Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/1WTGKcUhcQyk8r4rJfMUCGlaPfY.roa
File:                     1WTGKcUhcQyk8r4rJfMUCGlaPfY.roa (raw, json)
Hash identifier:          Hm8M3zlKfAZ//N3gZSw+OrlvZX1YleQ78z/BmjEHqxI=
Subject key identifier:   D5:64:C6:29:C5:21:71:0C:A4:F2:BE:2B:25:F3:14:08:69:5A:3D:F6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02BF
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1WTGKcUhcQyk8r4rJfMUCGlaPfY.roa
Signing time:             Fri 31 May 2024 01:41:46 +0000
ROA not before:           Fri 31 May 2024 01:41:46 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        210.229.72.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 703 (0x2bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:41:46 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=D564C629C521710CA4F2BE2B25F31408695A3DF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:66:e0:76:d6:f2:ec:db:65:5d:7b:e2:c6:dc:
                    7b:98:9b:a9:3b:53:36:46:0c:fa:7f:c2:38:6d:cd:
                    a0:53:38:54:82:f5:3e:e7:a2:91:e8:f7:53:d0:ca:
                    d1:1b:75:80:0a:d3:14:b1:50:49:03:8c:bc:11:30:
                    c4:18:04:af:da:46:17:fa:05:b7:f8:2a:9b:12:14:
                    7d:8a:69:1c:1f:47:dd:df:5e:c9:95:3f:a1:21:da:
                    01:c8:28:89:a8:46:2e:0c:50:6c:e0:b0:68:fb:17:
                    7b:b7:a0:52:23:7e:b2:ee:8d:cf:a5:9f:a9:55:5c:
                    9a:1b:9b:cc:52:25:a3:55:25:e5:3d:8e:7c:7a:87:
                    84:56:22:91:ac:57:39:f2:c1:c4:9a:aa:33:7d:47:
                    6a:47:57:69:f9:32:91:0b:e9:b2:2b:37:94:eb:20:
                    c2:d7:e2:a0:6c:74:50:ff:76:ad:76:d7:8c:3e:92:
                    1d:b5:59:f4:da:09:cb:10:a1:a4:ac:68:94:d0:4f:
                    29:ff:67:cf:63:a2:26:06:50:34:74:c2:a4:be:6a:
                    95:cb:9c:db:24:74:6f:67:e5:d7:a2:37:3d:f2:e9:
                    f6:74:c5:a1:62:d6:2f:cf:59:45:8e:93:73:01:5b:
                    44:85:f9:6a:ca:23:fc:a6:1a:4a:e0:0c:3e:c6:56:
                    10:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:64:C6:29:C5:21:71:0C:A4:F2:BE:2B:25:F3:14:08:69:5A:3D:F6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1WTGKcUhcQyk8r4rJfMUCGlaPfY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:17:ba:08:07:ad:37:cc:3c:f2:97:e6:1f:41:f9:a4:cc:5c:
         13:63:15:5e:29:c9:47:1e:e6:97:11:ca:1e:86:96:e8:f7:48:
         36:8c:90:fc:8c:5e:0d:83:76:62:9f:8a:c9:04:1c:ba:4f:53:
         41:fd:12:a4:ba:fc:1f:04:f1:7b:46:f7:78:0f:6e:77:87:e0:
         65:62:10:bd:8d:5e:69:30:6b:5a:9f:a5:9f:04:fa:d2:dd:83:
         b9:82:7b:0c:97:5b:c5:d8:a4:46:fd:66:ad:40:57:4c:5e:07:
         ec:73:7f:d0:de:3f:f2:a3:99:3d:36:00:c3:46:c9:53:8b:54:
         0d:6d:60:5a:d2:1c:9b:e2:5d:d3:8d:13:34:32:2b:23:33:d3:
         3b:68:d5:3f:fc:13:1e:15:8c:ec:e6:c3:02:3f:82:81:10:5d:
         d1:80:5c:dc:08:ac:fb:0d:56:80:fb:e0:67:d3:d9:a1:d5:38:
         a2:12:68:78:d7:bb:0b:f1:da:29:a1:9f:00:d9:fe:89:33:49:
         78:fc:67:34:f2:7b:a5:de:06:ac:86:a5:36:8e:9f:c3:53:78:
         2d:be:fa:8d:9e:18:42:21:7e:29:6e:07:b5:65:1c:75:3c:61:
         1d:b7:f6:6d:52:22:25:23:b2:95:e5:a7:50:9b:f3:c6:20:b7:
         30:99:52:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:06 2024 by rpki-client on console-ams.rpki-client.org