Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/eohqdfxu6XKwjvqboZSHKfeQh60.roa
File:                     eohqdfxu6XKwjvqboZSHKfeQh60.roa (raw, json)
Hash identifier:          hLHl84rDrSypfjkkv+U2QlVVOH8RHoSoaLuA0Fnf90U=
Subject key identifier:   7A:88:6A:75:FC:6E:E9:72:B0:8E:FA:9B:A1:94:87:29:F7:90:87:AD
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02AB
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/eohqdfxu6XKwjvqboZSHKfeQh60.roa
Signing time:             Fri 31 May 2024 01:41:37 +0000
ROA not before:           Fri 31 May 2024 01:41:37 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        153.120.208.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:41:37 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=7A886A75FC6EE972B08EFA9BA1948729F79087AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:23:dc:8a:be:6f:00:bc:04:d8:67:24:96:37:
                    00:13:0b:cf:d9:17:2d:1a:92:38:bc:55:7d:12:1a:
                    67:8d:df:b4:db:96:60:b3:f4:a5:20:dd:04:93:dd:
                    4f:a7:26:b9:7c:88:d8:1d:79:ed:15:76:1d:c9:68:
                    5a:24:6f:55:87:9b:d7:5c:4b:90:d1:9e:74:21:fa:
                    82:e5:b6:b1:6e:b4:ef:a9:71:2b:b4:46:ea:0b:c0:
                    e8:48:23:b8:42:b3:92:a8:01:73:1a:d0:3c:4b:23:
                    50:08:2f:da:5f:ec:18:d7:e7:9f:92:cf:d2:e7:1a:
                    7a:2c:dc:56:48:91:3f:2c:e1:d6:b4:3e:be:0f:d3:
                    eb:60:02:4b:69:69:8a:10:60:c9:6d:70:ee:48:d9:
                    00:bd:20:11:d8:98:93:f7:53:2f:4f:ea:14:84:39:
                    7a:9c:7c:17:74:c4:54:f5:aa:5a:71:23:0c:3a:ce:
                    c3:79:99:c3:a6:a8:45:1b:e8:5f:7c:c9:6c:d9:fa:
                    c5:6e:84:3f:41:e9:15:61:c0:11:d9:7b:6a:34:43:
                    80:63:8d:8b:7a:45:a1:2d:5e:ad:a1:7d:5c:24:80:
                    b2:3f:16:1e:88:e0:10:2a:d9:7a:aa:81:6a:3d:82:
                    ee:fb:13:2e:d3:29:e6:e9:76:13:b2:3d:0f:04:80:
                    03:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:88:6A:75:FC:6E:E9:72:B0:8E:FA:9B:A1:94:87:29:F7:90:87:AD
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/eohqdfxu6XKwjvqboZSHKfeQh60.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.120.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:6a:0e:1f:36:d2:0e:39:17:ec:3b:bc:17:77:ba:c1:fc:4a:
         4a:29:96:b4:e8:fe:ab:69:d9:ed:16:5d:b8:09:59:41:5e:5b:
         bc:13:0a:df:df:c0:75:6a:d7:08:91:0d:04:98:a7:d0:4e:10:
         c4:be:2a:a2:b3:18:ba:ac:a3:5d:99:89:36:e6:40:6b:ed:48:
         f8:23:50:02:80:db:b3:39:3f:bd:57:50:21:a3:5a:3b:e9:f5:
         b2:30:77:b3:cf:2f:36:46:ef:d5:6b:55:88:6b:f8:12:b5:8d:
         7d:8d:ed:2c:a2:28:c9:f7:87:ba:7b:83:d0:24:8c:d8:9c:8b:
         dc:13:a8:a3:55:cd:e6:72:d8:db:ac:eb:cc:aa:c2:b6:81:35:
         d2:20:91:89:11:15:b6:13:6a:ef:63:9c:02:eb:cd:6d:57:6c:
         e7:a0:fe:56:b4:68:c3:bd:3f:3c:3e:6c:e8:45:9b:38:aa:65:
         b3:7c:98:e4:08:ff:77:04:7f:c6:30:b0:4b:a4:d8:f2:33:45:
         f8:7a:e4:00:47:71:1c:8e:e7:41:ac:bf:75:dc:c6:25:7a:31:
         ce:2c:f3:90:11:4b:ed:b6:23:af:9e:06:12:e1:49:25:c2:4e:
         e0:ca:cb:0e:9f:04:e4:07:c7:4d:65:12:e7:9a:fd:68:3e:35:
         c1:bc:af:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org