Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/LdNNNivmV0VLcjPfPJPBBTn3YcY.roa
File:                     LdNNNivmV0VLcjPfPJPBBTn3YcY.roa (raw, json)
Hash identifier:          X45DtpFzFzFn7CirOsh1bRJmHDx3DGEUsKYA45fCrFE=
Subject key identifier:   2D:D3:4D:36:2B:E6:57:45:4B:72:33:DF:3C:93:C1:05:39:F7:61:C6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       027C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/LdNNNivmV0VLcjPfPJPBBTn3YcY.roa
Signing time:             Fri 31 May 2024 01:37:48 +0000
ROA not before:           Fri 31 May 2024 01:37:48 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        111.232.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:37:48 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=2DD34D362BE657454B7233DF3C93C10539F761C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:bd:7d:60:1c:06:fc:63:12:a1:d8:7f:4d:
                    37:5d:95:82:88:fa:e5:d2:f2:ac:19:b9:1c:17:4c:
                    f6:81:39:77:e5:4e:be:a9:94:01:72:a4:65:b9:29:
                    6e:bc:db:f8:ad:58:f8:0b:78:f4:9c:16:33:ec:2b:
                    a5:08:ca:43:a7:3e:6b:a4:0a:45:4d:34:dd:58:c6:
                    de:c9:9f:88:84:cf:95:f4:e9:00:2c:33:ff:91:9d:
                    7c:70:8f:63:dc:5d:69:61:d0:7e:59:dc:47:15:15:
                    c8:e0:66:e4:5e:93:3d:2f:92:7e:b5:a0:48:9b:20:
                    59:98:cf:8a:55:4d:6d:1b:9b:b0:b3:dd:49:8a:9f:
                    af:c3:88:18:14:72:e4:24:8e:fd:d9:58:fc:a0:39:
                    f1:32:12:94:d5:45:ba:c3:b7:d1:92:e4:9a:17:d7:
                    54:51:07:7d:0b:1a:b3:b6:81:19:e1:96:b5:96:35:
                    5f:08:45:c8:85:45:64:ba:af:57:06:2a:bb:7c:7a:
                    b8:1e:62:80:97:49:47:22:b3:34:40:7a:3e:36:4e:
                    53:2e:09:d0:0e:50:c5:d3:89:8b:ca:16:1f:6a:e3:
                    23:c7:8e:6c:78:70:72:f9:de:77:39:04:ae:6c:25:
                    3a:97:c0:ef:fb:9a:5b:60:8d:3b:c7:85:51:ad:6a:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D3:4D:36:2B:E6:57:45:4B:72:33:DF:3C:93:C1:05:39:F7:61:C6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/LdNNNivmV0VLcjPfPJPBBTn3YcY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.232.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         88:63:ad:50:df:c2:7c:c6:51:7e:c1:18:6a:66:99:5f:a3:1c:
         f6:dc:d1:b7:b7:a4:f6:7f:51:3c:ab:22:a5:30:b4:d2:b2:17:
         f7:96:8b:10:c3:c0:f0:f5:17:e1:f5:25:9b:af:43:54:93:b5:
         bf:95:ef:53:73:f2:22:bb:b0:29:ae:e8:13:db:d9:7c:c2:54:
         4f:d0:45:cd:58:33:b9:48:82:ea:6d:26:25:ad:9b:8a:bd:57:
         63:8a:36:33:fb:8c:4a:50:bc:5e:7c:cb:0c:76:5d:64:32:61:
         c0:f0:fe:76:5f:05:eb:9d:b9:7c:0a:be:9d:13:f4:04:ba:f3:
         65:12:89:ca:f6:b8:bd:38:ca:ba:a6:3e:99:27:f0:7a:52:05:
         4e:b7:ba:b3:5d:74:8c:8c:00:ab:a2:ef:ea:a2:64:a1:6d:a1:
         2e:e4:a5:f6:cf:d9:2c:9d:76:9f:1f:0c:cd:9a:c7:29:f6:05:
         36:c5:54:d7:46:c4:77:25:a7:3e:5a:55:ee:3f:e0:a9:39:0b:
         85:a4:2a:ec:d3:a2:9a:04:ca:a4:cf:a8:e5:32:10:90:dd:a4:
         43:85:ed:3f:43:bb:21:88:63:36:d9:65:e3:56:f7:77:5b:ab:
         85:d0:09:ac:1e:03:be:b1:96:61:29:da:3b:80:f3:a7:d2:47:
         e8:a1:fb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org