Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/oRxy7gEYr6M88WdeyKMrfV5SfYQ.roa
File:                     oRxy7gEYr6M88WdeyKMrfV5SfYQ.roa (raw, json)
Hash identifier:          b0vXQQRaZmHILeDZ1cHlWUPOO6kSedxpjj9oGQnHWPA=
Subject key identifier:   A1:1C:72:EE:01:18:AF:A3:3C:F1:67:5E:C8:A3:2B:7D:5E:52:7D:84
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02C0
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/oRxy7gEYr6M88WdeyKMrfV5SfYQ.roa
Signing time:             Fri 31 May 2024 01:41:47 +0000
ROA not before:           Fri 31 May 2024 01:41:47 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        210.159.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704 (0x2c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:41:47 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=A11C72EE0118AFA33CF1675EC8A32B7D5E527D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7d:60:2b:ff:88:28:5b:23:bd:f5:7c:da:21:
                    2a:6c:63:4d:db:75:17:6d:5f:dc:85:12:4e:e4:45:
                    fc:5f:84:77:30:ce:73:20:67:1c:3e:e1:ca:45:99:
                    6c:0a:b3:46:ad:f1:39:a0:b3:06:5c:7d:72:98:0f:
                    c8:9a:7a:ff:16:3e:76:76:dd:ba:a9:7d:48:71:25:
                    2e:58:f1:8b:5a:4f:0e:de:de:7a:d2:81:d5:d6:10:
                    c1:ea:e0:0c:85:b5:66:28:c5:c2:63:75:72:34:4c:
                    ed:e5:0c:3b:e0:2c:81:46:d2:92:7b:49:ba:24:f0:
                    06:6f:75:0e:63:22:80:63:da:2f:b6:c6:30:34:01:
                    9f:6e:e9:0f:d6:64:12:dc:59:8c:06:f7:68:71:c4:
                    0c:16:c6:e5:54:4c:b4:51:0c:5a:70:4e:35:4d:f2:
                    58:8a:5a:41:9b:28:5e:26:47:85:4c:04:07:f1:79:
                    3b:45:d4:16:89:5b:8c:34:da:5c:b5:2b:52:75:f7:
                    2e:e1:1a:ed:f3:41:36:f5:82:1a:c6:8a:71:af:e6:
                    99:77:37:b7:39:6a:d8:69:7f:9e:85:81:79:15:ca:
                    b1:4e:ad:33:cd:f7:72:83:c6:cc:e9:4d:00:7d:ba:
                    33:0d:4c:ba:74:b5:c5:49:72:e4:34:18:a4:c2:1a:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1C:72:EE:01:18:AF:A3:3C:F1:67:5E:C8:A3:2B:7D:5E:52:7D:84
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/oRxy7gEYr6M88WdeyKMrfV5SfYQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:83:ee:6d:6b:df:dc:8f:19:dc:c0:bc:fb:00:40:0c:54:36:
         49:a6:c0:de:55:80:99:52:c2:87:2f:f8:1b:39:eb:f9:8c:1f:
         8c:da:d7:6c:a9:f1:0f:ca:6a:8d:20:46:5e:1a:1e:20:28:d9:
         7e:33:f6:fb:d6:0f:8c:b1:72:6f:b5:c4:58:56:fe:50:2f:c7:
         d4:f7:d3:28:36:70:4d:ca:26:0f:a3:50:7d:df:1b:bf:08:35:
         09:50:37:a7:ae:c3:97:66:74:d2:ca:9e:6a:80:29:22:d5:1c:
         e2:21:0a:41:e3:62:01:37:a0:8e:68:c2:61:0c:c5:7e:77:29:
         56:d6:5f:3f:e8:63:9f:f0:f3:dc:84:31:a1:09:72:8c:ac:1b:
         5a:36:b0:d8:33:c0:f8:5c:a1:f6:c8:20:6b:a1:95:2d:b0:48:
         4d:18:80:db:48:95:c9:4a:f9:f5:b3:d7:a8:69:51:6d:49:ea:
         2c:78:01:58:a4:65:10:cb:7f:79:ce:8a:2d:e1:27:9f:b7:84:
         50:b7:a8:13:25:fb:f8:93:0d:fb:79:76:9b:ff:2a:80:92:4d:
         f8:fa:c5:09:b9:e0:9a:53:b8:be:1b:fe:99:88:22:63:74:d3:
         f1:2e:49:fb:8d:1e:67:38:50:53:58:13:3c:4b:59:8d:ab:0a:
         c5:fa:87:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org