Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/NNb-9eo_zC29DK0yHoDeVmkZlmI.roa
File:                     NNb-9eo_zC29DK0yHoDeVmkZlmI.roa (raw, json)
Hash identifier:          iiGaYkI7quTVV/2C59MIJrAAAL9wm74/3r/pOiRwRsI=
Subject key identifier:   34:D6:FE:F5:EA:3F:CC:2D:BD:0C:AD:32:1E:80:DE:56:69:19:96:62
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0234
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NNb-9eo_zC29DK0yHoDeVmkZlmI.roa
Signing time:             Fri 31 May 2024 01:33:14 +0000
ROA not before:           Fri 31 May 2024 01:33:14 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        220.150.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:33:14 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=34D6FEF5EA3FCC2DBD0CAD321E80DE5669199662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e2:0f:3f:6e:e6:ed:3d:f3:27:1a:a2:dc:22:
                    fc:60:c2:50:4d:08:11:56:2a:8d:88:ae:89:a6:f2:
                    1e:e0:1b:3e:1b:af:a6:8b:d4:d9:3e:1e:90:5e:71:
                    44:4a:50:12:f7:fd:35:04:fc:7d:87:94:57:2a:1a:
                    49:17:cf:66:29:2f:47:32:4e:74:a2:7e:10:fd:22:
                    1f:1f:08:36:b1:d5:40:a4:82:27:b7:a6:18:e7:60:
                    65:85:c4:8b:df:71:4c:5c:e6:6d:35:a7:fd:0d:58:
                    1a:22:17:c9:ff:f7:0e:b1:99:f2:25:81:16:0d:c9:
                    f9:97:0d:50:6e:78:79:be:2d:b7:d0:48:2e:e2:10:
                    fc:3f:6c:01:02:9e:0c:24:4a:9f:11:56:70:dd:b6:
                    0a:2e:e8:dc:a7:6b:b5:3c:06:c5:cf:2b:4b:f5:e8:
                    4f:e1:79:1d:0a:98:ea:76:30:39:d6:6a:0f:79:59:
                    62:5d:47:4d:b2:b6:eb:1b:4c:fe:44:03:3a:cb:e6:
                    02:29:4a:06:ee:60:f2:98:71:55:fa:59:8d:17:b5:
                    fa:72:ef:6b:33:16:7d:39:a0:32:fd:93:44:22:60:
                    5f:d7:fb:a2:21:9b:ab:8f:e7:89:5a:23:76:d0:06:
                    2d:3c:4f:ae:c8:c5:f2:d5:19:38:98:ca:fd:ab:bd:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D6:FE:F5:EA:3F:CC:2D:BD:0C:AD:32:1E:80:DE:56:69:19:96:62
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NNb-9eo_zC29DK0yHoDeVmkZlmI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:96:2a:ad:cd:1f:75:2c:4c:19:90:b7:48:b2:a2:95:a2:8f:
         00:1a:3f:f0:66:bf:3a:23:02:99:4b:b0:bd:8e:4b:7e:8d:74:
         7c:ef:5f:7e:1f:e1:ad:31:4e:fa:8c:12:8b:4f:12:85:a3:e4:
         f5:9d:eb:07:06:a9:c4:f2:4b:4e:81:b4:6c:16:72:10:f0:dd:
         08:b8:a3:a0:89:05:af:e4:fe:87:04:29:90:32:1e:48:d8:4a:
         be:04:2c:2f:cf:6b:c6:e2:d6:87:9a:d3:cf:f7:fa:27:14:67:
         e5:24:cc:b6:dd:6e:21:91:4b:b8:fc:fc:fa:2d:40:02:92:53:
         d0:b7:df:5e:a9:22:b7:5a:8f:91:b9:51:d6:27:4f:a0:15:9f:
         d7:56:76:a1:80:74:5d:2e:77:74:2d:ae:b7:f9:30:61:82:21:
         68:32:0f:11:f2:ae:9c:a0:cb:eb:72:fc:01:21:fe:60:22:4c:
         d8:f3:ff:66:0f:7b:a7:c9:7d:01:42:34:4e:20:ee:c8:30:c7:
         cf:d4:bf:5c:6f:71:65:2c:15:57:49:04:fd:8b:c0:35:d9:bd:
         e4:57:54:19:3d:7b:50:e5:8e:67:59:0d:f5:84:43:a0:e2:83:
         78:10:c6:73:5f:3b:f9:6e:bd:fd:ba:59:04:3a:f1:e9:5e:cd:
         90:d0:8c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:06 2024 by rpki-client on console-ams.rpki-client.org