Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/dwOILdJ-3DKWcJTZzpTYXB_XX3c.roa
File:                     dwOILdJ-3DKWcJTZzpTYXB_XX3c.roa (raw, json)
Hash identifier:          mly7LDXK5kVi/f7SSqrSqDXiPqTJDs0wm6EpS4pw2yU=
Subject key identifier:   77:03:88:2D:D2:7E:DC:32:96:70:94:D9:CE:94:D8:5C:1F:D7:5F:77
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       027E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/dwOILdJ-3DKWcJTZzpTYXB_XX3c.roa
Signing time:             Fri 31 May 2024 01:37:49 +0000
ROA not before:           Fri 31 May 2024 01:37:49 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        111.234.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 638 (0x27e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:37:49 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=7703882DD27EDC32967094D9CE94D85C1FD75F77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:74:57:c3:e9:0e:3c:33:b3:36:de:0f:d7:
                    60:ac:3c:0e:2e:67:34:9e:ce:a0:17:a6:c0:d2:7e:
                    0c:9e:46:28:c8:04:59:0a:f1:dc:95:a3:8a:64:f8:
                    c0:12:a3:ef:f1:70:07:80:2f:c0:4f:e2:d8:87:43:
                    2f:5a:b4:1b:7c:19:15:69:06:cd:b2:d6:a4:c3:09:
                    61:bc:4f:32:3a:12:ac:6a:5e:50:0b:1c:87:0f:bb:
                    ff:90:4c:90:d1:7d:cf:0d:04:bc:0d:f7:5c:07:2b:
                    50:12:36:7c:e2:a5:39:99:be:5d:0f:0a:0d:69:be:
                    36:a0:a4:ed:8d:09:d7:7a:11:9d:df:c8:18:f0:50:
                    13:4d:87:96:a1:9d:bd:19:b8:34:b9:6f:88:eb:10:
                    6b:4d:ae:35:3b:50:b4:e1:bb:9c:c4:f4:19:72:45:
                    8a:6b:63:70:65:02:25:8c:1a:c1:77:ce:38:20:19:
                    6f:e6:5f:fe:1e:3d:d8:ad:01:ac:85:fe:47:2d:95:
                    6f:91:c8:a4:d8:4e:7a:c3:b8:55:1d:ac:93:14:da:
                    fe:b5:80:39:a7:1b:3a:e3:c4:01:fc:35:1c:aa:07:
                    31:6a:3e:37:9d:59:59:fd:46:29:0e:94:f1:a8:da:
                    2d:21:96:26:16:fc:48:04:4c:e5:f2:f4:29:62:62:
                    3d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:03:88:2D:D2:7E:DC:32:96:70:94:D9:CE:94:D8:5C:1F:D7:5F:77
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/dwOILdJ-3DKWcJTZzpTYXB_XX3c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:4a:98:06:e3:8b:00:2a:66:d8:e4:8f:6b:21:0e:a8:a9:57:
         a3:e2:98:40:4d:a8:bd:18:96:bc:39:56:4a:24:fe:23:e3:b5:
         79:06:2b:9c:31:f1:ac:2c:f2:eb:b0:50:df:1a:84:ce:f6:4e:
         b9:fe:a2:07:e9:2b:38:4b:95:41:cf:c2:9d:9d:ee:1b:9f:ec:
         92:95:69:a4:70:f0:e8:e8:c2:cb:ac:af:ea:79:7c:6d:d7:06:
         0d:e5:a2:e6:4a:b4:57:b0:7c:db:d2:c7:be:e0:c6:15:36:9e:
         ed:85:f9:bb:73:42:9c:9a:42:2b:40:1a:87:ea:06:4f:e7:82:
         87:c9:59:b0:9d:08:cf:9f:e1:fa:cb:5c:ab:fb:c1:6d:48:6b:
         34:2f:9f:ac:b7:15:ac:84:0b:97:a9:ab:ca:28:a0:6f:eb:d1:
         de:a6:9d:62:59:e2:d8:a6:78:42:f0:a8:ae:6d:55:89:cc:08:
         08:42:27:90:57:79:27:04:20:87:67:b7:2e:16:21:d5:85:59:
         73:c4:a3:5f:41:d7:be:f8:6c:93:fb:32:42:4d:67:59:03:be:
         d4:e7:cf:bd:01:72:90:5b:fe:05:12:b3:df:4e:47:67:12:73:
         ba:f8:c7:a7:d4:60:8e:56:8d:41:17:b3:97:88:e0:77:a4:77:
         73:ae:ba:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org