Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/anGn2HK1RzTOsWbCpum9zVwTYgg.roa
File:                     anGn2HK1RzTOsWbCpum9zVwTYgg.roa (raw, json)
Hash identifier:          g/gGDEoZx89pevTaClX6IOd1KLBCqkpDR7e7juEZvyc=
Subject key identifier:   6A:71:A7:D8:72:B5:47:34:CE:B1:66:C2:A6:E9:BD:CD:5C:13:62:08
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       028C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/anGn2HK1RzTOsWbCpum9zVwTYgg.roa
Signing time:             Fri 31 May 2024 01:39:41 +0000
ROA not before:           Fri 31 May 2024 01:39:41 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        59.157.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:39:41 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=6A71A7D872B54734CEB166C2A6E9BDCD5C136208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3f:b2:d5:cb:44:b3:5f:ef:e5:c1:1e:6c:01:
                    b9:a4:57:a0:06:44:73:5e:cf:0a:9f:12:5b:7e:4c:
                    91:dc:f4:08:89:a1:be:89:69:25:09:b1:6e:7c:79:
                    7c:42:65:43:c1:66:24:3d:43:a0:ef:a0:17:5e:ca:
                    ad:d9:ff:ea:78:64:bb:46:61:bf:60:ec:b2:2b:c2:
                    20:5e:de:f6:ab:14:bd:67:a3:c4:c1:f7:b9:3f:eb:
                    68:b6:0d:d8:f2:8e:eb:0a:b9:62:df:2e:4c:df:c8:
                    9f:12:c1:7c:ae:77:34:3a:95:11:3e:ec:e1:be:77:
                    cd:26:b8:e6:ab:7f:98:df:a6:a8:90:01:3c:00:39:
                    90:87:3f:93:62:6c:aa:89:07:1f:d3:e3:c6:3d:c0:
                    e7:7a:82:12:35:dc:2a:3a:f7:24:02:bf:56:62:22:
                    4f:36:e8:4c:bf:f6:3a:69:49:7a:07:1a:cb:3f:30:
                    37:3f:4f:51:69:84:06:d8:88:d2:eb:ed:ea:5b:05:
                    86:8d:26:0b:21:a9:69:e5:d7:65:5a:a0:c6:d7:6f:
                    af:17:4a:b8:67:18:e9:8c:34:aa:68:8e:5b:4b:d8:
                    ca:b5:02:29:81:8b:3c:2f:ef:0c:6f:2e:56:f2:4a:
                    db:58:a5:74:57:70:c0:41:43:0b:e8:d0:a6:f1:63:
                    01:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:71:A7:D8:72:B5:47:34:CE:B1:66:C2:A6:E9:BD:CD:5C:13:62:08
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/anGn2HK1RzTOsWbCpum9zVwTYgg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.157.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         09:cc:13:a6:28:42:bd:2a:8b:9d:ce:84:10:8c:6d:29:fd:88:
         2b:c2:ed:db:1c:b1:7a:51:7b:9d:23:7d:3e:bd:8d:8c:ec:33:
         00:7a:1d:b9:70:a9:0e:1b:8b:02:00:f5:23:ef:d9:72:95:00:
         d8:19:49:9c:bf:ee:ff:14:c0:6c:11:21:08:11:3a:4f:b9:e8:
         cd:00:16:48:55:17:4d:fd:71:4c:19:86:ba:f4:f1:a0:1e:19:
         8c:f9:7a:64:c1:7e:95:9b:ca:85:8c:76:44:ee:09:4e:f5:b5:
         16:8a:40:d8:77:36:ea:94:c1:4e:ae:db:3f:4c:df:ef:28:e9:
         54:d0:ef:79:3e:4e:8c:75:69:6a:6a:f6:e0:e0:91:a2:f4:da:
         e0:7a:36:99:33:28:f1:09:25:bf:bd:5c:e9:8e:b0:47:67:8d:
         34:a0:ba:a9:72:1f:78:cf:0e:4a:05:d1:c7:a1:72:c5:cc:26:
         4b:33:c1:cb:62:f8:c1:29:2c:8b:23:37:0f:8f:61:b8:c1:41:
         e6:3c:1e:55:c1:33:b3:c4:48:c7:2a:e6:c9:c0:16:ef:55:af:
         19:62:32:8a:58:29:af:81:0d:9a:d6:c5:47:40:54:dd:ae:c0:
         28:02:40:44:93:fe:8d:16:cf:8d:fc:79:2a:62:84:ea:7d:72:
         d4:1b:7c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org