Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/XilaEjOIzzm52W7ErxPUtO7wUP8.roa
File:                     XilaEjOIzzm52W7ErxPUtO7wUP8.roa (raw, json)
Hash identifier:          2VT1Pj6u5VLv2iolcezapW1Cgk5noIt7/UnLKJBXhy4=
Subject key identifier:   5E:29:5A:12:33:88:CF:39:B9:D9:6E:C4:AF:13:D4:B4:EE:F0:50:FF
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0298
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XilaEjOIzzm52W7ErxPUtO7wUP8.roa
Signing time:             Fri 31 May 2024 01:39:46 +0000
ROA not before:           Fri 31 May 2024 01:39:46 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        122.145.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:39:46 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=5E295A123388CF39B9D96EC4AF13D4B4EEF050FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:79:68:5d:7f:5a:59:8c:6b:53:c9:eb:fb:
                    4e:13:d1:a7:2e:e6:6f:b6:cf:27:b2:02:c9:47:62:
                    99:3b:6e:32:a8:0a:1b:db:ea:54:b4:68:2f:eb:05:
                    70:c3:00:0a:7e:4d:92:65:8a:2a:3f:24:41:f7:35:
                    4d:ea:7c:6d:05:33:88:5c:0d:57:23:39:3e:34:1b:
                    32:c7:c0:f8:31:4e:73:a8:39:fb:ac:95:0c:04:8b:
                    ee:09:6a:91:ac:a7:76:9a:9b:18:c9:7f:6f:88:13:
                    a6:fb:7e:cc:6a:de:76:db:3b:cc:85:86:75:a3:62:
                    ef:83:13:17:21:37:ef:ec:24:8f:11:22:a5:b0:ad:
                    ba:6d:35:60:e7:1a:47:4c:49:68:07:7c:b5:46:de:
                    f5:7c:ab:dc:76:c8:d2:b5:08:ab:b3:df:5a:37:3c:
                    18:aa:e4:2f:03:18:b5:d8:e1:e6:10:f7:3d:41:dc:
                    66:c0:e0:6d:1d:c1:73:17:88:f1:98:99:09:e9:79:
                    31:94:e2:4a:92:01:5b:be:76:be:55:99:63:9f:0e:
                    a2:69:74:43:98:88:c9:04:0e:95:4f:0f:fe:86:95:
                    36:66:6b:4b:93:29:30:da:cb:12:03:b9:35:d4:aa:
                    4f:ad:6a:3a:80:51:ea:55:34:9c:66:10:ff:93:0c:
                    b9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:29:5A:12:33:88:CF:39:B9:D9:6E:C4:AF:13:D4:B4:EE:F0:50:FF
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XilaEjOIzzm52W7ErxPUtO7wUP8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         81:1c:5a:3f:5c:c0:bf:72:ea:e0:67:cf:16:a3:e4:be:b6:a3:
         f9:d1:d0:61:ac:17:ab:2f:aa:d2:f6:a8:69:e7:37:3d:52:0f:
         d0:90:1c:a7:b5:bf:af:54:99:38:8e:34:0a:64:b5:a9:df:71:
         9e:8d:43:f2:49:68:73:2b:75:eb:e1:29:a5:4e:1d:70:56:f5:
         91:09:dc:fb:ed:ad:47:2b:cd:b4:4c:67:a5:37:22:ad:17:ad:
         6c:22:6b:cd:31:c6:38:1b:d4:cd:2f:a6:fc:d8:f8:e8:c4:82:
         a3:ad:cb:ef:d7:17:72:81:33:6e:c7:02:30:19:69:ba:1f:a8:
         e4:b4:f9:6c:26:55:0f:57:ed:25:95:00:3c:e8:19:52:d9:2c:
         6d:a3:97:1d:34:ed:85:3d:a0:11:7c:73:76:d6:f1:ae:01:30:
         6b:d2:ae:42:dc:61:7c:27:f2:ae:62:a1:af:fb:77:d9:68:dd:
         cf:5c:7d:3d:f0:68:4a:77:a9:e8:5e:4b:fb:d7:16:71:06:99:
         4f:52:db:86:6c:75:66:b0:90:9f:63:08:1e:28:bf:3d:40:2b:
         8b:84:3b:6b:c0:82:2b:02:19:aa:e1:a4:5d:6e:f2:8a:1d:ca:
         83:0b:b6:cf:45:56:9f:36:d8:75:d8:5d:d0:9b:61:97:b7:78:
         5c:34:c9:3c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICApgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw
MTM5NDZaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVFMjk1QTEyMzM4OENG
MzlCOUQ5NkVDNEFGMTNENEI0RUVGMDUwRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOpnloXX9aWYxrU8nr+04T0acu5m+2zyeyAslHYpk7bjKoChvb
6lS0aC/rBXDDAAp+TZJliio/JEH3NU3qfG0FM4hcDVcjOT40GzLHwPgxTnOoOfus
lQwEi+4JapGsp3aamxjJf2+IE6b7fsxq3nbbO8yFhnWjYu+DExchN+/sJI8RIqWw
rbptNWDnGkdMSWgHfLVG3vV8q9x2yNK1CKuz31o3PBiq5C8DGLXY4eYQ9z1B3GbA
4G0dwXMXiPGYmQnpeTGU4kqSAVu+dr5VmWOfDqJpdEOYiMkEDpVPD/6GlTZma0uT
KTDayxIDuTXUqk+tajqAUepVNJxmEP+TDLnvAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUXilaEjOIzzm52W7ErxPUtO7wUP8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L1hpbGFFak9JenptNTJXN0VyeFBVdE83d1VQOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAV6kaAwDQYJKoZIhvcNAQELBQADggEBAIEcWj9cwL9y6uBnzxaj5L62o/nR
0GGsF6svqtL2qGnnNz1SD9CQHKe1v69UmTiONApktanfcZ6NQ/JJaHMrdevhKaVO
HXBW9ZEJ3PvtrUcrzbRMZ6U3Iq0XrWwia80xxjgb1M0vpvzY+OjEgqOty+/XF3KB
M27HAjAZabofqOS0+WwmVQ9X7SWVADzoGVLZLG2jlx007YU9oBF8c3bW8a4BMGvS
rkLcYXwn8q5ioa/7d9lo3c9cfT3waEp3qeheS/vXFnEGmU9S24ZsdWawkJ9jCB4o
vz1AK4uEO2vAgisCGarhpF1u8oodyoMLts9FVp822HXYXdCbYZe3eFw0yTw=
-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org