Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Smuz14ybC_gCq_ByueW0mgGDPRU.roa
File:                     Smuz14ybC_gCq_ByueW0mgGDPRU.roa (raw, json)
Hash identifier:          9Ly81GdPcEVmrVr1bOrA8qUJktjJKfW1LKT2omEA43s=
Subject key identifier:   4A:6B:B3:D7:8C:9B:0B:F8:02:AB:F0:72:B9:E5:B4:9A:01:83:3D:15
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0215
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Smuz14ybC_gCq_ByueW0mgGDPRU.roa
Signing time:             Fri 31 May 2024 01:29:17 +0000
ROA not before:           Fri 31 May 2024 01:29:17 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        220.150.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:29:17 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=4A6BB3D78C9B0BF802ABF072B9E5B49A01833D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:25:60:bd:3d:16:d5:1a:09:fb:3a:39:6d:25:
                    a5:3a:df:e1:33:65:39:b8:f4:09:25:22:7c:9d:57:
                    f3:67:1e:d2:6b:27:20:71:c9:44:ec:34:fc:e3:12:
                    b0:55:71:1e:5b:bf:74:da:8b:87:c5:f0:6f:c2:b1:
                    81:94:0a:fe:00:86:ff:f5:2e:e0:96:d3:70:26:11:
                    fd:c1:95:81:53:6b:2d:87:22:5d:c2:28:c3:36:6d:
                    13:5c:1f:f7:d4:bf:ba:0d:b9:56:4c:60:a2:96:4d:
                    43:c0:f7:91:c8:f9:f4:15:02:21:c5:94:92:94:ff:
                    79:6b:63:22:87:80:48:97:e0:cd:a3:56:2e:0e:07:
                    9f:bc:1b:31:e6:ba:e0:c4:80:f7:f9:28:eb:b3:bc:
                    a1:56:8c:c6:f9:f4:98:85:9e:d0:09:74:ef:f7:00:
                    22:07:e4:cf:cf:c8:c6:bd:1c:97:8a:8b:a6:a3:13:
                    d4:52:94:dc:6a:2b:8a:dc:25:81:2f:af:32:73:eb:
                    73:e9:d1:ef:f1:c4:47:3b:d5:37:7b:7a:aa:f1:4d:
                    e5:61:ab:4d:40:5d:89:44:aa:b7:96:70:ed:56:3f:
                    93:0e:7d:b0:73:69:39:1d:91:51:e6:62:b5:c3:ba:
                    44:a5:9a:ee:b9:d6:67:e6:a0:2e:72:7d:bf:ee:ba:
                    b3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6B:B3:D7:8C:9B:0B:F8:02:AB:F0:72:B9:E5:B4:9A:01:83:3D:15
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Smuz14ybC_gCq_ByueW0mgGDPRU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:20:a0:b5:97:b4:26:c8:6a:d3:7e:e0:cf:b2:24:c5:aa:72:
         74:de:b9:ca:ae:e2:93:93:36:42:63:56:9d:84:c3:2f:bd:58:
         0e:a0:46:78:af:17:e9:cf:ae:d2:35:a2:f6:f9:92:f3:fe:f6:
         2c:44:8b:fe:f5:bc:d6:dd:e5:66:41:d5:73:c4:3b:f5:1d:2b:
         56:8c:c8:ab:19:43:8c:07:7f:b7:df:a4:01:be:fd:6b:4b:77:
         fe:65:c0:4f:02:90:bc:bc:3b:58:32:5f:8f:e1:b4:a5:b7:19:
         3d:c1:ca:51:3d:73:eb:02:2b:59:93:14:19:3f:fe:50:66:c2:
         84:1f:3a:2f:6e:20:e5:f9:2c:5d:16:4f:95:47:5a:b2:3c:ba:
         a0:37:86:eb:20:d5:ab:c6:a5:83:66:47:02:8b:aa:e1:5b:fb:
         6f:61:84:3f:ec:5c:47:2f:d5:d5:46:56:77:06:f0:fb:b8:98:
         ee:20:32:3a:f6:a5:6a:c6:86:69:9d:cc:5b:a1:6b:c2:d3:61:
         88:6b:69:15:72:58:67:ad:89:68:2b:69:cc:d1:6b:80:7e:0f:
         7f:db:7d:e0:1f:9a:03:b9:20:41:85:e9:a7:43:cb:b8:b5:19:
         07:4a:2b:21:cd:99:ea:45:df:ae:86:3b:be:a5:9b:04:a0:d4:
         49:82:a8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org