Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ANs_zyPwkS4F2qjLLPmX2b7fmFw.roa
File:                     ANs_zyPwkS4F2qjLLPmX2b7fmFw.roa (raw, json)
Hash identifier:          u63YzmxVr8TSaI+7OWP4576aKSFzQr58WscSmyfzmc0=
Subject key identifier:   00:DB:3F:CF:23:F0:91:2E:05:DA:A8:CB:2C:F9:97:D9:BE:DF:98:5C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02C4
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ANs_zyPwkS4F2qjLLPmX2b7fmFw.roa
Signing time:             Fri 31 May 2024 01:43:35 +0000
ROA not before:           Fri 31 May 2024 01:43:35 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        210.159.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 708 (0x2c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:43:35 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=00DB3FCF23F0912E05DAA8CB2CF997D9BEDF985C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:24:5e:4f:7d:20:bf:b4:19:d0:99:17:4c:89:
                    b5:bb:c5:f6:01:80:d9:5c:cc:f4:71:ba:a2:29:5f:
                    46:a5:ac:8d:c6:ec:23:4d:c9:fd:c2:26:12:67:d4:
                    ed:2b:3d:6a:c3:3c:fd:82:e6:03:b7:3a:9b:27:50:
                    2d:e5:6a:a5:bc:9f:8a:84:27:4b:21:e4:0d:f1:2b:
                    de:43:f0:a1:98:ea:79:1d:d8:36:fa:37:7b:14:63:
                    a5:cb:7a:ed:ed:f2:7c:f3:50:20:89:b6:1b:ff:0a:
                    7e:77:11:b4:49:d1:54:a9:8b:b4:c4:34:bd:65:72:
                    05:83:46:ea:ca:d1:e1:51:49:99:4b:43:2f:e8:2d:
                    a8:16:d6:62:e8:3d:16:19:03:66:3b:d9:27:f7:81:
                    2a:c9:9d:6e:ee:15:f7:d3:0b:1f:36:f8:88:f8:b2:
                    06:ad:73:24:52:1d:78:6c:95:83:c2:02:b6:e6:58:
                    aa:58:ed:26:f6:cc:62:36:17:46:7a:ab:07:57:c3:
                    d5:d5:19:46:fb:94:35:b1:0a:16:49:6d:58:d5:86:
                    38:54:af:98:51:93:96:69:0e:58:4d:de:83:86:76:
                    c8:62:12:fb:91:bd:2b:58:48:0e:94:5a:11:42:13:
                    9d:be:b4:93:89:1f:1e:89:18:73:dd:f9:c0:ea:e1:
                    97:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DB:3F:CF:23:F0:91:2E:05:DA:A8:CB:2C:F9:97:D9:BE:DF:98:5C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ANs_zyPwkS4F2qjLLPmX2b7fmFw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:28:43:2f:34:ee:42:b0:d5:6a:cf:ad:76:10:e3:ed:6a:ab:
         bf:b3:bf:d7:ac:99:4e:a1:10:fe:c9:b4:8a:ab:e2:3c:f7:7a:
         cd:49:99:db:ea:a6:93:5b:08:36:38:f5:26:f7:77:19:8c:e1:
         61:58:fc:7a:9e:bb:a0:f0:d3:87:60:5e:90:a5:87:07:e0:5a:
         7e:e4:30:e2:28:82:31:95:f9:ea:c3:bd:62:9a:3f:0e:90:fe:
         8f:2f:d2:4c:72:4a:5f:2b:4d:24:d1:e1:ad:81:d7:19:6d:ba:
         ed:bd:73:1b:92:ae:40:f3:4a:da:fb:0b:4f:51:c0:07:d4:d4:
         c8:dc:ca:6d:3d:b5:9f:d9:77:52:6d:13:13:a4:9e:c0:21:e7:
         fb:1e:50:41:99:7f:7d:d9:1f:28:52:42:ca:a6:26:1e:17:93:
         ff:86:96:ea:6d:bd:1f:39:53:5f:a4:e2:22:76:0f:72:3b:51:
         d1:d8:53:01:5f:8f:98:de:f3:13:15:7b:12:88:c8:ef:02:32:
         bb:6c:b7:af:4b:90:aa:0f:a9:d1:92:46:c2:8f:5b:c3:2e:de:
         9e:78:72:69:a4:7e:4f:dd:52:d9:55:87:f0:c0:d6:6f:5e:b7:
         1b:05:c9:10:30:18:a1:f7:6c:24:08:21:95:f4:52:cc:6d:51:
         a7:64:fa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:06 2024 by rpki-client on console-ams.rpki-client.org