31:92:36:ed:
         47:90:5b:2f:6e:70:af:9c:b9:d2:53:3f:8a:e2:b9:e9:32:dd:
         b7:22:61:32:ed:88:a6:ab:5e:1c:fc:08:a0:d9:4c:38:f7:69:
         e6:21:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:04 2024 by rpki-client on console-fra.rpki-client.org