Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/iRR4E4qlXg2kfhoBFso7B21m76Y.roa
File:                     iRR4E4qlXg2kfhoBFso7B21m76Y.roa (raw, json)
Hash identifier:          QQ2Ve786od0tG3bq36uXGoEBrUPg1Ox4GH2625RT8F4=
Subject key identifier:   89:14:78:13:8A:A5:5E:0D:A4:7E:1A:01:16:CA:3B:07:6D:66:EF:A6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0291
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/iRR4E4qlXg2kfhoBFso7B21m76Y.roa
Signing time:             Fri 31 May 2024 01:39:43 +0000
ROA not before:           Fri 31 May 2024 01:39:43 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        111.234.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:39:43 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=891478138AA55E0DA47E1A0116CA3B076D66EFA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:ed:a2:6d:2f:3c:d0:2d:c1:77:a3:36:9e:
                    8f:48:ba:eb:89:57:54:db:00:d6:74:ce:33:5a:21:
                    b4:46:1c:97:a3:1f:b0:13:b3:ad:12:dd:9e:fc:0a:
                    5e:5f:7d:3f:6c:8a:3c:1c:9c:61:bb:24:64:2a:d7:
                    14:c7:6e:2b:46:2d:e6:55:ea:2d:ad:77:bf:00:0b:
                    a4:24:7f:66:d2:86:82:6a:71:0c:ef:eb:a5:38:83:
                    5e:4a:9d:50:ba:ff:25:41:0a:88:0b:48:9a:66:1a:
                    f9:52:a5:3a:f2:c1:f0:95:01:b9:70:0d:2a:be:93:
                    b3:d4:0a:dc:54:1e:3b:65:18:9d:65:6f:b6:11:a8:
                    45:b0:19:60:15:a9:31:39:ff:a1:c8:08:dd:a4:86:
                    40:30:5a:c0:1e:60:8a:c7:f6:56:7f:ff:40:87:ae:
                    bf:fa:e9:3f:7f:63:30:1a:68:db:23:01:4e:74:aa:
                    a0:2a:cf:c3:f5:d6:65:7f:ee:cc:c8:ff:f5:7f:a7:
                    2c:a6:72:9c:ac:78:eb:ef:0d:91:3b:bb:d3:96:d2:
                    d8:7a:77:4c:6b:46:6a:a6:d0:5f:3c:3f:e6:f0:55:
                    68:57:cf:f2:7e:bb:dd:6e:c5:ce:5b:87:c0:e2:4d:
                    3d:2d:10:3d:6a:c5:08:cc:fb:7e:55:80:a0:14:b6:
                    21:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:14:78:13:8A:A5:5E:0D:A4:7E:1A:01:16:CA:3B:07:6D:66:EF:A6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/iRR4E4qlXg2kfhoBFso7B21m76Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:d3:88:3c:c6:6d:88:d1:2e:ed:15:c5:1a:d5:ab:86:59:7b:
         d9:2d:a3:c4:85:ab:40:58:91:0b:8f:82:19:d3:af:5e:6b:e9:
         4a:0f:b2:ce:df:68:b7:bf:02:13:fe:e9:f2:f9:b9:68:23:db:
         36:55:b9:b6:b4:92:77:25:69:98:a8:e6:17:af:1f:1f:09:8c:
         1a:00:1b:c4:ea:f2:24:9b:5b:eb:85:27:38:68:81:1e:c2:1e:
         0f:e0:a6:8c:fa:b1:a9:39:b5:2c:6d:50:3c:3e:44:3e:f9:19:
         4a:3e:b6:8f:b5:2d:88:47:a4:7a:05:07:ec:55:c8:27:5a:31:
         2a:1f:3f:56:76:c9:77:e8:73:7a:24:82:d8:4e:0b:4f:34:67:
         1f:d1:ab:ac:9c:79:6b:4d:a7:12:4f:e4:95:ee:5e:08:62:c0:
         6b:f0:2e:23:cc:d2:b6:85:6e:ff:55:9a:9b:6a:dc:cf:f5:fe:
         1c:ae:de:37:3f:c2:de:7d:6c:27:3b:15:85:49:97:c6:3e:04:
         a9:af:8e:66:85:6b:52:fe:08:8f:df:5e:20:23:77:37:cb:c1:
         83:1c:bb:e3:63:e2:2c:60:76:ca:8b:ff:20:a0:a5:51:07:35:
         81:13:08:5b:31:6a:4e:d2:fc:3d:f2:6a:0e:30:33:ed:6e:53:
         46:bf:b8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org