Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/dJuMFWevLO__2GB7tJcDnptCVv0.roa
File:                     dJuMFWevLO__2GB7tJcDnptCVv0.roa (raw, json)
Hash identifier:          APbdWWgiNiKudcpzlrL8hlJTQKj+JYqpd3ENf1CQ5HE=
Subject key identifier:   74:9B:8C:15:67:AF:2C:EF:FF:D8:60:7B:B4:97:03:9E:9B:42:56:FD
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0299
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/dJuMFWevLO__2GB7tJcDnptCVv0.roa
Signing time:             Fri 31 May 2024 01:39:47 +0000
ROA not before:           Fri 31 May 2024 01:39:47 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        122.145.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:39:47 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=749B8C1567AF2CEFFFD8607BB497039E9B4256FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:84:e7:5e:dd:d8:a1:5a:e1:6f:d3:32:f9:
                    07:59:f5:64:40:a9:39:ba:5b:e2:26:a2:47:5f:7f:
                    e6:5b:d4:a4:14:a5:ea:fd:33:a9:bf:70:da:17:07:
                    03:af:58:12:55:8d:a2:e4:42:f7:97:56:5f:81:df:
                    d0:cd:a6:63:80:c9:86:03:46:09:25:25:61:6c:a2:
                    f8:a3:44:26:9a:ee:35:4e:f0:53:7b:36:4d:6e:5e:
                    80:a6:c2:77:9b:71:9c:fd:4e:f7:8a:ce:e3:1a:bb:
                    39:ab:0f:b3:f2:b0:85:30:9a:8a:f8:cd:65:f6:82:
                    40:64:db:a7:04:69:e6:65:96:31:88:22:ee:73:69:
                    99:1f:dc:80:46:86:f8:be:a5:3d:f3:dc:1d:58:20:
                    93:00:b6:b7:aa:b6:e6:5f:3d:01:7f:49:08:50:22:
                    25:45:bd:06:0f:e2:f2:8e:df:1a:0c:c8:50:94:fa:
                    7d:33:75:c5:ec:16:7f:3c:ee:4e:24:6f:46:67:dd:
                    4f:bd:5d:d4:f1:ee:64:d4:4e:1d:f4:6c:91:e5:40:
                    f5:66:d5:19:6b:27:28:33:48:0d:00:5d:e0:22:ac:
                    71:77:78:31:bc:5e:39:1e:37:45:e1:2b:8d:e2:fb:
                    0b:3d:51:49:ba:b0:68:73:2c:04:b4:f4:19:e8:05:
                    9f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9B:8C:15:67:AF:2C:EF:FF:D8:60:7B:B4:97:03:9E:9B:42:56:FD
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/dJuMFWevLO__2GB7tJcDnptCVv0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8c:32:af:d9:13:b6:84:6b:55:f8:c4:d7:6e:8b:fc:8f:15:a2:
         6d:02:46:56:52:b3:63:bb:4c:94:67:69:9e:01:bc:94:ac:17:
         7b:24:65:0b:c2:b6:b4:8f:da:b6:7a:c9:f7:df:a9:38:8e:c7:
         0a:77:85:0a:9d:66:36:29:67:72:a5:0c:1e:30:22:4d:2f:b5:
         e9:ff:a9:03:75:f7:1f:56:ae:e0:a8:65:ac:a7:45:82:f5:65:
         8e:d5:93:f4:58:91:01:99:01:df:e4:7a:f6:95:6d:42:c8:23:
         70:79:e1:68:1e:a3:ac:0b:25:5a:36:f2:b8:68:cb:32:a5:90:
         e2:96:1d:36:27:c3:b9:64:1f:e3:e4:f0:8a:30:7a:f3:a7:2f:
         ea:3f:cb:71:ed:24:dc:0c:d0:74:e4:03:ad:85:df:de:22:1f:
         dd:91:d9:56:69:e5:1a:7b:a7:43:bc:2a:3c:06:52:d1:dd:8e:
         b3:c3:35:44:6c:3e:9c:c8:53:d6:77:64:e3:c9:20:fe:ee:df:
         5b:4f:f7:e0:91:74:51:11:ee:ab:03:77:ef:96:28:6d:4a:94:
         29:55:aa:81:78:0c:51:8c:7c:82:bc:0e:d7:d5:c7:d9:78:b4:
         85:7a:f7:4a:29:61:be:18:c9:c3:a3:c3:11:20:15:35:35:c5:
         62:81:c2:89
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICApkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw
MTM5NDdaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc0OUI4QzE1NjdBRjJD
RUZGRkQ4NjA3QkI0OTcwMzlFOUI0MjU2RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxNITnXt3YoVrhb9My+QdZ9WRAqTm6W+Imokdff+Zb1KQUper9
M6m/cNoXBwOvWBJVjaLkQveXVl+B39DNpmOAyYYDRgklJWFsovijRCaa7jVO8FN7
Nk1uXoCmwnebcZz9TveKzuMauzmrD7PysIUwmor4zWX2gkBk26cEaeZlljGIIu5z
aZkf3IBGhvi+pT3z3B1YIJMAtreqtuZfPQF/SQhQIiVFvQYP4vKO3xoMyFCU+n0z
dcXsFn887k4kb0Zn3U+9XdTx7mTUTh30bJHlQPVm1RlrJygzSA0AXeAirHF3eDG8
XjkeN0XhK43i+ws9UUm6sGhzLAS09BnoBZ+NAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUdJuMFWevLO//2GB7tJcDnptCVv0wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L2RKdU1GV2V2TE9fXzJHQjd0SmNEbnB0Q1Z2MC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAV6kcAwDQYJKoZIhvcNAQELBQADggEBAIwyr9kTtoRrVfjE126L/I8Vom0C
RlZSs2O7TJRnaZ4BvJSsF3skZQvCtrSP2rZ6yfffqTiOxwp3hQqdZjYpZ3KlDB4w
Ik0vten/qQN19x9WruCoZaynRYL1ZY7Vk/RYkQGZAd/kevaVbULII3B54Wgeo6wL
JVo28rhoyzKlkOKWHTYnw7lkH+Pk8IowevOnL+o/y3HtJNwM0HTkA62F394iH92R
2VZp5Rp7p0O8KjwGUtHdjrPDNURsPpzIU9Z3ZOPJIP7u31tP9+CRdFER7qsDd++W
KG1KlClVqoF4DFGMfIK8DtfVx9l4tIV690opYb4YycOjwxEgFTU1xWKBwok=
-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org