Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/0jznd90pm2RynQ_Y21iV5MU91CI.roa
File:                     0jznd90pm2RynQ_Y21iV5MU91CI.roa (raw, json)
Hash identifier:          a2Pdu6PG9LeFgAcAyFI5q2Gq8karsKhf8s+GoFdxy/A=
Subject key identifier:   D2:3C:E7:77:DD:29:9B:64:72:9D:0F:D8:DB:58:95:E4:C5:3D:D4:22
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0273
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/0jznd90pm2RynQ_Y21iV5MU91CI.roa
Signing time:             Fri 31 May 2024 01:37:45 +0000
ROA not before:           Fri 31 May 2024 01:37:45 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        110.0.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:37:45 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=D23CE777DD299B64729D0FD8DB5895E4C53DD422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c1:69:7b:ba:ed:49:c3:e6:14:3e:95:d5:ac:
                    b1:5b:39:df:15:d3:ef:86:1f:e4:25:6c:9f:cc:69:
                    c2:a9:76:65:c5:9d:68:cf:c7:18:1b:21:eb:6b:86:
                    b1:41:80:e4:4f:85:4f:69:43:5a:71:b5:d8:f2:15:
                    30:eb:83:0a:4c:5d:62:2a:19:b9:ee:2b:01:4a:bb:
                    36:ea:15:93:6f:67:43:d9:26:86:a0:bb:6d:f5:52:
                    34:de:67:43:d6:80:79:16:e0:b6:f8:4f:ad:67:71:
                    0e:41:9a:65:75:a2:00:ae:de:6c:8e:65:3b:01:fd:
                    6f:70:0c:f2:41:58:4d:db:2f:f9:64:1f:56:97:85:
                    78:42:17:1e:16:2c:bf:45:a9:68:5b:e4:f4:b8:26:
                    6d:2b:b3:aa:53:ac:2c:29:9b:e2:3d:b9:19:66:7a:
                    5d:db:21:55:bc:8c:a2:ba:4d:54:b0:05:ea:bd:e5:
                    23:73:a1:f4:bd:bb:c0:23:8c:3d:37:d8:8b:84:a0:
                    09:6b:52:c7:60:e9:8d:87:69:39:03:62:19:13:0d:
                    75:84:20:be:07:97:c9:91:33:3f:b3:9a:59:c9:ef:
                    0a:90:5b:54:eb:90:9f:04:13:7f:6d:3e:f2:99:f4:
                    75:41:94:70:25:30:a3:4b:35:22:af:a9:d0:11:d9:
                    98:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3C:E7:77:DD:29:9B:64:72:9D:0F:D8:DB:58:95:E4:C5:3D:D4:22
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/0jznd90pm2RynQ_Y21iV5MU91CI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.0.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         74:15:d3:87:83:d9:aa:05:d2:e4:b0:c4:12:7c:68:b3:b4:23:
         1a:e7:86:da:07:a6:e8:37:d5:d0:d8:d7:b1:49:0a:bd:8b:36:
         8c:93:d7:0a:cb:18:ce:e7:1a:79:4a:c6:6b:3e:de:5e:98:7f:
         9e:b5:0d:5e:7b:f9:01:41:d5:24:ea:be:f4:6b:9a:5d:ac:42:
         ed:8e:1b:df:7e:2c:ec:27:b1:4b:aa:28:a3:95:93:c6:97:9c:
         5e:14:d6:85:5f:b6:40:30:71:7c:da:db:7b:22:5f:34:84:57:
         cf:3c:15:46:ec:30:f6:8f:a9:8d:a1:2d:39:5a:fc:55:20:45:
         ca:c5:2b:74:6c:d0:13:9d:5f:9c:f8:e7:7d:5a:ed:76:b4:07:
         01:c9:92:d7:be:2d:36:16:b2:74:29:a3:f8:62:eb:1f:a9:89:
         fa:80:e9:eb:fa:8c:80:7e:ed:ff:41:d4:60:07:82:3a:90:52:
         fc:9d:e2:3c:12:99:87:8a:32:73:9a:c6:0b:2e:6d:a9:af:c1:
         1e:55:18:83:c5:f5:39:6c:e8:26:fd:8d:eb:ae:8f:87:53:70:
         39:6d:63:88:e3:76:5a:bf:7d:0f:f1:7f:be:6b:79:b9:68:85:
         5c:50:bf:7b:d5:2f:f8:8b:1c:05:27:35:62:a8:f8:4d:26:58:
         4d:ec:8f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:20 2024 by rpki-client on console-fra.rpki-client.org