Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/IUIHoeH2K1e1J8MKQRBO1caZMAk.roa
File:                     IUIHoeH2K1e1J8MKQRBO1caZMAk.roa (raw, json)
Hash identifier:          D6xZYAsfiXoOGtXq16clDyx2moaw3izvjfyUiHSAZSw=
Subject key identifier:   21:42:07:A1:E1:F6:2B:57:B5:27:C3:0A:41:10:4E:D5:C6:99:30:09
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0297
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IUIHoeH2K1e1J8MKQRBO1caZMAk.roa
Signing time:             Fri 31 May 2024 01:39:46 +0000
ROA not before:           Fri 31 May 2024 01:39:46 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        220.150.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663 (0x297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:39:46 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=214207A1E1F62B57B527C30A41104ED5C6993009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:59:44:fc:5b:c0:bf:12:c4:db:4a:05:45:98:
                    58:26:4f:2e:72:52:67:ae:3b:1b:af:81:b2:6b:c0:
                    e8:99:52:f8:fb:e8:45:56:f9:06:1c:9f:b8:c6:8b:
                    08:cf:8a:4b:48:30:24:c7:d1:91:58:e7:f1:10:c7:
                    1b:22:d9:75:ea:15:12:c2:c8:b9:bd:a5:19:64:8e:
                    b1:b5:2b:f7:bd:3e:8e:08:54:2e:27:1a:b7:d0:46:
                    65:27:c1:f7:10:92:c4:09:4b:fb:a0:e9:ab:4a:29:
                    e8:d6:22:10:ea:b8:8e:f8:3e:e4:b0:c3:c1:cf:b2:
                    70:52:80:a8:1b:6e:38:4c:58:ae:33:95:62:4a:72:
                    1a:33:79:8d:65:e0:d0:b5:35:b0:c8:8f:87:17:86:
                    6a:32:a6:1a:cd:dd:31:d7:be:71:c7:c2:1a:5d:0c:
                    be:89:e9:ca:83:af:3a:16:25:53:d0:2d:dd:ae:ea:
                    6d:f4:0b:59:e9:3e:4c:9b:83:bd:fc:93:7b:19:c8:
                    d2:65:97:a2:38:70:d6:fd:56:f4:63:7d:98:0e:23:
                    a0:c4:fe:39:b8:5c:62:af:f6:2d:4f:51:3f:44:6c:
                    7c:a7:58:ec:c9:ea:4b:15:48:8d:04:1e:26:b4:90:
                    75:1b:1b:a3:a4:fb:0e:c6:90:cb:4f:5b:d8:f5:28:
                    70:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:42:07:A1:E1:F6:2B:57:B5:27:C3:0A:41:10:4E:D5:C6:99:30:09
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IUIHoeH2K1e1J8MKQRBO1caZMAk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:74:06:7b:2e:84:17:87:95:b4:b7:4b:7e:5d:3f:a8:ce:1c:
         31:79:cd:7b:05:a0:22:fc:39:a2:5c:59:30:a6:6a:cb:8d:18:
         e2:d5:9d:49:ef:7f:26:69:72:a9:7a:1b:f0:98:2d:68:92:6d:
         39:f7:61:05:96:16:74:c5:f2:0f:cb:c6:c7:7d:8d:5c:a3:56:
         59:cd:b0:8d:71:15:6c:d7:57:e9:2e:c3:92:38:65:b2:08:dd:
         d5:e5:8f:11:fc:b3:e1:e0:84:b3:5c:3b:9e:a4:07:f3:27:bb:
         72:b4:a6:41:21:11:ab:c5:1d:63:5a:06:76:57:ab:32:49:ea:
         8f:cd:85:28:62:50:31:98:af:8a:4b:86:2b:c7:07:73:47:f8:
         cc:e6:24:71:e0:1f:ed:61:e3:cb:dd:74:c2:7d:71:9b:e5:77:
         ad:2f:e0:bb:5a:f2:98:0b:ac:ee:8d:5b:ae:a9:79:37:bd:ef:
         8a:1e:79:3c:6b:83:b5:d2:f9:6a:2e:17:c9:da:39:c5:08:be:
         1e:dc:cb:2a:fa:c5:5d:4c:de:e0:6b:1c:b0:d0:43:46:32:50:
         bf:34:a6:ae:61:a5:70:ce:66:d9:98:2d:06:e2:cd:ac:45:5d:
         ef:28:53:34:01:e8:eb:9b:cc:f2:f2:41:b9:42:20:e7:92:f6:
         a5:bf:85:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org