Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/hDdkTFEhm5eMPwwWXoWkcgv-ADw.roa
File:                     hDdkTFEhm5eMPwwWXoWkcgv-ADw.roa (raw, json)
Hash identifier:          6pErhP02ZUw1vjPUqmJsiZaU+wIw73o0vNYvH3XHyNM=
Subject key identifier:   84:37:64:4C:51:21:9B:97:8C:3F:0C:16:5E:85:A4:72:0B:FE:00:3C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0279
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/hDdkTFEhm5eMPwwWXoWkcgv-ADw.roa
Signing time:             Fri 31 May 2024 01:37:47 +0000
ROA not before:           Fri 31 May 2024 01:37:47 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        110.74.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:37:47 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=8437644C51219B978C3F0C165E85A4720BFE003C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:70:aa:cd:05:e4:8b:77:cb:72:a2:3b:f5:
                    2e:fe:42:d8:21:36:ea:c0:dd:ad:99:51:44:e3:87:
                    60:23:69:06:7a:de:dd:0b:18:30:23:ad:22:f3:9f:
                    33:8f:47:e0:b8:9e:07:6e:40:0b:6b:a5:30:40:35:
                    5c:b1:13:f9:42:4f:ba:a0:21:7e:d5:74:34:0c:83:
                    0a:36:bd:37:48:50:35:26:fc:f9:78:7f:a6:87:be:
                    2d:aa:b1:3d:26:73:0d:6d:a3:ce:45:ff:01:98:57:
                    6d:b8:1b:31:46:2f:90:50:b3:44:86:9e:0c:bc:7d:
                    38:88:69:b9:fc:a7:1c:85:bc:5e:90:dd:60:54:32:
                    15:45:ca:0a:9e:81:7f:02:bd:86:e5:dc:ea:0d:06:
                    56:25:f4:4b:ea:9c:63:87:bb:cc:ec:aa:3f:0f:10:
                    d4:b2:d2:a0:80:ce:d3:66:5c:21:36:b8:1b:be:cf:
                    ac:91:44:a3:82:3e:95:f8:51:58:68:dc:96:ca:b7:
                    2b:d9:a6:02:28:19:44:63:16:33:0d:52:81:e7:a0:
                    19:a1:f7:4f:6c:8f:d4:be:e1:34:26:2a:08:f4:d1:
                    bd:7c:59:eb:27:a8:0e:8e:17:78:0e:fd:90:44:04:
                    43:5f:fc:56:09:0f:82:02:ba:94:61:62:20:ab:fa:
                    de:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:37:64:4C:51:21:9B:97:8C:3F:0C:16:5E:85:A4:72:0B:FE:00:3C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/hDdkTFEhm5eMPwwWXoWkcgv-ADw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:01:73:1a:15:68:18:e2:66:64:c0:54:77:d3:b0:b0:52:22:
         fe:2d:d4:b1:2e:8a:f4:4a:c7:ac:a0:8c:ec:f3:f6:cf:55:29:
         1e:99:a6:94:1b:67:c1:83:ab:e1:c2:c3:31:0e:eb:ee:8e:63:
         55:62:f0:b4:01:63:22:3c:9d:65:24:16:57:b8:63:18:78:cc:
         f9:6a:94:3a:af:a6:05:5a:6b:95:f3:15:5f:e7:33:ee:ed:79:
         2f:0f:de:cc:ee:11:08:28:7c:2a:73:49:4d:68:e9:26:8a:d3:
         4b:7c:09:26:db:d6:a0:e2:b3:e8:5e:fc:1d:76:5e:ee:0e:de:
         09:3a:3d:dd:a8:65:8f:59:11:f0:3b:11:cb:b3:87:8b:cb:dc:
         27:be:b2:00:4e:17:7e:bb:e8:2e:fe:f3:00:31:05:62:54:cc:
         dc:08:23:12:62:77:8b:a3:79:bb:5d:d6:f3:55:bd:8a:e8:f0:
         b6:15:da:c9:1e:f6:ea:dd:ab:3b:6a:d1:13:98:08:7b:12:9c:
         ce:b8:c2:8e:a0:af:88:82:fc:9d:3b:36:79:74:2c:08:2c:49:
         e6:65:3c:d2:a5:33:03:4d:c3:33:5c:1a:6f:3d:bd:8c:f0:01:
         ad:24:38:61:3d:b5:73:7e:49:10:49:f2:a8:9e:c0:36:55:48:
         53:0e:1b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org