Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/kxjKMNsfU8SIeQXzNNcPkT70G3o.roa
File:                     kxjKMNsfU8SIeQXzNNcPkT70G3o.roa (raw, json)
Hash identifier:          6QrV6LQKxp/9TuTpDxz+JGrfM1hCLy0NWrCV5V+iapc=
Subject key identifier:   93:18:CA:30:DB:1F:53:C4:88:79:05:F3:34:D7:0F:91:3E:F4:1B:7A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02A3
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kxjKMNsfU8SIeQXzNNcPkT70G3o.roa
Signing time:             Fri 31 May 2024 01:41:33 +0000
ROA not before:           Fri 31 May 2024 01:41:33 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        122.145.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:41:33 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=9318CA30DB1F53C4887905F334D70F913EF41B7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:eb:12:a6:de:12:46:8a:33:5b:4e:a7:da:cb:
                    b5:f3:77:29:58:e6:60:47:91:60:3e:ec:d4:22:c9:
                    29:77:5e:d4:96:25:4b:25:d1:81:fe:ac:12:ce:d5:
                    fe:87:f0:af:a5:95:d7:b1:ed:32:68:72:46:4c:d4:
                    aa:76:34:ff:13:32:44:88:cc:5d:01:c3:a2:d5:13:
                    8f:06:51:1c:ca:7c:01:df:86:3a:d6:d5:51:7b:aa:
                    10:b4:11:e3:16:c8:1c:03:fe:e7:d2:27:df:7e:1c:
                    03:69:1c:68:e3:92:ec:c7:08:3b:38:c7:82:b1:9d:
                    7d:82:f0:7f:0c:56:c5:c7:2c:84:a9:4e:5e:8e:e5:
                    b3:b3:a4:15:73:ad:d7:bd:ba:39:e3:68:c4:ff:64:
                    d6:a0:36:91:25:ed:67:56:18:a3:30:ee:48:66:35:
                    eb:5f:5f:7a:36:7a:4a:f2:58:b2:ae:e1:35:77:e0:
                    cd:9c:94:19:4e:15:94:36:3e:c0:a9:75:44:f2:ca:
                    21:9f:15:89:4c:e1:2b:1e:75:a8:ad:0e:fc:51:d1:
                    51:9b:7e:3a:0b:9e:bf:c4:a3:95:8e:40:94:db:e0:
                    f7:6d:98:3e:2f:2f:ed:05:3e:67:39:1a:56:30:c1:
                    ba:24:be:ca:c6:5a:36:66:ae:8a:67:e2:4d:57:97:
                    d8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:18:CA:30:DB:1F:53:C4:88:79:05:F3:34:D7:0F:91:3E:F4:1B:7A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kxjKMNsfU8SIeQXzNNcPkT70G3o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:be:66:fc:b6:57:03:ad:0d:c3:df:6c:fc:29:31:59:77:d3:
         9c:e7:94:78:12:fd:fc:3f:0d:2a:a1:d5:42:32:5f:89:d6:ef:
         e4:1f:12:66:02:af:c0:b0:66:56:84:18:2b:77:10:a1:b7:8d:
         d1:a2:67:8b:cf:27:8f:03:80:c7:c5:8c:97:8a:fd:7a:0d:24:
         f3:e5:da:05:2a:e2:c3:95:47:95:33:bb:5f:f6:a5:f2:41:41:
         3b:ee:96:59:d6:69:02:fb:64:ea:45:d2:12:16:c4:ee:61:5a:
         ce:cc:5f:4a:8a:f6:45:42:fc:01:d6:25:0e:f9:39:59:e1:f5:
         14:d2:c7:91:68:2b:63:ed:3f:cf:5d:fa:9d:5c:67:3f:49:81:
         83:5a:06:ca:37:43:e5:09:b7:88:17:16:67:a4:57:08:c7:65:
         9d:e3:99:65:b7:bc:df:3a:9c:d3:36:bc:1c:76:97:ac:07:f3:
         65:6b:19:1b:13:c2:b9:4d:d6:db:7b:17:fb:9a:0c:93:c8:43:
         79:cd:e8:9c:17:5c:20:be:67:a5:09:03:1d:b5:d5:b7:df:2e:
         af:ab:ae:fe:c5:dd:f1:c1:b1:2a:2c:88:73:4b:6f:61:00:cd:
         21:82:27:9a:ea:88:5a:8f:0f:47:0c:fd:df:b8:f7:fa:8c:1c:
         49:3d:fc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org