Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/siajIA-V9oFOEVxUBcoaboUjbmA.roa
File:                     siajIA-V9oFOEVxUBcoaboUjbmA.roa (raw, json)
Hash identifier:          sZrdiQyefj+gNpm/lySTnlAGYcvhOARALubYgGOH2G0=
Subject key identifier:   B2:26:A3:20:0F:95:F6:81:4E:11:5C:54:05:CA:1A:6E:85:23:6E:60
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       011D
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/siajIA-V9oFOEVxUBcoaboUjbmA.roa
Signing time:             Fri 01 Dec 2023 01:31:54 +0000
ROA not before:           Fri 01 Dec 2023 01:31:54 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        210.132.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Dec  1 01:31:54 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=B226A3200F95F6814E115C5405CA1A6E85236E60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b7:4f:0e:e1:8c:24:dd:18:38:5c:bd:06:05:
                    86:9f:73:5f:4f:17:1c:c5:63:c3:4f:23:fa:a5:76:
                    3e:0f:05:30:7f:f8:6c:3f:cd:38:63:69:a4:b1:f6:
                    b3:2d:bf:c9:ea:df:84:6e:1e:8a:4c:28:89:b7:ce:
                    9d:1c:5e:a0:4b:42:69:34:03:c8:05:d6:50:06:d5:
                    c2:e8:ad:c4:e2:65:f6:3a:6c:51:cd:84:1d:c7:5b:
                    ad:95:7f:42:2c:99:d9:bf:0d:af:ea:96:13:d4:d2:
                    8d:f7:50:f6:b9:5b:e2:ea:8c:ab:c7:e0:5b:18:aa:
                    29:31:a2:d4:24:8e:af:67:2b:36:2b:61:06:4b:07:
                    23:d0:7c:cd:84:1f:6a:25:ec:e6:7f:36:66:f3:75:
                    9b:84:19:0f:6a:c3:df:7b:7c:30:ca:a7:9b:2a:2a:
                    49:99:e5:87:45:3d:cf:4e:b2:61:7b:ed:42:4f:b5:
                    09:b2:dd:d4:1e:24:45:c2:eb:e4:e2:f3:4f:83:e8:
                    91:ec:5c:f8:b6:0f:04:6e:09:fb:6c:70:39:78:2d:
                    9d:a0:47:d6:42:f9:70:6b:c0:20:47:14:c6:86:9c:
                    ee:ba:f1:9a:4a:32:67:00:48:a0:26:62:a1:2e:35:
                    9f:05:bf:1b:34:2f:db:ec:53:06:bc:e5:0a:f8:29:
                    9b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:26:A3:20:0F:95:F6:81:4E:11:5C:54:05:CA:1A:6E:85:23:6E:60
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/siajIA-V9oFOEVxUBcoaboUjbmA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.132.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         39:76:b0:b5:72:8b:3f:96:b1:69:b5:1c:0c:69:46:ba:0a:7c:
         3a:e4:5d:d4:8c:51:00:32:05:ef:56:81:b1:a7:db:9a:db:0b:
         c8:07:52:f6:f3:6d:b4:c1:70:98:15:dd:1d:bf:af:e1:6d:b0:
         c4:4e:a5:db:05:5d:aa:25:44:11:1e:3d:eb:42:10:0c:50:22:
         09:5c:85:ac:77:85:48:c2:9e:dc:bb:bc:7f:cc:50:9c:4f:8d:
         2e:ae:b8:e7:b2:44:a2:05:88:4d:28:75:6f:e3:5e:21:f9:99:
         bb:c3:70:4a:2b:fd:c8:aa:45:59:64:f5:ec:57:93:5a:ad:57:
         95:bf:c0:da:7f:ba:50:a4:a4:b1:48:dd:19:9e:1c:92:ab:cf:
         ef:8f:1f:dd:48:bd:1f:e3:96:54:61:ae:8f:91:b6:96:b9:66:
         2f:42:be:dc:63:53:5d:86:b0:77:71:2e:71:35:dd:84:de:45:
         d9:6a:59:b8:ed:17:a0:32:54:13:c3:e7:2a:d7:51:ec:b0:ac:
         36:d1:f7:8e:c1:fd:2e:e8:82:3a:40:64:f2:cf:fa:93:d6:5a:
         56:65:d8:cb:96:23:1e:e9:ee:dd:d9:68:ff:f0:29:5b:30:ca:
         b0:92:bd:60:b6:7b:86:7a:bd:b4:9b:09:d4:c5:0e:4f:01:9a:
         8e:19:f6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org