Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/IKTYAYBfiyyTOMhbHiC1PvsRNek.roa
File:                     IKTYAYBfiyyTOMhbHiC1PvsRNek.roa (raw, json)
Hash identifier:          HmDJLa9IGTIXRmkPw2Dam2WD4OhlXJben8TSzqMShrg=
Subject key identifier:   20:A4:D8:01:80:5F:8B:2C:93:38:C8:5B:1E:20:B5:3E:FB:11:35:E9
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0243
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IKTYAYBfiyyTOMhbHiC1PvsRNek.roa
Signing time:             Fri 31 May 2024 01:35:30 +0000
ROA not before:           Fri 31 May 2024 01:35:30 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        110.74.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:35:30 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=20A4D801805F8B2C9338C85B1E20B53EFB1135E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:1c:37:ad:64:1f:c5:2f:e4:24:a5:46:8f:
                    97:5e:58:87:6c:35:b5:73:42:1c:85:68:f6:c8:6c:
                    e9:c2:e8:eb:eb:ae:ce:1f:77:42:1b:71:da:92:6f:
                    d1:85:13:57:d6:e6:8e:0b:6f:cf:ba:d9:9a:35:af:
                    9b:35:39:7b:be:81:da:b7:6e:c7:12:84:ac:37:b7:
                    60:a0:70:e3:b7:3e:23:ee:55:2e:7a:f0:88:cf:99:
                    57:7b:72:7f:50:06:7a:b1:f8:39:c6:43:9b:a3:f3:
                    02:3d:13:d1:e8:ad:39:21:2a:ba:47:47:c1:f3:bc:
                    8d:96:53:52:95:a6:c5:25:15:43:42:cc:e2:1d:ff:
                    1e:19:0c:fc:c3:7f:e1:62:a6:e9:2e:13:b3:d1:d8:
                    47:ca:cb:90:63:61:90:23:24:65:35:b4:0a:bb:17:
                    15:03:15:fb:04:15:88:b2:f2:53:d1:f7:fd:18:f0:
                    df:cf:65:80:b1:3f:c3:7a:ea:88:fa:a9:39:b6:89:
                    11:8d:0a:38:be:d5:30:36:b0:c6:12:80:b6:e5:f6:
                    6b:b8:19:f9:f6:44:52:44:9d:f4:83:7a:49:d9:5a:
                    05:37:eb:df:f5:48:df:f1:ce:6a:5a:4d:c0:4e:e9:
                    a2:db:ef:2f:56:6a:2b:63:43:f1:a1:c5:fc:d2:cb:
                    24:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A4:D8:01:80:5F:8B:2C:93:38:C8:5B:1E:20:B5:3E:FB:11:35:E9
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IKTYAYBfiyyTOMhbHiC1PvsRNek.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:31:d4:03:e6:c7:fb:6b:06:5b:c7:a3:85:f9:50:6b:8a:5b:
         c6:d2:fc:a8:ae:31:0b:ad:94:61:dd:05:aa:71:ee:47:cd:cd:
         bb:8a:4c:5a:bf:d6:10:a4:97:7e:6b:05:99:6c:73:38:44:c4:
         3e:d9:d9:fd:7e:ee:2b:02:c4:28:0e:94:ac:da:c5:4c:79:63:
         e1:9a:aa:2e:b6:ac:cc:b3:d9:e8:de:16:b4:99:0e:32:1b:27:
         4e:ea:0f:57:4a:2b:55:a3:bb:91:2e:c3:2d:b1:c8:4c:a2:5c:
         99:52:de:2c:d6:ba:c3:2d:b9:97:6f:e2:93:22:22:ff:85:53:
         81:ef:87:ef:99:ec:bb:1f:16:8d:de:35:63:a9:c5:45:2a:13:
         d8:09:33:da:b7:8b:6c:4b:59:7a:e4:02:0c:da:d7:a3:1a:ca:
         87:6b:22:c2:aa:c1:6b:c8:25:b4:40:75:a6:c8:44:64:15:6c:
         48:f4:85:7e:7e:d1:4e:4a:e3:fc:b6:73:83:03:fc:4b:d1:6c:
         4a:c3:d7:af:f2:f5:a1:15:ef:b8:16:36:4d:57:43:43:9d:63:
         f9:f6:27:48:b8:ec:74:b7:f9:90:ef:52:11:e6:79:f7:7c:7e:
         80:f7:d5:e6:f8:c3:c7:be:c7:35:9c:ca:18:3b:2b:30:61:a1:
         81:7c:96:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org