Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/GsHT4e5xkE47R_mr1UDYaKCYZzA.roa
File:                     GsHT4e5xkE47R_mr1UDYaKCYZzA.roa (raw, json)
Hash identifier:          x9ejY1rWS6HXJC81c47lrDfaU4ZQpk3eWYVLNEhIypg=
Subject key identifier:   1A:C1:D3:E1:EE:71:90:4E:3B:47:F9:AB:D5:40:D8:68:A0:98:67:30
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02B9
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GsHT4e5xkE47R_mr1UDYaKCYZzA.roa
Signing time:             Fri 31 May 2024 01:41:44 +0000
ROA not before:           Fri 31 May 2024 01:41:44 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        182.236.14.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697 (0x2b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:41:44 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=1AC1D3E1EE71904E3B47F9ABD540D868A0986730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:96:0a:3d:de:c4:44:ee:4b:9f:48:5c:6b:30:
                    31:24:13:b0:4c:7d:b6:98:b5:81:7e:f5:13:39:c0:
                    b0:c7:c5:aa:f7:49:eb:01:09:75:c4:9c:db:ac:a4:
                    e4:60:92:1c:1a:38:20:8d:ed:bd:c6:ac:5a:ed:4f:
                    9f:28:7f:aa:94:fc:a9:d5:6c:ee:08:6a:7c:97:63:
                    5b:dd:a2:48:b3:c2:f9:73:a9:5f:e5:c3:cb:4d:bb:
                    d5:5d:77:3f:ff:b6:58:b4:d8:68:98:1f:98:58:a5:
                    b7:16:92:69:37:d7:0f:46:d8:c7:57:cc:64:72:53:
                    ad:cd:02:6f:79:b8:27:8e:5c:4d:a5:fd:11:84:ef:
                    85:65:0e:f9:83:ce:5f:fd:69:b5:e8:63:fc:a3:b5:
                    c9:5e:65:95:29:29:f2:e3:31:65:dd:17:89:f3:9a:
                    dd:86:ee:e4:14:0c:65:7c:e5:82:c1:e6:a1:b4:f4:
                    20:f6:67:37:29:28:60:04:24:c2:98:24:17:40:f8:
                    26:4d:a0:72:a8:0c:c5:06:f6:a7:65:8f:1c:78:cc:
                    85:fc:24:db:f9:cf:6c:15:b7:7c:47:24:06:c7:15:
                    6e:ef:5d:6a:e7:b8:93:9f:22:fd:ac:c3:58:1e:52:
                    10:33:4a:88:fd:f8:f2:30:e1:f1:27:3d:62:e2:24:
                    45:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C1:D3:E1:EE:71:90:4E:3B:47:F9:AB:D5:40:D8:68:A0:98:67:30
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GsHT4e5xkE47R_mr1UDYaKCYZzA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:82:23:22:c3:d6:66:b2:6b:c4:2a:dc:9c:da:f7:58:87:f5:
         5e:bd:b4:f8:f1:48:f8:56:3b:ea:cf:90:59:29:4c:c8:00:97:
         4f:1c:f8:7c:8b:09:4e:66:eb:c5:3f:b3:db:b0:af:9d:27:10:
         15:0a:df:a2:9d:8c:cf:f2:a1:d0:35:e6:22:b4:3f:6a:4b:65:
         8f:ad:9d:1f:68:02:c8:54:99:a0:8f:bd:f4:cd:a6:fb:79:d9:
         87:f7:92:13:72:2f:b0:4e:b9:51:d0:d7:87:0f:55:54:a1:11:
         f7:e4:e6:4a:96:ab:d5:ec:31:86:d0:41:51:8a:87:19:ea:9d:
         0e:ef:c4:3c:95:a5:0a:12:ee:84:49:04:8f:fa:58:d4:ef:fe:
         64:00:46:3d:cb:62:16:61:e7:91:4a:47:44:6c:37:2f:36:cd:
         ee:72:16:61:92:05:8c:ad:a9:2f:32:1c:00:85:d3:21:6a:5a:
         38:b1:95:b6:84:2e:77:83:2e:26:83:1c:16:3a:e0:02:96:91:
         9d:69:4d:d6:36:27:c3:06:45:9b:59:de:b0:21:45:ca:87:40:
         03:58:9e:fe:94:8a:f4:5d:52:07:41:19:78:19:1e:25:2e:10:
         00:df:75:59:ac:86:8b:57:a5:c0:8a:de:96:80:ab:1b:2d:d0:
         5c:34:b3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:06 2024 by rpki-client on console-ams.rpki-client.org