Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/18LleI1ohx4D-70uOnGTfBa87WE.roa
File:                     18LleI1ohx4D-70uOnGTfBa87WE.roa (raw, json)
Hash identifier:          HFDDxrWQlvIELmr/2wVK+lzAsj0jtw+yUjr/yoEB+MU=
Subject key identifier:   D7:C2:E5:78:8D:68:87:1E:03:FB:BD:2E:3A:71:93:7C:16:BC:ED:61
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0219
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/18LleI1ohx4D-70uOnGTfBa87WE.roa
Signing time:             Fri 31 May 2024 01:29:18 +0000
ROA not before:           Fri 31 May 2024 01:29:18 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        36.54.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:29:18 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=D7C2E5788D68871E03FBBD2E3A71937C16BCED61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9b:60:8b:12:ad:53:ba:03:4d:4f:f9:58:c2:
                    60:1a:85:24:c8:30:cf:4b:a6:d8:00:6b:44:e2:96:
                    47:9b:8e:6b:f6:16:7d:76:c9:bd:3a:a2:77:9b:a9:
                    2c:46:fe:e6:85:2c:ba:0b:53:4c:43:2c:51:e2:26:
                    e8:72:90:74:40:e4:92:e1:93:d7:b8:b2:b5:fb:d1:
                    05:c5:b2:ba:e9:be:be:9c:cd:4b:a1:5e:b3:7b:94:
                    bc:4e:44:64:d0:54:1f:ab:2d:d6:e7:d7:47:5e:ce:
                    85:d7:33:a9:05:18:df:07:73:a0:ef:ba:60:ac:83:
                    c6:8e:9c:dd:ff:d5:3c:09:f7:1b:e1:79:f5:b9:27:
                    0b:4e:6e:3c:17:4d:ae:3c:0d:6d:41:5a:fa:b5:fd:
                    a0:cd:d7:f1:b1:d2:8c:df:36:47:fe:65:ae:80:50:
                    a8:63:bf:a9:3b:d1:b8:a1:0b:80:59:f2:5e:bc:ec:
                    9e:56:80:d8:de:bc:c3:d4:93:f4:cf:99:c7:b4:4c:
                    d0:14:e0:5c:5f:91:53:91:c6:40:d5:c8:5b:ef:b4:
                    51:ef:61:f2:39:cc:dc:72:cc:b6:6a:cc:f1:9d:a1:
                    28:2b:75:bc:67:40:d7:b9:82:bf:be:92:71:0e:07:
                    20:67:bc:11:3c:1e:fe:03:4e:f1:58:05:a5:aa:43:
                    90:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C2:E5:78:8D:68:87:1E:03:FB:BD:2E:3A:71:93:7C:16:BC:ED:61
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/18LleI1ohx4D-70uOnGTfBa87WE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.54.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         93:0d:c6:5b:88:7d:9d:bd:da:e5:eb:52:b6:4b:62:a4:78:52:
         c4:8f:49:00:75:16:f0:cb:d3:51:a9:7f:2c:eb:e5:fc:c8:b9:
         fe:36:9b:df:25:8d:1f:04:b8:94:35:b2:f9:19:ca:47:06:96:
         b6:5d:85:5e:4d:bc:97:d9:9d:24:b9:bc:a0:da:6c:81:30:3d:
         02:36:2b:24:5a:e7:85:6a:67:e3:aa:85:d7:e8:91:73:e9:4a:
         bd:03:0b:40:ca:4e:4d:72:99:3e:df:be:be:1b:61:20:49:d8:
         3e:7f:0b:eb:f6:40:f0:79:10:1d:45:60:e1:52:d9:cc:4e:88:
         c3:b7:d9:72:56:64:98:e5:37:11:ea:d9:d8:5c:60:61:21:a5:
         48:76:fc:d8:e9:3c:29:77:90:a3:29:92:b6:4c:8f:dc:f3:2a:
         39:3d:0e:db:a5:80:57:26:bd:45:d2:8b:d6:1b:94:e8:bb:3e:
         7f:4b:5a:20:06:0e:77:d4:32:bf:80:16:ea:16:bd:f5:b2:3c:
         b3:bb:ec:fa:d8:a7:b1:b6:cf:a5:82:6f:58:58:36:b5:58:d3:
         8a:b9:17:e7:c3:3f:b4:39:9d:c9:7f:31:57:2a:5f:cf:b7:af:
         09:5d:87:88:8a:68:7e:e0:3d:de:7b:53:cb:eb:3b:8a:92:8e:
         b0:03:ba:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:20 2024 by rpki-client on console-fra.rpki-client.org