Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/DVBDliGvCKiBaEVkvYvzYgYuOWw.roa
File:                     DVBDliGvCKiBaEVkvYvzYgYuOWw.roa (raw, json)
Hash identifier:          EguRS1f7i0MR5Ci7ihjV1zTVmFolERIaSXws2Q5VK70=
Subject key identifier:   0D:50:43:96:21:AF:08:A8:81:68:45:64:BD:8B:F3:62:06:2E:39:6C
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       BD
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/DVBDliGvCKiBaEVkvYvzYgYuOWw.roa
Signing time:             Sun 30 Jun 2024 01:28:42 +0000
ROA not before:           Sun 30 Jun 2024 01:28:42 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     19905
IP address blocks:        203.129.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Jun 30 01:28:42 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=0D50439621AF08A881684564BD8BF362062E396C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:e8:81:38:9f:3e:72:74:bc:e4:1d:6b:a5:
                    9d:4a:f2:dd:96:55:92:3a:47:21:ef:43:98:f6:2a:
                    51:dc:39:19:7e:2a:d9:44:58:d8:a6:c8:20:61:9a:
                    82:66:d2:d7:a3:1f:8a:63:cc:2c:53:73:f7:e9:a6:
                    0b:d1:e9:ea:06:4d:59:79:fb:5c:6b:18:a9:f2:6b:
                    93:11:68:61:6d:5c:46:d2:91:42:7a:c4:26:5c:18:
                    8a:b9:ed:a0:80:c9:0b:ab:0d:c8:64:9a:9a:06:3f:
                    35:a3:d5:87:b6:47:14:69:1d:0b:34:9e:4b:d8:cd:
                    04:7b:55:bf:16:e0:3e:eb:65:fa:8f:7a:9c:c9:08:
                    1b:2c:8b:0e:b5:ec:d6:5c:ee:ff:e9:ee:8e:55:19:
                    ea:c7:38:f3:14:a7:9c:5a:2e:d5:6e:83:3c:f4:1f:
                    44:c4:93:99:4c:03:6d:da:43:21:4d:28:64:5b:30:
                    d9:33:67:47:18:d3:9f:69:52:7d:f1:7e:f0:0e:d5:
                    f8:3b:8f:94:43:8e:77:62:e1:74:70:c4:f3:74:0e:
                    64:68:e9:66:ae:9a:cc:32:88:11:bd:90:13:2f:f4:
                    6a:85:6b:51:f6:95:c4:74:73:6a:3b:ea:17:02:cf:
                    50:5d:9f:e2:71:87:b2:ca:ca:d6:43:36:17:22:81:
                    04:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:50:43:96:21:AF:08:A8:81:68:45:64:BD:8B:F3:62:06:2E:39:6C
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/DVBDliGvCKiBaEVkvYvzYgYuOWw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.129.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:d4:f0:85:fd:33:0c:1f:5c:90:a1:4e:2d:1b:a7:d9:71:ba:
         84:c7:ea:53:d1:67:aa:a7:eb:b8:71:b5:dc:ec:d3:e8:7a:fd:
         5f:f6:bd:d8:a7:6a:50:8d:e3:44:f3:48:58:04:d0:ec:3b:ee:
         bf:90:72:01:0d:42:c2:81:1e:fb:73:fa:d4:8e:96:6c:90:fb:
         fc:6a:c2:c5:57:a4:ef:fa:1a:78:2d:83:cd:59:90:cc:98:2e:
         dc:2c:e6:23:16:7c:0d:ce:dd:d1:69:e0:df:61:8f:5d:c4:b3:
         ee:ec:cf:3c:c6:6b:aa:ee:00:76:ab:a1:d6:c6:e6:a8:59:fa:
         aa:c3:19:37:7b:f4:62:da:0a:df:6a:ce:e8:dd:4c:97:7e:50:
         24:84:78:38:ef:08:67:3c:00:21:cf:a4:9a:4d:d9:b1:ad:d3:
         1c:36:e7:0c:73:61:0d:3f:72:f9:a8:f4:50:de:1c:86:aa:78:
         2d:d3:05:c3:d3:c6:85:46:f2:db:11:d5:43:ab:82:7a:80:57:
         3b:d0:62:3a:bc:66:8b:47:6e:d5:ce:48:44:61:76:38:ab:3f:
         19:a5:70:33:ed:28:10:f8:10:ca:8e:6c:70:9d:b5:b5:4b:d5:
         9c:2c:eb:a2:0f:c3:5f:df:59:ec:db:46:09:d4:cd:42:a9:42:
         86:b5:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:16 2024 by rpki-client on console-fra.rpki-client.org