Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/RInYmvdvghgnIuKjtUkT4Bg1FVo.roa
File:                     RInYmvdvghgnIuKjtUkT4Bg1FVo.roa (raw, json)
Hash identifier:          JEl50Qw9QY5KvSVwXwm45PmmS0/ejinO7mWBoDiuQpY=
Subject key identifier:   44:89:D8:9A:F7:6F:82:18:27:22:E2:A3:B5:49:13:E0:18:35:15:5A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       025D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RInYmvdvghgnIuKjtUkT4Bg1FVo.roa
Signing time:             Fri 31 May 2024 01:37:35 +0000
ROA not before:           Fri 31 May 2024 01:37:35 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        59.156.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:37:35 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=4489D89AF76F82182722E2A3B54913E01835155A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:cb:de:70:22:40:04:f9:d5:e4:a9:d8:35:
                    ab:81:e8:2e:d9:c1:24:c0:3e:5d:2b:d5:16:50:90:
                    b7:b2:56:1e:70:0e:8c:ee:f7:05:6c:1f:37:ec:15:
                    e3:f5:c6:aa:8f:a6:06:39:46:cc:49:9f:51:9e:d2:
                    99:c2:80:6a:0b:1b:ee:57:6a:41:0c:70:bb:3e:24:
                    63:ac:c2:74:ff:72:e3:a1:97:8c:d5:c6:15:51:0a:
                    82:6e:db:de:dd:43:dd:e7:50:08:37:48:ce:88:61:
                    6a:5a:2e:87:bd:79:5d:34:fe:66:08:d2:3a:c4:e6:
                    48:57:ff:f0:eb:75:a7:57:76:fd:a2:84:02:8d:60:
                    5b:90:2a:c2:1f:45:b1:7a:e9:76:30:f8:3f:3f:43:
                    4f:e2:f7:33:1f:ee:5f:b2:5e:64:2b:e2:c0:ed:e0:
                    55:74:45:bb:b4:b5:8e:85:dc:f7:b2:33:a5:64:93:
                    bf:0e:94:78:13:5e:0b:3f:10:2b:90:ea:c1:8e:0c:
                    0b:7e:35:04:a6:eb:b5:b8:83:cd:01:e8:2b:55:f3:
                    06:0e:65:78:c3:97:a2:1d:91:44:a7:8c:d4:40:c2:
                    5a:59:b1:f6:83:6a:78:17:e4:70:ce:98:7f:e7:af:
                    53:9e:cb:ce:0a:60:fd:07:03:e3:83:7d:0c:08:79:
                    64:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:89:D8:9A:F7:6F:82:18:27:22:E2:A3:B5:49:13:E0:18:35:15:5A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RInYmvdvghgnIuKjtUkT4Bg1FVo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:d0:a7:91:c7:39:fe:d9:c3:69:47:42:e2:35:1e:51:c2:bb:
         f6:39:7a:52:00:30:64:26:26:60:90:b1:f5:86:09:a1:08:4d:
         de:32:32:30:bf:e2:00:2f:8d:2c:c2:81:da:5e:9a:fe:c1:61:
         c3:b3:38:be:25:7b:89:df:14:8f:f2:f0:69:9e:6b:50:39:00:
         92:12:7b:3f:61:2c:96:ee:47:df:f4:65:22:44:67:bf:67:d1:
         9a:f3:4a:bb:ea:ec:f0:90:3c:64:49:a7:59:ab:c9:8d:10:3f:
         6b:1a:49:87:cf:ab:9d:1d:4e:c4:81:c5:41:c7:aa:ce:80:cc:
         95:9b:f6:d6:9e:9a:ff:5f:20:56:81:a9:20:5d:c9:b0:bc:49:
         59:73:06:70:43:5d:1e:1e:1b:21:7b:71:be:be:a6:a4:fe:3c:
         7a:cf:72:59:b3:8b:28:43:3a:d1:40:fc:c5:ef:d1:31:86:09:
         d0:de:ff:bd:1f:76:e8:f9:5a:6b:34:04:24:2a:52:97:bd:ae:
         ae:30:8b:30:e6:ba:c9:88:84:fb:82:c9:f7:ce:b5:8c:79:46:
         6f:aa:d8:84:a7:1d:18:93:cc:d1:24:0e:75:19:68:28:37:e0:
         b0:ca:ab:55:91:69:b1:3e:e9:e0:16:de:87:ee:41:ce:e0:d0:
         c6:dd:1c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org