Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/_FLlq3-zebhR0E6CHOG_JKAj4pA.roa
File:                     _FLlq3-zebhR0E6CHOG_JKAj4pA.roa (raw, json)
Hash identifier:          /3qprUyMaUBJBeM+4NdzV/dB+6/HGxhx5erx9TTzOVk=
Subject key identifier:   FC:52:E5:AB:7F:B3:79:B8:51:D0:4E:82:1C:E1:BF:24:A0:23:E2:90
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       023D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_FLlq3-zebhR0E6CHOG_JKAj4pA.roa
Signing time:             Fri 31 May 2024 01:33:18 +0000
ROA not before:           Fri 31 May 2024 01:33:18 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        43.244.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:33:18 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=FC52E5AB7FB379B851D04E821CE1BF24A023E290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:83:e3:19:c6:51:cb:43:a3:21:17:6f:2f:81:
                    1f:3b:60:20:83:ef:a5:68:ea:f3:ee:91:a5:1e:34:
                    6a:9d:93:96:82:e9:5f:cf:d3:ff:19:42:f5:39:7f:
                    88:90:85:a2:5a:a5:aa:9e:15:df:8d:21:ce:85:a5:
                    ed:64:ee:70:56:dc:b3:25:a6:0c:ed:a2:e7:c6:99:
                    63:36:fc:ab:43:a0:d2:d5:06:bd:70:c6:08:d4:75:
                    cb:be:a7:38:41:e5:6c:88:5d:3e:e2:22:57:99:a6:
                    6e:b4:c7:55:46:ec:a1:04:c4:ff:45:18:b0:9d:ac:
                    58:de:0d:31:80:69:8d:23:47:b7:46:07:96:60:f8:
                    07:50:06:86:64:12:34:24:57:43:c2:82:ee:00:85:
                    03:81:fc:cb:4e:00:42:3b:7a:f0:06:38:f9:29:b4:
                    bc:cc:42:49:40:52:10:ca:f3:e5:32:83:6b:5b:4c:
                    cc:04:c0:9c:a1:1d:2a:8c:dd:f8:c2:fb:64:3b:3e:
                    d7:40:99:e0:d8:5b:f2:c4:71:82:27:57:62:ad:a5:
                    b7:84:ca:2a:db:83:d5:98:f4:39:ea:e0:4e:c0:9b:
                    51:b5:87:5a:58:46:4c:85:08:6a:6c:f8:c1:fe:d9:
                    23:57:d7:0b:d3:31:ca:c5:70:4f:94:d4:c6:60:44:
                    9d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:52:E5:AB:7F:B3:79:B8:51:D0:4E:82:1C:E1:BF:24:A0:23:E2:90
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_FLlq3-zebhR0E6CHOG_JKAj4pA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         87:74:e4:69:3a:05:f2:63:ba:43:76:dd:8f:a2:7e:ae:8d:5a:
         d4:1e:0b:52:ff:c9:75:f8:42:9b:46:30:08:2f:51:bd:0a:8f:
         b5:84:d4:f5:05:1e:63:c0:2c:02:47:cc:fb:10:9d:11:35:a4:
         13:df:dd:da:37:ba:a3:0a:c5:fc:4c:d8:24:88:38:e9:d2:31:
         92:e9:f6:2d:c9:0d:42:0e:c1:1f:f2:51:17:84:1f:ef:1a:15:
         b7:74:07:89:c2:05:b0:00:42:8d:48:12:7f:f0:c0:8d:a4:d8:
         3a:48:f6:69:3b:e2:80:4d:ac:d6:ce:a1:cf:45:a3:0a:e8:98:
         08:2e:bd:f6:e8:96:db:77:98:1e:77:d6:d2:c3:be:90:63:16:
         3b:da:98:53:48:e6:96:6b:3c:5d:4d:8d:6b:ae:ca:a8:24:1e:
         2c:58:06:52:32:19:f9:53:78:65:f2:d3:fc:7b:76:82:60:f2:
         c1:63:9e:83:bd:11:8f:5b:88:e6:0a:63:37:36:10:ae:5d:55:
         97:fc:ca:29:e7:79:09:57:0a:05:55:37:18:31:32:d9:8b:e6:
         07:74:56:6e:05:53:7e:6a:c2:b0:a6:b1:79:bd:4c:6e:c6:e4:
         0d:74:3a:77:49:b3:44:5b:2c:ec:26:39:ee:62:f5:38:0a:ca:
         62:6c:32:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org