Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/tBIOhsF_tX8RNrbW8wFadRrMtfQ.roa
File:                     tBIOhsF_tX8RNrbW8wFadRrMtfQ.roa (raw, json)
Hash identifier:          2VErczWXhwq3C7yvepz1aJr/tZGQ2Sj6buZn9g6njzU=
Subject key identifier:   B4:12:0E:86:C1:7F:B5:7F:11:36:B6:D6:F3:01:5A:75:1A:CC:B5:F4
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       010E
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/tBIOhsF_tX8RNrbW8wFadRrMtfQ.roa
Signing time:             Fri 01 Dec 2023 01:30:15 +0000
ROA not before:           Fri 01 Dec 2023 01:30:15 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        111.216.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Dec  1 01:30:15 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=B4120E86C17FB57F1136B6D6F3015A751ACCB5F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7e:af:63:47:ab:0f:ee:8d:a7:19:3c:f7:c4:
                    88:cc:fa:13:00:87:49:88:8a:04:55:47:5a:5a:1a:
                    6a:02:37:29:9f:d1:d9:9f:1b:23:12:bb:25:6a:9a:
                    50:e7:07:6b:97:e7:0e:36:be:f8:7f:49:83:3a:4b:
                    76:37:65:23:f3:b0:29:22:85:77:15:37:d0:34:af:
                    85:50:2e:c6:0f:74:5e:7e:b9:dd:a7:99:6e:7d:6f:
                    40:e2:63:10:7f:9d:34:e8:14:46:11:a3:aa:46:6d:
                    af:13:56:cc:a7:90:84:8f:ce:37:64:58:ef:c4:1f:
                    32:50:df:f3:95:4a:42:dc:69:30:6b:21:cc:48:95:
                    15:5c:1e:3e:34:f6:78:c4:39:b4:a7:7c:5f:e0:2f:
                    07:1d:79:7f:01:1b:c5:11:af:96:b6:bf:81:91:15:
                    35:b2:3f:74:34:8c:56:8a:a3:b3:a2:44:ab:2e:b2:
                    bc:88:c7:85:4d:de:77:16:2c:5d:a7:a8:15:b7:fd:
                    44:60:6d:a9:c4:99:14:e0:04:f4:35:16:d8:e3:e2:
                    54:02:69:b8:0c:3e:15:a8:8f:39:fd:3b:f4:f8:a7:
                    b6:77:83:c1:0e:55:5f:c6:12:a6:ef:5a:7e:a4:b9:
                    69:12:09:24:05:eb:ae:78:7a:6c:83:6e:0d:88:fb:
                    ec:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:12:0E:86:C1:7F:B5:7F:11:36:B6:D6:F3:01:5A:75:1A:CC:B5:F4
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/tBIOhsF_tX8RNrbW8wFadRrMtfQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.216.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         9a:cd:bf:04:89:7f:48:1a:f6:43:bd:0d:bd:8d:54:24:38:db:
         e6:f0:c2:76:3f:a1:c9:11:8b:7e:35:0a:60:1d:02:3e:99:03:
         d8:cf:ca:d5:57:bf:cb:48:95:86:4a:0f:8f:ad:f2:56:50:1e:
         86:06:f5:8b:6d:a3:26:d6:78:bf:9a:65:71:05:07:6a:5b:1e:
         1c:34:19:95:99:f0:57:a9:fe:7e:64:94:4c:d1:a8:cf:7e:42:
         2c:14:aa:c4:54:2e:02:26:74:73:0c:b1:47:46:ee:c5:3b:51:
         f0:b3:0a:8c:c3:a5:4e:c6:35:15:c1:85:2e:83:7f:33:39:30:
         72:17:c2:9e:ad:e1:f5:73:ec:85:a6:7c:ec:9d:1b:e6:a4:22:
         e4:06:39:a4:2a:98:1d:49:e8:2e:06:c8:77:98:39:90:6d:7f:
         58:47:0c:b8:a4:0d:e1:fd:15:4b:1a:81:c8:28:51:c4:53:d4:
         b6:10:1d:e0:4a:a9:49:2d:43:26:22:2f:68:39:1f:67:94:47:
         7d:6f:b7:12:0c:84:69:72:de:f8:a9:17:25:5d:de:3c:ca:a6:
         0f:2b:fd:44:ca:a7:f5:49:61:e1:c5:c3:5d:b8:e5:b0:da:51:
         e8:bb:dd:85:b8:50:ff:26:73:73:86:dc:db:46:66:87:d5:c5:
         69:09:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:52 2024 by rpki-client on console-fra.rpki-client.org