Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/u1iJEaGYvFPMF9k25p8KEuwruA4.roa
File:                     u1iJEaGYvFPMF9k25p8KEuwruA4.roa (raw, json)
Hash identifier:          fh5BeAKi1U7XlfJpC9iKV5ENfsiSxs4q6x/yhwOP6Tg=
Subject key identifier:   BB:58:89:11:A1:98:BC:53:CC:17:D9:36:E6:9F:0A:12:EC:2B:B8:0E
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       016A
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/u1iJEaGYvFPMF9k25p8KEuwruA4.roa
Signing time:             Thu 31 Oct 2024 01:34:21 +0000
ROA not before:           Thu 31 Oct 2024 01:34:21 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        211.10.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:34:21 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=BB588911A198BC53CC17D936E69F0A12EC2BB80E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:7c:94:f4:6d:ee:38:41:21:cf:78:8c:a9:
                    4e:d3:06:ba:6e:f0:07:13:97:a0:75:4c:4b:c1:f6:
                    ec:43:31:0b:01:b5:9c:b0:50:47:0c:14:0f:5d:7b:
                    df:d8:ff:f6:77:8c:24:db:1e:35:c6:3a:94:9c:7b:
                    ad:3b:a7:ae:85:13:2d:33:21:06:1f:a2:fe:d3:34:
                    78:7c:a5:c6:3b:70:93:1d:be:79:7b:e8:25:b8:b9:
                    c3:a6:5e:ef:94:78:33:a3:ed:d5:5c:2e:db:83:b0:
                    b4:b4:77:52:be:e2:dc:cf:57:b9:04:eb:fa:11:b1:
                    17:05:a1:6a:31:b0:bb:42:ae:6b:71:51:02:12:5b:
                    28:cc:45:de:78:45:13:f0:7e:7a:56:cd:e9:84:83:
                    be:6e:3a:3c:7c:f5:c3:c0:af:73:23:9d:20:4c:4d:
                    5b:e7:04:8d:01:2d:20:fe:b9:d7:0e:3e:5f:43:f9:
                    05:6b:52:c5:65:ce:78:33:f5:24:92:c8:6a:a0:54:
                    fe:c0:f9:72:62:82:d0:95:e6:e3:40:14:a1:2d:a8:
                    fb:1f:d1:69:04:20:55:6a:c1:2e:c5:b6:85:21:f1:
                    54:46:ad:e7:0f:6c:78:db:e8:84:d5:78:fd:6d:58:
                    d3:18:20:1d:4f:38:98:55:a5:5b:46:d9:38:03:e2:
                    65:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:58:89:11:A1:98:BC:53:CC:17:D9:36:E6:9F:0A:12:EC:2B:B8:0E
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/u1iJEaGYvFPMF9k25p8KEuwruA4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:77:36:e2:82:00:11:04:d4:a2:57:2b:9d:a8:8f:64:55:96:
         7d:f3:8e:cd:33:39:0b:77:14:a3:53:28:aa:fa:ec:b5:63:b8:
         77:cf:1f:59:56:b4:1e:84:4b:06:89:24:6e:63:28:dc:f0:71:
         ac:39:57:b9:b7:68:22:ec:a1:44:1f:11:1f:c6:bb:54:66:31:
         03:e7:18:bd:89:d3:47:1f:f5:be:b4:36:ac:22:f5:50:11:82:
         11:b8:c7:6e:33:dc:35:09:c5:7c:73:8f:90:b9:44:45:40:b1:
         43:3d:a2:6c:25:49:14:4f:4c:58:ba:1a:93:08:7a:5a:82:68:
         4b:15:69:1c:02:b4:70:56:3e:73:9d:b4:01:34:59:5d:4f:c6:
         5d:bd:e8:4a:29:22:1e:10:07:5a:1d:f4:b5:a9:91:66:b5:f2:
         5f:3d:f4:06:dd:fc:99:e3:d7:c2:38:75:58:fd:88:d6:73:d8:
         06:c5:36:df:cb:93:31:00:43:94:a6:78:18:6c:eb:05:c4:bd:
         03:c7:0e:ee:d6:03:22:7a:96:3f:e7:a4:b5:12:58:b2:59:fc:
         ac:b1:7d:d4:3e:63:d0:d4:92:ff:fd:5d:4d:3f:fe:39:4e:a2:
         44:b5:1e:8b:32:18:d4:2e:1e:1e:09:67:69:7c:29:f6:0f:32:
         45:09:61:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:02 2025 by rpki-client