Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/xAdAnymnDiuCKbKqw-5d8BPMuKc.roa
File:                     xAdAnymnDiuCKbKqw-5d8BPMuKc.roa (raw, json)
Hash identifier:          gkoA6syzPqzYgHOParEEOZ7DiSVTwwSlZWPKgdiORjA=
Subject key identifier:   C4:07:40:9F:29:A7:0E:2B:82:29:B2:AA:C3:EE:5D:F0:13:CC:B8:A7
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       024F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xAdAnymnDiuCKbKqw-5d8BPMuKc.roa
Signing time:             Fri 31 May 2024 01:35:36 +0000
ROA not before:           Fri 31 May 2024 01:35:36 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        36.53.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:35:36 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=C407409F29A70E2B8229B2AAC3EE5DF013CCB8A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:58:40:56:9d:23:ab:3b:b8:21:3f:11:f0:
                    76:67:7d:64:7b:94:ed:56:08:9f:2c:3f:66:13:95:
                    fd:ae:f9:35:c1:d2:b1:9e:28:75:2a:06:8c:03:ac:
                    20:bc:82:36:9c:f2:2e:e6:cd:9b:a3:40:08:1a:48:
                    a9:95:9e:11:37:19:86:6a:c6:2b:8a:b7:97:53:a5:
                    2a:bc:25:22:89:21:02:ba:31:aa:ee:eb:13:21:b2:
                    64:84:27:9b:1a:7c:ca:13:40:fe:f3:a9:af:ba:9f:
                    6f:61:eb:c5:fc:49:a9:fb:b0:c2:be:48:1c:12:a0:
                    ea:29:45:0e:3d:94:26:a4:f1:86:ba:9f:67:09:a8:
                    fd:bc:e5:8c:11:01:a7:85:34:56:62:26:32:a5:2d:
                    fc:d3:a3:0d:cc:3d:b8:8a:e0:29:d0:1a:84:78:57:
                    af:f7:21:e7:bc:f9:85:0f:61:29:b8:0b:a1:6d:23:
                    9b:7f:e3:1e:de:e9:86:d7:62:45:9f:63:a1:90:3b:
                    d6:dd:eb:43:f2:16:06:d0:9e:5e:64:74:83:d8:fb:
                    6d:4b:53:52:ce:a1:5a:9c:57:ba:c3:ac:f4:03:07:
                    04:71:e1:da:41:c8:00:c9:9f:48:24:2e:d6:a5:11:
                    46:bf:44:a8:bf:e5:cc:04:88:98:65:e3:d6:aa:41:
                    8e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:07:40:9F:29:A7:0E:2B:82:29:B2:AA:C3:EE:5D:F0:13:CC:B8:A7
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xAdAnymnDiuCKbKqw-5d8BPMuKc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.53.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         34:04:d1:02:e6:1a:b4:53:97:55:c9:f2:67:2f:43:d2:1e:11:
         15:14:04:c3:a9:0b:f9:02:51:2b:69:c5:89:e1:f3:11:8e:f9:
         87:05:b9:ee:01:19:a3:b9:58:cc:68:6e:3b:13:3d:3a:ff:30:
         4f:6f:40:98:3e:6b:c5:be:51:b3:2d:3f:a5:41:69:85:67:53:
         a3:fc:42:f7:69:03:9e:6f:db:f0:43:80:3f:4f:44:22:42:d0:
         43:05:77:bb:db:1a:bc:a1:4c:42:68:36:16:a3:b3:78:ba:5c:
         c5:29:3a:5e:9c:8b:21:4c:a4:f2:52:6b:d8:de:2a:5b:89:d5:
         8f:04:e2:98:4a:90:1f:cb:b7:03:c0:0f:12:cd:04:10:19:bc:
         ff:fe:25:15:b3:0c:7b:3b:1a:a5:54:7c:1c:aa:8f:1d:67:4a:
         90:38:17:bd:1f:7b:8c:3f:35:7f:f3:e4:9a:40:e6:0d:f4:e4:
         5f:32:57:8d:ca:ad:a1:d1:3b:28:dc:ea:c2:b4:d6:b5:01:87:
         bf:c3:e9:61:bf:5a:e8:32:4f:43:e6:8e:34:50:6a:8a:0b:37:
         06:9f:8c:b6:b6:ec:c3:98:d5:be:91:07:25:db:7a:a4:07:d3:
         72:fc:95:d9:03:9f:45:a6:3b:fa:86:cd:ee:3e:84:36:1b:e6:
         af:c9:3e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org