Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/_tFtDH4SeE-1NNjA0IzjWC1_5OI.roa
File:                     _tFtDH4SeE-1NNjA0IzjWC1_5OI.roa (raw, json)
Hash identifier:          reUMFZl9RfJdJb33PlLtd+N3rqYA79wYNnHuWU1xJR0=
Subject key identifier:   FE:D1:6D:0C:7E:12:78:4F:B5:34:D8:C0:D0:8C:E3:58:2D:7F:E4:E2
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0285
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_tFtDH4SeE-1NNjA0IzjWC1_5OI.roa
Signing time:             Fri 31 May 2024 01:39:38 +0000
ROA not before:           Fri 31 May 2024 01:39:38 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        119.150.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:39:38 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=FED16D0C7E12784FB534D8C0D08CE3582D7FE4E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:57:7b:4b:e0:11:88:1e:fe:02:a0:66:64:
                    5b:4e:86:b7:55:f8:2c:a5:8d:64:66:ab:41:24:35:
                    6e:7a:d2:b9:82:67:00:00:ff:3f:c6:b3:36:da:92:
                    b4:ef:69:48:0c:33:7c:b2:0f:0c:12:0b:62:ed:9a:
                    01:01:f3:18:c6:83:7d:ab:3f:14:97:bc:19:70:d9:
                    4d:bc:30:9c:0c:e0:15:10:bc:13:75:02:0b:f0:46:
                    9a:bd:db:bf:e0:ab:c8:7a:e3:e6:ee:cf:f0:23:ca:
                    d3:c8:91:21:2f:89:b6:d6:d0:33:f3:e0:d3:7f:d2:
                    7b:6c:75:9e:f2:79:c6:aa:37:8d:19:64:7d:71:9c:
                    f2:51:e9:0b:ca:bf:17:d9:99:d4:de:e7:ee:af:d2:
                    3e:9f:51:68:86:ff:12:bc:4f:37:a8:79:82:ec:52:
                    4d:31:00:01:36:6c:09:05:22:c3:88:ea:ab:7e:7b:
                    d2:cc:73:6c:f8:5d:6d:99:7f:01:61:ae:10:f4:e7:
                    86:45:79:d3:77:b6:64:2b:33:a3:17:46:69:13:03:
                    08:a7:1a:40:a8:23:d2:aa:43:92:b5:53:af:60:b7:
                    48:a9:8c:02:74:04:4a:43:c6:aa:ea:95:81:aa:7b:
                    a4:8b:6e:d4:92:65:83:bf:56:d3:85:56:95:a2:16:
                    6c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D1:6D:0C:7E:12:78:4F:B5:34:D8:C0:D0:8C:E3:58:2D:7F:E4:E2
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_tFtDH4SeE-1NNjA0IzjWC1_5OI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:2b:46:99:f6:8d:8c:df:09:69:ad:d8:d7:3f:3e:d7:91:e2:
         20:32:97:51:25:1c:d7:06:16:41:17:63:25:e7:af:3a:ab:b9:
         19:1b:84:c7:e2:4d:fb:8e:16:3e:62:90:10:b3:7a:7b:4c:6a:
         f8:cb:00:40:b7:af:9b:ee:a7:5c:ad:b8:3d:d7:19:07:a3:d5:
         54:70:03:dd:4b:58:24:32:bc:60:2c:ae:58:0c:02:53:a1:7d:
         74:df:89:b3:f8:0f:10:e0:8d:2e:ad:d4:a4:8d:fe:da:ca:2a:
         17:bb:4a:57:db:34:af:74:cf:9e:09:85:cf:6a:94:64:11:ed:
         2a:28:1b:fe:ef:cf:4d:d2:a0:da:c3:25:f0:bf:cf:60:17:df:
         51:fb:a8:cc:51:83:10:ec:3e:c8:d4:23:5f:69:f5:9e:43:92:
         1a:0a:4e:60:6d:25:55:f9:1d:39:5c:0d:f8:e4:ff:68:92:21:
         0b:6c:d8:ed:66:65:e8:5f:d2:06:09:d1:b5:8c:5b:e3:1e:8d:
         bd:9b:79:3f:17:ff:84:81:8a:07:72:91:46:51:41:93:c0:52:
         ca:f3:52:c3:ea:3a:32:7b:64:42:88:79:f1:bf:3a:86:84:7a:
         81:3c:d0:b1:1c:88:a8:e0:65:33:d9:07:04:e1:86:4a:0c:58:
         9a:36:90:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org