Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/M2GkyOlWXy-ngRt-bME07M0DeE0.roa
File:                     M2GkyOlWXy-ngRt-bME07M0DeE0.roa (raw, json)
Hash identifier:          sZvn8bQowgerIu9M2Cqu4w1gw6dp4ceIn0+AeVDQ0D8=
Subject key identifier:   33:61:A4:C8:E9:56:5F:2F:A7:81:1B:7E:6C:C1:34:EC:CD:03:78:4D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02B0
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/M2GkyOlWXy-ngRt-bME07M0DeE0.roa
Signing time:             Fri 31 May 2024 01:41:40 +0000
ROA not before:           Fri 31 May 2024 01:41:40 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        180.131.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:41:40 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=3361A4C8E9565F2FA7811B7E6CC134ECCD03784D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3a:13:f8:83:a7:11:5d:85:46:14:60:65:c5:
                    9a:91:e7:b6:16:97:46:24:e0:5d:4e:f7:da:03:5e:
                    ac:30:bc:9f:3d:99:ef:28:78:cf:4a:7f:af:c6:93:
                    5c:81:40:a7:4b:56:58:06:cf:02:51:c5:b3:17:0a:
                    65:bb:b0:4f:23:11:bf:fc:56:f9:f8:91:7a:61:e5:
                    16:f9:76:b6:77:43:13:9d:a5:ca:b8:4a:65:6a:2e:
                    5e:22:f7:93:bd:f0:0c:16:12:16:c6:15:e4:0b:42:
                    d2:f9:89:af:98:4a:2c:09:a2:f8:b6:6f:c4:71:e2:
                    94:c8:e9:3a:5e:88:f1:ec:df:b4:37:d0:bc:c2:01:
                    67:ca:c3:f5:fe:e5:7e:2b:f9:47:24:d0:26:20:61:
                    cf:ae:f2:45:3d:ef:9f:a8:ac:66:96:dd:d0:25:6c:
                    fc:8d:fb:27:a5:c6:fe:ae:bd:2e:7f:18:11:a1:96:
                    7c:69:d3:cf:28:14:f0:c6:fc:0b:77:db:22:bb:6c:
                    1b:dd:9e:e9:90:91:a1:bf:0f:50:7b:b0:5f:67:2b:
                    10:88:b4:9c:d3:a4:39:44:4b:73:ad:73:07:d5:7a:
                    48:04:08:47:e8:4c:d6:0a:f5:4d:d8:8e:14:49:7a:
                    ba:3a:8e:19:a7:b8:59:b1:39:d1:cb:39:79:9a:24:
                    2c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:61:A4:C8:E9:56:5F:2F:A7:81:1B:7E:6C:C1:34:EC:CD:03:78:4D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/M2GkyOlWXy-ngRt-bME07M0DeE0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:4b:90:67:97:43:84:f1:63:e8:98:77:e6:47:ef:12:2a:59:
         07:5e:97:0c:11:9e:21:26:ef:11:4d:b5:67:ea:b0:a7:90:de:
         ec:98:75:b5:c1:c6:db:d5:f7:2b:6f:c0:93:37:c0:7b:f9:92:
         d6:45:88:76:d1:56:f8:00:94:30:18:5f:01:c1:e7:d1:5f:27:
         55:68:b8:32:52:57:55:1a:ae:e6:af:cc:79:68:b9:e2:3b:90:
         4a:b8:e5:2b:60:dd:8a:3b:8f:d9:bc:ab:f2:ec:1d:33:0f:1f:
         b9:30:de:f1:28:aa:98:20:85:c4:99:bc:52:37:11:f3:31:20:
         65:8a:ff:66:41:3e:eb:e7:a2:24:56:8c:09:6b:e3:e3:63:2b:
         39:01:89:a0:50:8f:5a:4e:18:1c:87:1d:da:4c:2a:16:6a:23:
         f7:5d:ad:99:9a:4c:11:1b:bd:f5:81:7e:c6:00:09:22:88:33:
         e7:7c:d2:f4:3b:5e:ee:b5:47:34:ff:da:b0:e7:44:9d:39:75:
         06:4b:22:35:5b:66:57:d9:cf:47:c3:fc:57:69:31:75:80:78:
         60:4d:3e:ff:95:93:06:37:2d:80:cd:26:db:cf:4b:57:06:22:
         dd:87:b7:b2:bc:38:a3:53:a6:da:1f:12:3d:6b:06:73:03:83:
         ce:9b:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org