Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/w4OSuKKwfpLXRVItOm4K50j2dLY.roa
File:                     w4OSuKKwfpLXRVItOm4K50j2dLY.roa (raw, json)
Hash identifier:          1ZOdNblYVc5xUrmMiV1U4FRK6Qxfo9aYadrjIXbQlp8=
Subject key identifier:   C3:83:92:B8:A2:B0:7E:92:D7:45:52:2D:3A:6E:0A:E7:48:F6:74:B6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0274
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/w4OSuKKwfpLXRVItOm4K50j2dLY.roa
Signing time:             Fri 31 May 2024 01:37:45 +0000
ROA not before:           Fri 31 May 2024 01:37:45 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        110.2.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:37:45 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=C38392B8A2B07E92D745522D3A6E0AE748F674B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:45:94:a4:dd:0a:4b:f0:fd:dc:1a:37:b5:23:
                    56:f5:bf:76:0d:c5:93:72:e2:97:ad:1d:d5:11:b8:
                    c4:66:4e:0d:32:2f:74:14:fd:f0:af:1a:e6:c6:28:
                    c0:b6:44:e7:fd:3a:27:c8:da:a9:14:57:fb:66:cf:
                    9b:c5:02:7c:43:49:38:04:11:95:59:59:3e:df:aa:
                    a7:d7:42:53:04:41:43:9b:c8:b0:a9:4f:c5:8e:40:
                    99:84:d6:50:90:92:28:15:ed:37:7d:98:d4:86:9a:
                    ee:f1:97:ce:0d:36:e3:25:fd:e7:9e:2d:e6:6a:ae:
                    e0:a1:e2:6e:bf:82:7c:9c:45:1c:b2:91:12:a5:b1:
                    10:e4:be:1e:b2:a5:0f:46:a3:8b:fc:ec:53:1d:dd:
                    81:e0:1e:90:e0:b5:e3:77:72:76:d2:5f:60:6c:fc:
                    2f:05:e7:2f:c9:44:1c:49:2e:4b:c4:93:14:ff:04:
                    30:55:a3:3d:77:f7:7a:c2:55:30:3a:d8:c8:72:a4:
                    5e:7e:72:0c:0c:92:a7:7d:5a:59:9c:cf:03:9c:1a:
                    38:1b:94:a4:64:3a:5e:d1:9a:ea:84:7c:a7:97:50:
                    5f:6b:a1:98:95:f8:d8:25:99:e0:9c:76:4a:34:77:
                    e9:df:1c:8d:b9:8f:a9:bc:22:77:dc:35:85:99:1b:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:83:92:B8:A2:B0:7E:92:D7:45:52:2D:3A:6E:0A:E7:48:F6:74:B6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/w4OSuKKwfpLXRVItOm4K50j2dLY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.2.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         56:52:76:60:6b:c7:fe:67:71:80:73:36:dc:9e:a2:da:e9:9a:
         60:b0:4a:48:f6:4f:4d:dc:55:94:dd:f6:63:36:12:fb:ea:76:
         9f:f9:67:f2:52:68:bc:15:d4:d9:37:68:6c:e1:55:17:ec:10:
         4a:e7:bd:9c:87:1f:5d:aa:f6:69:ef:84:ad:64:ab:8f:ac:92:
         8a:18:32:fc:3d:8c:8b:4c:10:73:da:33:45:aa:8c:c1:fd:a8:
         04:70:e3:2d:15:91:7d:2a:69:fb:d3:cd:65:d9:42:f6:4e:84:
         35:8f:e5:73:8f:74:d1:26:cf:4c:58:32:ef:a4:5a:68:5b:97:
         88:bf:2e:e8:35:4c:34:1c:f6:78:2c:a8:1f:94:c7:29:98:32:
         c1:21:68:79:a9:ba:57:49:8d:13:3f:17:2f:6f:9a:82:fe:60:
         a8:57:c9:20:e6:ab:5f:e1:9d:2f:18:d6:3d:5d:99:83:fb:bb:
         34:36:82:50:7a:3d:e5:9e:4a:71:0b:0f:f7:fb:62:eb:48:9f:
         0e:c4:8e:81:9e:47:ce:c6:fb:c7:17:dd:bc:1c:88:75:ff:70:
         a5:5c:07:ce:d1:08:e2:7e:09:b5:11:f4:01:f1:9e:c6:f2:90:
         60:e4:9b:94:1f:43:ac:a9:5e:b9:9d:78:c6:84:a2:11:f2:4f:
         fe:27:4a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org