Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/AzN93HBfpYki-us9qRMRqPRTFZo.roa
File:                     AzN93HBfpYki-us9qRMRqPRTFZo.roa (raw, json)
Hash identifier:          8MCpIjbycUnqkYLec7vWfljIRY/f66/e5OvfVS/mFgY=
Subject key identifier:   03:33:7D:DC:70:5F:A5:89:22:FA:EB:3D:A9:13:11:A8:F4:53:15:9A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0231
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/AzN93HBfpYki-us9qRMRqPRTFZo.roa
Signing time:             Fri 31 May 2024 01:33:12 +0000
ROA not before:           Fri 31 May 2024 01:33:12 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        36.52.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:33:12 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=03337DDC705FA58922FAEB3DA91311A8F453159A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:d0:30:1d:e7:80:9e:08:b7:4a:1e:f8:c8:
                    db:31:ca:f1:56:48:f1:27:4a:d3:6c:d2:c9:20:b9:
                    fc:a8:32:7d:0d:a3:cb:eb:b7:30:01:8c:bb:80:10:
                    a6:04:9f:16:87:02:bd:67:46:c3:1b:33:37:c2:92:
                    61:dc:1f:f3:18:21:6c:7f:0c:82:54:5e:3d:6a:ef:
                    ce:f9:52:8e:1e:60:9e:5b:6a:30:0b:37:25:19:f3:
                    5b:b1:a2:ec:af:ee:24:53:40:e9:d5:b1:06:20:21:
                    47:88:28:6b:7c:c0:ab:3b:a5:83:b0:73:38:cb:01:
                    ef:27:cb:95:a6:df:e3:fd:77:a0:ed:3c:10:3f:cd:
                    14:24:78:0b:5c:24:3b:6a:36:bd:14:35:32:5e:ed:
                    6c:15:dd:cb:c1:0d:5b:23:b0:5a:34:3e:29:e0:8a:
                    1b:f7:62:26:86:87:2d:eb:44:d3:d4:39:ab:4d:78:
                    bf:85:9c:1d:6d:dd:9a:5f:78:e9:0f:4f:1b:d6:e3:
                    8d:39:12:3b:3a:f4:3d:d4:4b:48:ef:54:a7:d5:a9:
                    2f:ad:d3:f2:ec:4c:e8:b0:9c:96:8e:5f:11:fe:08:
                    ba:2b:e8:c6:5e:de:f0:1f:0a:79:3f:0c:63:0d:4e:
                    d5:85:8e:35:a5:53:e4:34:52:fe:03:de:3c:e4:8b:
                    ab:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:33:7D:DC:70:5F:A5:89:22:FA:EB:3D:A9:13:11:A8:F4:53:15:9A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/AzN93HBfpYki-us9qRMRqPRTFZo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:c9:62:a4:b0:08:25:a2:0d:19:81:05:e1:f4:56:a7:72:e2:
         5a:a8:a9:ab:77:0e:3f:f3:ce:bc:6a:c3:0e:bb:b7:10:0a:3c:
         73:5b:5f:ad:fc:2b:12:0f:ea:c4:d1:28:03:83:c1:6a:3e:2d:
         3f:7d:e4:1e:e4:5a:26:16:bf:4c:9e:8b:b9:2f:d3:4d:76:6c:
         90:80:56:e4:82:6f:26:61:20:83:67:b7:0e:2d:81:a0:e1:b7:
         1f:30:89:97:a6:50:1c:36:3a:71:d4:cf:27:ff:67:b9:8b:0b:
         2b:16:39:ac:65:ae:1f:8d:c3:0f:7f:c7:f4:78:65:e8:8a:9c:
         6e:fa:4e:44:79:4a:da:78:ee:07:9b:f8:63:d3:2d:46:2c:47:
         4f:f6:89:90:e5:d6:41:32:59:ba:9a:0f:1e:a0:17:bc:1b:00:
         03:ef:49:ab:4e:8b:80:3f:83:e6:8a:0b:60:b8:7c:e0:de:e7:
         26:7a:20:02:7a:67:fd:11:93:e2:fb:94:c4:01:fd:4b:4b:4e:
         ea:a9:73:44:20:64:2f:42:a5:17:b8:68:32:63:fb:7f:61:f9:
         84:34:86:6a:4e:74:55:a3:fd:42:46:63:d3:0d:40:d1:1f:05:
         55:8f:f9:dd:be:15:c0:cd:62:5b:0f:85:ae:44:a4:95:d5:a4:
         4e:55:52:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:06 2024 by rpki-client on console-ams.rpki-client.org