Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/EP1MaNyfGb-vo6jiksGSHQGt6gQ.roa
File:                     EP1MaNyfGb-vo6jiksGSHQGt6gQ.roa (raw, json)
Hash identifier:          rVuAzdrf4LH4k1cLaojyGgy/e8+t8x1qPA7ewjXxBUM=
Subject key identifier:   10:FD:4C:68:DC:9F:19:BF:AF:A3:A8:E2:92:C1:92:1D:01:AD:EA:04
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02B4
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EP1MaNyfGb-vo6jiksGSHQGt6gQ.roa
Signing time:             Fri 31 May 2024 01:41:42 +0000
ROA not before:           Fri 31 May 2024 01:41:42 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        183.181.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692 (0x2b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:41:42 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=10FD4C68DC9F19BFAFA3A8E292C1921D01ADEA04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:dc:00:04:63:ea:d0:2d:35:67:f7:11:f2:
                    0c:bc:04:f9:e7:34:7a:46:a9:2f:d2:c7:87:59:1c:
                    0f:fb:d2:aa:b3:8c:0a:ea:1b:d2:d3:04:55:49:23:
                    52:51:67:e3:fe:ed:2d:a5:29:8d:ab:a6:d8:92:3d:
                    c9:f8:5b:11:31:fc:31:00:69:07:31:a1:d4:dd:5f:
                    0e:ac:83:74:a3:8c:fd:2a:14:29:e3:71:f5:20:3f:
                    ba:32:9f:3c:39:26:a8:55:b5:00:a6:6e:d1:06:8f:
                    d9:d8:11:f6:6a:1f:cd:50:58:ff:34:47:7d:4e:66:
                    59:64:06:e6:4e:6f:45:2e:33:ef:e3:62:a9:b2:cf:
                    a4:f8:ee:0f:f0:67:47:4b:af:6c:35:ff:ce:f5:bc:
                    9a:9c:a9:86:28:83:8b:9e:fc:ba:37:7c:92:63:2e:
                    e9:ca:08:a9:84:25:af:b6:cb:aa:8d:0b:45:67:a0:
                    00:5d:32:e7:4d:3d:9c:3e:61:9d:e3:a8:3e:8a:f7:
                    6e:0c:4d:ad:73:12:35:7e:3f:a1:ac:2c:86:f2:b2:
                    59:b0:2b:99:9e:0c:00:29:3a:eb:c8:38:2c:84:37:
                    d6:94:bc:74:51:44:f9:fd:cc:a4:54:3b:ff:c3:32:
                    08:51:b2:76:a7:e6:52:65:12:22:39:c6:c7:93:fb:
                    ed:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FD:4C:68:DC:9F:19:BF:AF:A3:A8:E2:92:C1:92:1D:01:AD:EA:04
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EP1MaNyfGb-vo6jiksGSHQGt6gQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d4:37:e8:b3:70:ed:4c:a8:09:64:f1:d4:dc:89:29:00:ec:
         e4:59:d0:d7:ec:9c:e4:5e:ae:91:82:93:74:e2:30:be:4a:38:
         07:5a:55:eb:04:b1:13:21:97:c4:a9:4f:c4:e9:3e:11:bc:70:
         5b:91:be:c7:0b:f9:18:20:43:d3:7b:53:fa:a4:7f:9a:11:db:
         47:7c:b1:93:ad:ae:cc:f7:1a:57:0b:f6:7a:bc:77:38:08:e5:
         39:3f:91:a5:a7:7e:47:42:30:0f:a2:08:c0:ff:08:6e:9a:4c:
         4c:19:ab:f1:e7:9b:ee:28:bd:f2:36:77:d9:d9:19:01:c3:0b:
         74:9e:b5:63:e9:0b:2a:b1:61:93:6e:57:12:d2:7d:fa:dd:cb:
         45:8e:76:af:28:17:94:03:69:85:db:5b:1d:fe:71:0d:e4:c9:
         bb:da:f4:2a:12:ac:7a:5b:5d:34:08:96:ff:34:30:63:cd:d9:
         b8:c4:73:c6:b6:8d:94:8a:57:62:a0:65:04:b6:1c:e2:a8:96:
         1b:4b:07:3d:16:23:e0:5b:d1:6c:6c:06:52:32:39:33:fc:c3:
         b4:c0:23:52:36:a8:f7:e0:82:34:75:8a:62:7f:cc:eb:13:e8:
         8f:47:33:f0:10:a1:96:60:36:60:ae:71:0f:a3:30:81:9b:19:
         7e:8d:30:2c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICArQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw
MTQxNDJaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDEwRkQ0QzY4REM5RjE5
QkZBRkEzQThFMjkyQzE5MjFEMDFBREVBMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCq19wABGPq0C01Z/cR8gy8BPnnNHpGqS/Sx4dZHA/70qqzjArq
G9LTBFVJI1JRZ+P+7S2lKY2rptiSPcn4WxEx/DEAaQcxodTdXw6sg3SjjP0qFCnj
cfUgP7oynzw5JqhVtQCmbtEGj9nYEfZqH81QWP80R31OZllkBuZOb0UuM+/jYqmy
z6T47g/wZ0dLr2w1/871vJqcqYYog4ue/Lo3fJJjLunKCKmEJa+2y6qNC0VnoABd
MudNPZw+YZ3jqD6K924MTa1zEjV+P6GsLIbyslmwK5meDAApOuvIOCyEN9aUvHRR
RPn9zKRUO//DMghRsnan5lJlEiI5xseT++0bAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUEP1MaNyfGb+vo6jiksGSHQGt6gQwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L0VQMU1hTnlmR2Itdm82amlrc0dTSFFHdDZnUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC3tWcwDQYJKoZIhvcNAQELBQADggEBAIDUN+izcO1MqAlk8dTciSkA7ORZ
0NfsnORerpGCk3TiML5KOAdaVesEsRMhl8SpT8TpPhG8cFuRvscL+RggQ9N7U/qk
f5oR20d8sZOtrsz3GlcL9nq8dzgI5Tk/kaWnfkdCMA+iCMD/CG6aTEwZq/Hnm+4o
vfI2d9nZGQHDC3SetWPpCyqxYZNuVxLSffrdy0WOdq8oF5QDaYXbWx3+cQ3kybva
9CoSrHpbXTQIlv80MGPN2bjEc8a2jZSKV2KgZQS2HOKolhtLBz0WI+Bb0WxsBlIy
OTP8w7TAI1I2qPfggjR1imJ/zOsT6I9HM/AQoZZgNmCucQ+jMIGbGX6NMCw=
-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:06 2024 by rpki-client on console-ams.rpki-client.org