Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/5peqyJSkTCNWIhgRoxdjjJq1E7Y.roa
File:                     5peqyJSkTCNWIhgRoxdjjJq1E7Y.roa (raw, json)
Hash identifier:          70KCgAwHXjfDX0YRlta/AgYCAqrvWdxWMoxPZ6Tfzkg=
Subject key identifier:   E6:97:AA:C8:94:A4:4C:23:56:22:18:11:A3:17:63:8C:9A:B5:13:B6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02CC
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/5peqyJSkTCNWIhgRoxdjjJq1E7Y.roa
Signing time:             Sun 30 Jun 2024 01:32:15 +0000
ROA not before:           Sun 30 Jun 2024 01:32:15 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     10013
IP address blocks:        36.55.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716 (0x2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jun 30 01:32:15 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=E697AAC894A44C2356221811A317638C9AB513B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ea:a2:97:49:ff:d9:58:29:12:77:ac:74:a1:
                    86:4c:5e:23:9a:88:de:60:3e:27:19:22:a6:8f:92:
                    4a:11:ce:2f:5e:b0:de:2b:6e:7f:e5:32:d8:c7:80:
                    c3:a0:15:27:57:57:ff:5b:b1:37:cc:32:51:6a:32:
                    02:85:a2:2e:c7:41:9d:90:fd:b4:b5:44:dc:4d:42:
                    08:90:23:0f:03:98:67:b9:d1:e4:e4:5a:66:03:fb:
                    d9:bf:b0:85:8d:b9:e9:64:09:6f:b3:0e:f4:4d:6c:
                    c3:e4:a2:14:6c:76:a7:ef:ef:e9:a6:ff:e6:bf:2f:
                    a8:f5:e7:a6:74:d4:24:d6:c5:11:04:9e:85:cb:6a:
                    97:47:5d:83:e4:84:3e:df:c0:a1:25:8b:8f:75:3c:
                    e7:13:70:8e:41:ab:10:86:04:aa:bf:a0:32:0e:85:
                    07:ce:78:49:ef:da:79:fd:f4:e6:db:be:45:16:bc:
                    5f:d9:72:8a:dc:c6:ab:4f:ba:eb:93:b2:3d:5d:24:
                    fa:77:62:f7:64:c5:5e:75:72:32:dc:67:7a:0f:ea:
                    07:8f:f2:e5:c3:89:79:4b:1e:06:b7:b3:28:4a:2b:
                    d9:f9:9e:1a:b3:44:c9:29:1c:32:a2:58:35:42:58:
                    2d:5b:b5:8a:92:a9:97:5b:6e:a5:c4:10:11:0e:c3:
                    f7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:97:AA:C8:94:A4:4C:23:56:22:18:11:A3:17:63:8C:9A:B5:13:B6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/5peqyJSkTCNWIhgRoxdjjJq1E7Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.55.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:6d:a7:67:fa:14:5f:11:87:d8:7a:92:50:77:fd:b8:5c:c0:
         c4:07:13:14:bb:92:46:96:4d:70:af:c4:59:18:57:17:ea:57:
         9c:4e:77:83:a4:65:1b:37:90:e2:d6:3e:62:dc:cf:e9:e9:45:
         4f:14:5f:7a:24:a3:d4:67:28:41:2a:26:61:8a:e7:97:84:28:
         e3:8f:e3:59:48:13:24:eb:30:c9:ea:82:8a:e2:c6:37:44:41:
         1c:dc:7c:4a:1b:32:84:df:3c:e0:37:2a:a3:02:06:9b:8d:ad:
         38:7f:d9:1d:9e:30:23:30:d2:a1:80:17:70:b2:93:33:9c:96:
         5a:50:64:d4:41:f8:fd:aa:8b:55:96:08:42:67:40:6c:d2:e1:
         c0:65:70:85:d0:cf:17:b1:13:0e:86:02:d2:f9:29:9b:88:41:
         15:ee:c5:60:c3:24:5e:9f:07:98:d2:7f:24:1c:c4:38:e5:84:
         24:97:0c:fa:70:af:8e:21:c8:bf:50:f9:7c:12:10:09:6a:d4:
         b3:9e:a1:60:8b:28:bb:26:10:0a:7c:ed:d1:57:ea:1d:24:b2:
         7b:83:c5:35:ce:d2:39:a7:90:c0:02:01:57:fd:17:c9:3b:06:
         74:9b:76:a5:7e:f6:04:70:1e:3a:28:73:d0:96:7e:fa:2c:47:
         bb:0b:d4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:06 2024 by rpki-client on console-ams.rpki-client.org