Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/6hfCnd28rjIjPSihOs5hBZJRKZw.roa
File:                     6hfCnd28rjIjPSihOs5hBZJRKZw.roa (raw, json)
Hash identifier:          Yt3FW+zyU1I+1cB37PA8H/E2CZPA2ZhDqfQ2clUKLOQ=
Subject key identifier:   EA:17:C2:9D:DD:BC:AE:32:23:3D:28:A1:3A:CE:61:05:92:51:29:9C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0217
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/6hfCnd28rjIjPSihOs5hBZJRKZw.roa
Signing time:             Fri 31 May 2024 01:29:18 +0000
ROA not before:           Fri 31 May 2024 01:29:18 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        220.150.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:29:18 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=EA17C29DDDBCAE32233D28A13ACE61059251299C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1a:12:ac:d9:c1:3a:55:07:99:3f:be:48:df:
                    91:33:fc:a1:93:33:b9:5b:58:75:10:5e:9d:9f:a2:
                    28:b4:b7:0e:cf:57:a2:d6:eb:4c:f7:b2:e4:20:cb:
                    0c:6c:b4:6f:38:4e:ff:d1:e0:2f:b6:95:01:42:fe:
                    5f:9f:e5:80:a6:d0:29:aa:de:75:c4:bb:1d:e8:91:
                    c1:61:82:e5:c4:41:72:3a:2f:62:b2:28:36:42:3a:
                    9e:5f:1f:1c:04:82:54:e0:25:05:1a:21:54:11:9b:
                    fd:67:79:b3:75:5b:9d:fd:f8:c0:54:9a:31:19:d6:
                    9e:0e:79:89:21:7b:4f:ea:e0:5b:4b:8f:e6:f3:d4:
                    4a:ca:f0:14:47:cd:83:66:0e:fb:85:85:38:95:05:
                    e8:b3:b0:a1:7c:f4:31:1d:6e:b9:70:2e:83:8a:a1:
                    df:e5:08:fa:a8:ec:fb:80:ef:d3:f8:2c:17:6c:37:
                    d6:25:b7:1c:14:c0:08:c9:9d:86:c0:06:ad:ea:e1:
                    e6:c6:9f:1e:e8:dd:f4:ea:d3:21:be:24:7e:23:32:
                    3d:42:10:61:fb:57:bb:f8:67:bf:5a:e8:37:06:5d:
                    79:bb:1d:61:6b:23:f7:2f:07:fb:0f:62:ab:fd:e8:
                    a7:11:b7:4f:d5:f3:98:b8:99:ac:30:c3:e1:f9:53:
                    ca:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:17:C2:9D:DD:BC:AE:32:23:3D:28:A1:3A:CE:61:05:92:51:29:9C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/6hfCnd28rjIjPSihOs5hBZJRKZw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:d3:ed:9d:0e:3c:24:57:27:b8:5a:44:4c:bc:36:6a:25:c3:
         11:d1:9e:59:e5:97:88:3a:14:2f:6b:6d:69:33:e8:29:b9:1d:
         6a:f4:2b:e9:14:a5:5c:b1:c7:22:70:38:ec:bd:da:27:f7:9c:
         59:86:6a:b5:d5:7b:c7:61:b8:e4:33:45:b4:72:0f:4e:af:47:
         4a:bb:41:d2:a0:58:50:6f:83:90:6a:40:2d:41:ca:ae:4b:6a:
         62:b4:3e:2b:cd:7e:6f:4a:5f:4c:bc:b2:fc:7c:fa:26:40:36:
         2f:d4:ec:3c:80:3f:1c:69:06:0b:9c:62:93:7d:e4:0b:fc:3f:
         03:c8:af:a8:ec:4e:35:34:35:ff:92:cd:e3:9d:80:9e:fa:b8:
         5f:7b:1c:16:65:c3:ca:d0:95:c5:dd:77:7d:09:63:5f:bf:ed:
         ae:89:b0:d0:2c:48:b0:aa:d0:58:75:2b:5a:a3:1e:69:14:43:
         bd:43:51:0a:9f:bb:22:a9:d9:11:c6:86:52:18:22:a2:08:f7:
         c0:4b:d0:76:c5:44:dc:d7:80:f2:e7:17:52:b4:75:30:10:82:
         02:2c:d6:c4:08:b7:91:09:d4:2a:9f:1a:0a:f9:1c:ef:1d:a0:
         7e:15:9b:e3:bb:64:6d:a8:2b:79:61:62:b5:c3:91:65:eb:b3:
         75:d1:92:e8
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw
MTI5MThaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEVBMTdDMjlERERCQ0FF
MzIyMzNEMjhBMTNBQ0U2MTA1OTI1MTI5OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxGhKs2cE6VQeZP75I35Ez/KGTM7lbWHUQXp2foii0tw7PV6LW
60z3suQgywxstG84Tv/R4C+2lQFC/l+f5YCm0Cmq3nXEux3okcFhguXEQXI6L2Ky
KDZCOp5fHxwEglTgJQUaIVQRm/1nebN1W539+MBUmjEZ1p4OeYkhe0/q4FtLj+bz
1ErK8BRHzYNmDvuFhTiVBeizsKF89DEdbrlwLoOKod/lCPqo7PuA79P4LBdsN9Yl
txwUwAjJnYbABq3q4ebGnx7o3fTq0yG+JH4jMj1CEGH7V7v4Z79a6DcGXXm7HWFr
I/cvB/sPYqv96KcRt0/V85i4mawww+H5U8rzAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU6hfCnd28rjIjPSihOs5hBZJRKZwwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0LzZoZkNuZDI4cmpJalBTaWhPczVoQlpKUktady5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADcllkwDQYJKoZIhvcNAQELBQADggEBAAPT7Z0OPCRXJ7haREy8NmolwxHR
nlnll4g6FC9rbWkz6Cm5HWr0K+kUpVyxxyJwOOy92if3nFmGarXVe8dhuOQzRbRy
D06vR0q7QdKgWFBvg5BqQC1Byq5LamK0PivNfm9KX0y8svx8+iZANi/U7DyAPxxp
BgucYpN95Av8PwPIr6jsTjU0Nf+SzeOdgJ76uF97HBZlw8rQlcXdd30JY1+/7a6J
sNAsSLCq0Fh1K1qjHmkUQ71DUQqfuyKp2RHGhlIYIqII98BL0HbFRNzXgPLnF1K0
dTAQggIs1sQIt5EJ1CqfGgr5HO8doH4Vm+O7ZG2oK3lhYrXDkWXrs3XRkug=
-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org