Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/zk9TReqp4wnbVGwI5dzU_pYyTK4.roa
File:                     zk9TReqp4wnbVGwI5dzU_pYyTK4.roa (raw, json)
Hash identifier:          B7cScAcLlSVrjFXfbWgN9UvmmOL6NEPuks65nLwOMlU=
Subject key identifier:   CE:4F:53:45:EA:A9:E3:09:DB:54:6C:08:E5:DC:D4:FE:96:32:4C:AE
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0104
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/zk9TReqp4wnbVGwI5dzU_pYyTK4.roa
Signing time:             Fri 01 Dec 2023 01:30:05 +0000
ROA not before:           Fri 01 Dec 2023 01:30:05 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        39.110.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Dec  1 01:30:05 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=CE4F5345EAA9E309DB546C08E5DCD4FE96324CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:e7:a4:d2:b4:0f:96:8e:1a:b8:f3:7a:d2:
                    62:e8:a8:28:15:94:30:0c:1d:95:95:5e:ad:82:3b:
                    55:59:26:b5:e0:5e:7d:52:14:02:76:3f:57:cb:04:
                    5e:dc:d5:b5:3b:56:12:54:e0:04:a2:fd:f4:3d:f1:
                    ef:b1:2d:50:9e:5c:43:b9:75:3e:b7:bf:5e:d8:d7:
                    1f:50:1d:14:5e:07:68:95:b4:2a:fc:8c:24:aa:64:
                    f7:42:ef:c1:37:ab:28:42:98:18:8c:f3:a9:1b:03:
                    2f:86:a2:92:55:e7:70:1d:cf:c4:20:36:37:cc:2e:
                    65:4d:b2:7f:73:05:67:b0:73:d7:de:c9:08:f7:6d:
                    0a:7a:92:2d:f9:be:17:23:88:af:6f:6d:7d:a7:5e:
                    28:ca:92:1b:e3:ee:29:4b:e5:6e:72:47:39:ac:fc:
                    72:61:75:48:41:9a:db:00:04:09:44:fa:0d:09:2c:
                    ad:6e:ac:8c:c0:49:d6:bb:ac:a5:56:9b:4f:59:64:
                    08:64:3d:53:1f:d9:6d:ee:7d:81:47:94:ab:ce:f9:
                    c2:00:0e:64:72:24:43:bb:16:09:5c:1e:ab:79:e9:
                    ac:6e:1f:63:57:78:57:60:d6:c1:a2:5c:51:35:e0:
                    32:b4:78:1c:85:56:ce:10:c4:73:9f:5a:21:56:eb:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4F:53:45:EA:A9:E3:09:DB:54:6C:08:E5:DC:D4:FE:96:32:4C:AE
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/zk9TReqp4wnbVGwI5dzU_pYyTK4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.110.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         2e:46:11:3e:6e:86:36:bf:97:08:72:bb:d7:40:ae:6f:11:22:
         3d:55:37:84:c5:b8:9c:6d:06:f9:56:bf:90:ae:14:c1:1a:10:
         07:c8:0f:e2:b3:73:63:d7:b8:b6:b4:54:32:ad:2f:6d:88:9e:
         54:1a:55:38:86:d4:d6:dc:d7:09:43:fa:e0:37:89:92:f1:a7:
         97:de:0e:25:c4:d8:03:c0:26:55:2a:9d:47:5a:e9:97:25:38:
         13:57:10:98:fd:c3:4a:87:a5:78:86:c0:dd:73:14:c0:ef:79:
         e9:69:86:0f:71:c4:d5:c5:c4:55:a2:3f:83:d2:51:de:d4:e8:
         76:6c:80:9f:42:f0:f7:3f:be:d6:6e:23:76:b5:93:3f:d8:12:
         2e:f4:94:57:bb:fd:93:3b:70:fe:30:74:b4:2a:ec:5d:e4:3b:
         23:b8:03:43:1f:2d:03:cc:54:23:59:46:0a:62:31:c8:53:56:
         c0:0d:2f:81:31:24:c8:ca:41:c9:95:ca:2f:90:59:4a:26:8a:
         52:ec:a0:6e:23:67:f2:e6:2e:04:b0:d8:56:ef:5c:1c:84:5c:
         4d:e1:98:37:34:58:1b:74:56:e1:37:47:a8:d2:47:b2:e0:64:
         54:1f:75:d6:aa:9f:84:11:22:01:c3:d4:bc:a7:7a:e0:aa:02:
         4f:b3:91:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:29:00 2024 by rpki-client on console-ams.rpki-client.org