Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/qvTON6ODIhofJHXfnoBqjkMQQOg.roa
File:                     qvTON6ODIhofJHXfnoBqjkMQQOg.roa (raw, json)
Hash identifier:          GfytMAQxmPRPedRLhShamLaFPSIsU2/L7Q4evlBASUQ=
Subject key identifier:   AA:F4:CE:37:A3:83:22:1A:1F:24:75:DF:9E:80:6A:8E:43:10:40:E8
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0160
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/qvTON6ODIhofJHXfnoBqjkMQQOg.roa
Signing time:             Thu 31 Oct 2024 01:34:15 +0000
ROA not before:           Thu 31 Oct 2024 01:34:15 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        182.168.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:34:15 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=AAF4CE37A383221A1F2475DF9E806A8E431040E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6e:2d:2e:59:95:78:49:83:aa:ee:a8:fc:96:
                    68:12:5f:ba:76:9c:e6:a4:30:c2:74:27:bd:5a:ca:
                    e1:c0:ed:07:b6:ee:41:eb:9e:6f:a0:70:2e:22:ba:
                    a6:86:cb:32:58:74:a1:63:a4:4b:41:e6:e8:21:fe:
                    b0:5b:be:a0:dc:df:8a:64:25:b3:77:b1:40:92:14:
                    ce:89:fd:ee:43:32:8c:5a:7f:18:bc:0e:3a:86:94:
                    11:af:cb:a1:91:d8:5e:74:9e:80:a4:7c:63:79:51:
                    00:03:5c:70:45:a7:08:10:c8:d9:86:f3:29:98:c9:
                    05:ea:71:dd:0f:15:58:18:31:41:ec:51:85:47:86:
                    f6:53:17:0d:61:9f:f3:38:b1:5a:12:b1:58:eb:bd:
                    e8:6a:12:8b:47:7f:64:99:b1:fa:05:ca:b1:e6:60:
                    ac:26:5b:94:4f:9e:90:76:64:a2:82:28:bd:98:f7:
                    1f:56:6f:6e:d3:af:57:e5:67:c8:71:7a:f5:e8:65:
                    02:c9:5e:bc:0a:cf:73:5b:47:ba:5c:16:ec:d9:43:
                    78:96:48:20:d8:ae:8a:31:87:d0:32:fb:b6:19:98:
                    3d:39:0f:87:24:55:93:88:d5:7d:23:d8:fd:1e:b2:
                    0c:c8:c4:86:aa:56:e0:14:a6:0b:20:01:52:d6:8c:
                    72:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F4:CE:37:A3:83:22:1A:1F:24:75:DF:9E:80:6A:8E:43:10:40:E8
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/qvTON6ODIhofJHXfnoBqjkMQQOg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.168.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         2c:d5:5d:d7:64:02:2a:47:be:68:0f:c4:bf:66:dd:b1:c1:ac:
         a3:6c:85:e0:85:70:12:e2:49:9a:5d:cd:1f:5d:35:29:80:b1:
         b2:68:5b:ee:17:ab:b1:b3:45:8e:bb:62:a1:bc:47:df:98:42:
         72:18:0a:ed:05:b1:32:4d:14:cd:b2:dc:12:c4:dc:a7:ce:ae:
         11:35:59:e5:f7:b5:e8:9a:df:48:dc:ae:17:29:61:ce:ad:c3:
         a1:ce:f3:4c:65:36:dc:c6:bc:87:e4:b9:26:45:b8:78:7f:66:
         6a:bc:03:e0:11:9a:5f:cd:8a:56:4d:3d:fa:fe:3b:b5:9f:40:
         b3:25:8a:c3:3d:f5:ca:46:d8:46:dc:05:78:90:d8:02:69:f0:
         47:f2:4b:8b:2e:cf:29:c9:43:6c:cc:10:db:25:ad:7b:3b:c0:
         e4:ec:7c:fd:4f:73:54:38:c7:a3:5b:6d:2a:77:0c:b6:0a:72:
         00:80:3f:26:63:f0:50:ac:4d:13:5b:17:c5:4a:87:6e:50:10:
         66:c7:5a:6b:45:e3:60:2b:3b:e9:14:35:40:1c:f1:7d:78:ab:
         5e:68:45:74:00:d8:61:fd:2e:23:aa:ad:a5:a6:e3:55:d5:36:
         43:64:fa:41:e7:ec:39:2a:0b:88:63:68:2d:0c:23:5c:98:53:
         bf:c6:ec:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:14 2024 by rpki-client on console-fra.rpki-client.org