Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/o698D1hM0Tpd0GM1pWG-n465q7Y.roa
File:                     o698D1hM0Tpd0GM1pWG-n465q7Y.roa (raw, json)
Hash identifier:          FqhlCLbv1h8gcaI7Q8KfEFx7dYH4NgC+WB0TtVdPWDA=
Subject key identifier:   A3:AF:7C:0F:58:4C:D1:3A:5D:D0:63:35:A5:61:BE:9F:8E:B9:AB:B6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02BA
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/o698D1hM0Tpd0GM1pWG-n465q7Y.roa
Signing time:             Fri 31 May 2024 01:41:45 +0000
ROA not before:           Fri 31 May 2024 01:41:45 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        182.236.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698 (0x2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:41:45 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=A3AF7C0F584CD13A5DD06335A561BE9F8EB9ABB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:b6:b8:57:1d:a0:44:e3:9b:70:36:fd:47:
                    46:f3:7b:12:70:fe:93:ff:6f:f8:e1:cc:fd:d1:fc:
                    d5:04:4b:84:65:ac:ae:05:24:0d:ba:e4:c4:e9:e5:
                    8a:11:9c:f2:ab:ec:ae:99:60:e7:8e:99:69:2d:6b:
                    2a:3c:3c:9e:b6:20:4d:14:3e:3f:42:8a:c8:05:39:
                    58:dc:97:a3:ef:d1:9e:f5:8b:47:b1:37:2d:53:ef:
                    95:0c:9c:46:5a:c0:18:52:33:cc:05:b4:bf:9b:5a:
                    d5:f1:93:c0:5b:e4:37:60:83:5d:fd:93:4f:33:4e:
                    f8:94:db:dd:1d:0c:23:f7:8e:1b:5c:13:d3:ee:7c:
                    71:79:33:9b:76:49:08:2f:2f:df:66:d3:75:0e:dc:
                    fc:6e:76:3f:b0:1c:c0:97:ef:9b:56:46:65:49:55:
                    2f:f9:d4:86:90:31:dd:22:6d:ce:68:ee:3f:7d:64:
                    7f:47:a1:7a:27:74:99:c5:75:cd:7d:8d:3f:80:af:
                    3a:c6:0f:f7:e9:82:a1:44:8a:2d:08:6b:f2:be:d9:
                    90:cd:01:85:08:9f:5f:2a:89:d3:02:0a:23:04:93:
                    04:98:cc:da:88:16:47:16:d3:94:f7:89:0e:ab:94:
                    8f:22:ff:58:c4:18:58:67:98:34:b1:0c:2a:14:2f:
                    28:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AF:7C:0F:58:4C:D1:3A:5D:D0:63:35:A5:61:BE:9F:8E:B9:AB:B6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/o698D1hM0Tpd0GM1pWG-n465q7Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:32:c8:3a:15:d8:99:af:f2:a6:ce:c5:8f:0f:71:03:16:12:
         12:35:6c:64:5b:28:8a:24:62:92:96:44:32:4e:bf:a5:6c:d1:
         19:33:dc:3e:6e:33:2c:43:cc:53:7b:42:dd:8a:9a:94:6f:7d:
         80:19:d9:67:ea:ab:41:5b:f7:fe:5f:f8:d2:3d:81:ed:1c:33:
         b0:47:2b:a6:39:e6:70:83:5c:7f:ec:40:1b:5f:cc:09:c0:90:
         57:53:ac:05:28:df:be:05:c2:08:2e:f3:14:2f:7a:60:2b:ab:
         01:17:f4:50:83:d5:44:8c:c0:9f:dd:22:d8:ea:8c:59:cb:f0:
         f3:51:37:5f:bc:99:0d:49:74:fa:87:33:c8:b7:14:ee:c7:e0:
         7b:84:9e:f0:a5:e5:5a:90:35:38:c1:e0:a5:9f:51:db:da:d2:
         7a:69:3e:ea:ad:a1:9c:f9:81:d3:90:ef:80:fa:5d:ba:a3:5e:
         ab:a5:f8:0f:0d:c1:78:00:2b:3c:49:e2:be:63:67:48:7d:d3:
         95:65:91:a5:fc:36:90:65:a3:a1:0c:10:a3:87:52:1d:f9:c1:
         5f:9d:5c:62:8f:7d:26:5b:e3:26:d9:dd:aa:f3:16:85:ba:eb:
         27:d4:42:52:18:cd:2b:05:fe:59:75:75:a3:6c:11:17:fb:a7:
         ae:f6:91:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org