Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/vknpWElatLVZUXvuKa0eEwh4cF8.roa
File:                     vknpWElatLVZUXvuKa0eEwh4cF8.roa (raw, json)
Hash identifier:          Ls8hYqPaPTgyMbw34kB6Kjli6PcIdYEIjlGYbLxeFAQ=
Subject key identifier:   BE:49:E9:58:49:5A:B4:B5:59:51:7B:EE:29:AD:1E:13:08:78:70:5F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02CE
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vknpWElatLVZUXvuKa0eEwh4cF8.roa
Signing time:             Sun 30 Jun 2024 01:32:15 +0000
ROA not before:           Sun 30 Jun 2024 01:32:15 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     10013
IP address blocks:        180.131.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jun 30 01:32:15 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=BE49E958495AB4B559517BEE29AD1E130878705F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9f:96:c0:15:3f:51:dd:ad:94:b9:73:a9:a7:
                    e4:28:9d:a9:71:11:f1:ba:8a:fe:d1:03:58:ec:c7:
                    1c:bf:2f:9a:90:22:01:60:43:8a:38:c8:c0:8e:0f:
                    ae:39:3c:01:16:97:b2:77:e1:18:b5:5c:d6:a7:aa:
                    35:a9:06:d0:ad:03:16:e0:72:94:6a:74:cd:4f:36:
                    ee:b5:bc:70:b6:98:55:70:bf:5a:97:06:f9:f1:bc:
                    5f:35:ee:fe:4b:9c:0f:15:0f:4c:f5:c4:97:28:9a:
                    64:b7:aa:9d:d6:75:6b:0a:1a:39:80:1e:a0:a0:ec:
                    92:c6:42:b8:85:21:b7:a6:5d:04:91:51:69:44:a3:
                    86:a8:08:af:f9:0d:cf:3f:3d:2c:d6:11:02:3a:50:
                    ae:5c:c8:fa:b5:97:55:d4:8e:af:fa:47:03:58:da:
                    e7:e5:38:fa:01:ad:40:fd:62:2b:55:f0:19:79:68:
                    80:8f:47:76:a3:40:50:33:c2:2f:4d:cf:35:31:cc:
                    37:d5:0c:0e:f2:a5:7a:77:95:45:bd:ae:35:0f:6d:
                    57:9d:25:f1:c7:60:c5:16:9d:23:ea:23:2a:68:c0:
                    1b:10:a2:16:64:6b:94:7c:71:d2:82:bb:91:9b:6a:
                    c3:10:8c:05:58:c3:fa:b4:42:db:ea:a1:25:cc:7c:
                    03:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:49:E9:58:49:5A:B4:B5:59:51:7B:EE:29:AD:1E:13:08:78:70:5F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vknpWElatLVZUXvuKa0eEwh4cF8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:0d:02:df:24:8d:5b:47:23:96:c2:a7:34:65:7f:95:16:19:
         ae:13:ba:ee:f2:6b:c8:b0:e2:f3:cc:9a:57:27:be:aa:63:5d:
         3c:d1:71:72:16:60:8f:fe:c7:d3:e8:1e:94:c1:2f:6d:63:31:
         8e:eb:26:ad:d6:33:04:e3:48:17:40:9b:62:ee:3d:c8:19:51:
         11:5e:f8:4e:1d:c2:ae:0f:bc:10:bb:13:27:c6:6d:9a:89:8d:
         9f:d3:09:9c:7e:ba:fc:ec:46:51:2f:aa:94:33:6e:eb:c9:87:
         ef:c0:e7:6f:8f:31:9d:31:d2:f2:a2:b2:38:3e:3b:e9:67:cf:
         83:93:9c:92:56:6c:a5:3f:17:ed:99:09:ab:b4:ac:c7:c1:19:
         5a:a4:a7:97:30:90:33:4d:39:0d:bb:ac:dc:df:75:ac:dd:58:
         d4:80:d0:7d:40:3f:1e:cc:2c:e4:70:ee:1f:48:89:da:e0:cc:
         b1:c5:ec:fa:a7:52:2c:c7:60:ad:79:e6:2f:82:a5:4b:dd:04:
         38:f9:1d:0e:2e:2f:5e:92:b0:41:24:3b:67:9e:9f:d0:e5:f1:
         cc:07:9c:6d:a2:84:2e:f8:3a:ef:66:c5:00:9e:1c:da:73:69:
         7a:bd:8d:d3:dc:c0:2d:54:45:d2:29:f4:cf:11:a2:dc:29:38:
         ba:0f:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org