Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/m42DhqTpzi0XG63tDdQ1s5fthJA.roa
File:                     m42DhqTpzi0XG63tDdQ1s5fthJA.roa (raw, json)
Hash identifier:          tEkIFGJb/XJUcv1vvNmwSkGAt9EhyUynSg29cM3rxHc=
Subject key identifier:   9B:8D:83:86:A4:E9:CE:2D:17:1B:AD:ED:0D:D4:35:B3:97:ED:84:90
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       029A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/m42DhqTpzi0XG63tDdQ1s5fthJA.roa
Signing time:             Fri 31 May 2024 01:39:47 +0000
ROA not before:           Fri 31 May 2024 01:39:47 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        113.213.242.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:39:47 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=9B8D8386A4E9CE2D171BADED0DD435B397ED8490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f8:43:20:71:c4:2e:8b:2d:5b:af:e7:50:17:
                    43:5b:6c:af:5e:07:0e:13:79:75:47:d2:6b:44:74:
                    ae:88:06:c7:ec:cf:8b:ab:e2:15:92:dc:62:a0:38:
                    76:86:e1:11:9d:42:bf:a5:51:47:10:0d:c1:a5:87:
                    ff:b0:39:bb:07:03:73:07:a5:2c:a2:7f:2e:5b:47:
                    31:a4:d5:29:b1:42:e6:6d:5c:d7:82:3d:f4:5c:0b:
                    f1:6c:bf:a1:75:17:b7:43:4d:5e:ea:b4:09:f3:f7:
                    09:f3:6c:82:5d:81:da:9a:df:fb:b8:12:cb:3e:8a:
                    09:e1:e0:b1:ca:89:4f:9c:81:83:4a:d4:05:63:bd:
                    a6:ae:39:c2:b5:44:c2:9b:25:59:36:72:12:d3:79:
                    89:36:07:47:69:28:c5:a3:91:76:21:80:8e:8f:6f:
                    7f:74:24:72:d2:4c:41:8a:fd:f8:a4:a0:e6:41:d8:
                    3a:4e:a9:b1:95:0c:2c:70:f8:20:88:bb:3b:d6:7c:
                    2e:cd:54:74:62:9e:1a:1c:68:d3:60:b8:dc:35:25:
                    f2:42:b3:e3:37:3c:74:53:46:86:a6:f2:d1:74:6a:
                    25:87:ce:1c:36:ee:ce:b6:72:62:12:03:4a:9e:59:
                    1b:e7:ba:22:40:d0:71:d5:00:9b:0a:1c:a0:08:42:
                    ac:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8D:83:86:A4:E9:CE:2D:17:1B:AD:ED:0D:D4:35:B3:97:ED:84:90
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/m42DhqTpzi0XG63tDdQ1s5fthJA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.213.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:98:a5:bc:fa:d8:9d:9a:f2:01:0f:e8:30:a1:da:dd:7c:e5:
         e9:72:96:c6:c3:21:d8:b5:17:00:85:0f:ba:7e:90:c0:5a:37:
         bd:fb:ed:19:21:ea:36:38:92:54:8b:be:9a:5e:2d:90:0e:2a:
         0a:77:04:98:92:ac:53:10:fd:37:ce:14:25:1a:b7:e5:80:f1:
         ea:6e:93:3e:9f:35:fc:e6:18:60:64:dc:2e:57:98:4d:a5:71:
         a7:93:49:b1:5e:38:4d:6d:4a:90:ae:20:53:67:6c:0e:0f:c4:
         5c:6e:c5:cd:5e:40:8b:92:d7:6e:70:07:e0:63:2b:35:45:83:
         26:bb:92:54:42:b5:9a:0b:8b:8f:d6:c2:98:2c:15:b0:d1:6a:
         d5:64:8c:83:10:e5:a2:34:e1:cd:8f:6e:82:3b:68:ad:f3:5b:
         37:6b:40:c0:5d:4e:5b:36:9a:5d:f9:b8:38:00:76:53:ac:62:
         e8:39:1d:8c:7b:ce:8a:72:9e:1e:5e:76:7a:85:23:a3:6a:b1:
         44:37:c3:03:ed:98:9a:c3:4c:40:2e:c4:b7:d1:e3:c3:4a:c3:
         cd:39:67:70:95:9e:46:e8:44:d2:3b:5a:14:95:cf:b1:67:49:
         d7:01:63:0e:9d:c6:5f:43:18:b3:5d:f3:76:a7:a6:90:a8:49:
         67:eb:0d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org