Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/II5qiR6xclPF-5nJGrGgFrCy_9I.roa
File:                     II5qiR6xclPF-5nJGrGgFrCy_9I.roa (raw, json)
Hash identifier:          aab0p5UTjXaKjrrIMyNqSsj4vqfiaXP9hg95c06AJRU=
Subject key identifier:   20:8E:6A:89:1E:B1:72:53:C5:FB:99:C9:1A:B1:A0:16:B0:B2:FF:D2
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       029D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/II5qiR6xclPF-5nJGrGgFrCy_9I.roa
Signing time:             Fri 31 May 2024 01:39:49 +0000
ROA not before:           Fri 31 May 2024 01:39:49 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        175.103.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 669 (0x29d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:39:49 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=208E6A891EB17253C5FB99C91AB1A016B0B2FFD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:70:ff:73:d2:b0:97:c4:96:4d:22:55:76:6d:
                    c5:96:73:95:d6:46:52:03:00:6a:44:f9:53:19:bf:
                    d9:41:d7:95:5d:26:c1:e8:c3:10:8c:88:f1:23:39:
                    b8:cc:b8:a8:6d:3a:83:9d:bd:da:bc:53:0c:68:ed:
                    c0:56:69:57:50:8d:15:b5:93:3d:86:e6:5a:b6:42:
                    36:7f:8e:b4:05:45:9d:42:af:a6:00:29:25:23:19:
                    50:a2:69:29:03:f4:37:1c:7e:b6:c3:ff:f5:a3:da:
                    21:14:21:ee:77:8f:d2:a9:6e:f0:f8:04:a8:05:47:
                    12:fa:d5:41:7f:0f:b1:7c:54:a5:b7:ff:13:07:1a:
                    9d:8c:10:f3:c7:b8:4d:d7:d5:5d:2f:a1:55:f8:5a:
                    32:d9:f7:7f:c2:68:cc:bd:b3:9d:39:48:1d:a3:67:
                    2e:a0:7c:4c:da:a2:54:91:45:00:1c:f2:c9:d6:4e:
                    38:05:58:83:ab:f8:87:de:c4:3c:42:86:34:83:6a:
                    02:3b:3f:e8:48:eb:2f:01:a7:23:b5:ae:6d:f1:b3:
                    25:28:84:cd:7c:86:fe:47:15:3f:ff:b2:0f:c9:b0:
                    7f:b1:8d:80:16:2f:0b:e5:d0:68:49:90:80:f2:28:
                    a3:5e:48:dc:f0:cd:33:e7:e6:95:21:66:57:9b:d7:
                    e2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8E:6A:89:1E:B1:72:53:C5:FB:99:C9:1A:B1:A0:16:B0:B2:FF:D2
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/II5qiR6xclPF-5nJGrGgFrCy_9I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:a4:cb:03:51:e1:4e:60:25:97:4f:5c:1d:31:db:09:27:7e:
         1f:e1:b1:5c:48:c9:78:25:fd:f8:39:43:94:a9:af:a9:22:08:
         23:0a:91:e9:42:0a:71:b2:ab:10:06:16:a1:13:39:7c:9d:c5:
         00:e1:04:23:9c:69:90:ae:59:81:f9:db:16:3d:20:7b:49:e2:
         59:b9:b1:92:5b:1f:f7:7b:07:91:ac:07:e6:fb:85:fe:2a:59:
         4a:f0:4c:16:fb:8f:77:71:31:20:20:47:82:f8:15:95:15:06:
         51:57:6a:41:06:a5:ed:8f:1f:23:ff:cd:35:ee:78:a8:ed:4e:
         45:64:93:93:c3:a5:a5:77:3b:c2:8a:2d:37:04:de:e7:2d:ad:
         c6:16:38:77:9c:50:05:b0:4a:47:05:62:94:1a:87:8b:45:f1:
         f5:22:58:ff:13:90:77:49:bd:55:57:91:00:3d:83:7c:31:b4:
         c4:af:42:2d:9c:c6:85:b6:12:23:f4:27:97:35:16:13:4c:e4:
         46:c7:bd:6f:0d:57:21:95:39:77:2a:7d:66:aa:5f:0a:63:5c:
         ab:61:11:2f:3d:1c:7a:77:54:ac:1e:a3:67:4a:95:7f:53:cf:
         86:4f:f6:f3:bf:07:0e:98:6f:ba:a3:1a:39:05:0c:8b:f5:33:
         62:cd:3e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org