Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/1yyiCs1CUem2dM5OOQpalKQM880.roa
File:                     1yyiCs1CUem2dM5OOQpalKQM880.roa (raw, json)
Hash identifier:          ziw/EHMAcE39kjIcPAFi7B0f+ywHDTXf2XRIYWqIpqI=
Subject key identifier:   D7:2C:A2:0A:CD:42:51:E9:B6:74:CE:4E:39:0A:5A:94:A4:0C:F3:CD
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0226
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1yyiCs1CUem2dM5OOQpalKQM880.roa
Signing time:             Fri 31 May 2024 01:33:06 +0000
ROA not before:           Fri 31 May 2024 01:33:06 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        36.54.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:33:06 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=D72CA20ACD4251E9B674CE4E390A5A94A40CF3CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:34:29:36:9e:61:15:d5:b7:62:02:a7:ce:8c:
                    6e:b9:49:96:11:5d:ea:d6:52:44:24:ee:29:0f:27:
                    c7:4a:ba:bf:d3:f8:23:01:ee:23:28:61:00:f6:d9:
                    d5:57:9b:e4:df:c2:44:d0:65:fb:e0:d6:f6:2a:76:
                    83:1e:93:c4:d3:3e:02:8c:6e:79:78:72:96:08:b7:
                    9e:13:de:d0:a6:7a:e8:6e:9d:97:b6:3b:f8:91:fc:
                    75:be:b0:63:03:f7:8e:3d:9a:0d:16:32:ec:89:ef:
                    12:e0:86:19:51:a0:94:18:b7:5d:a1:81:90:33:e7:
                    f4:fc:19:3a:23:84:ad:b3:81:31:24:fc:58:02:22:
                    1b:8e:56:02:39:60:64:68:6b:65:0f:b0:b7:5d:32:
                    a7:e1:86:93:57:fd:a7:81:cd:4f:de:a6:c5:3f:98:
                    2a:cb:5e:9d:4a:2a:34:14:e6:0b:20:99:8b:f9:2c:
                    8e:81:f4:64:36:3d:11:00:4a:74:9c:ec:a6:09:61:
                    78:0c:a9:b1:87:40:28:ae:c4:83:b8:98:9e:2e:c2:
                    ae:18:c6:60:e3:fd:8f:79:df:58:05:ac:9b:29:a7:
                    53:cc:4f:5d:09:e8:8e:99:31:04:11:d6:42:c1:ac:
                    ee:a6:1f:97:39:96:03:e6:33:49:ad:9d:bb:b9:a3:
                    ef:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2C:A2:0A:CD:42:51:E9:B6:74:CE:4E:39:0A:5A:94:A4:0C:F3:CD
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1yyiCs1CUem2dM5OOQpalKQM880.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.54.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         52:1f:33:c5:cd:67:f6:13:bc:23:ae:21:22:df:f9:e0:b6:4f:
         8a:24:e8:fc:02:fb:98:81:da:1c:32:20:54:5e:5e:5a:17:0c:
         28:65:e1:9c:b2:3e:5c:5b:ac:0f:c2:c5:e8:39:6f:76:8d:06:
         dd:26:a8:48:44:34:d0:56:28:eb:ec:a3:0b:1c:f1:47:fe:1b:
         45:d5:88:48:7f:24:b0:d8:f6:10:d9:b7:dc:9a:dc:66:93:2e:
         a6:2c:24:13:01:96:44:f0:06:1b:d2:89:ef:c1:6b:b5:c8:31:
         32:af:0f:1a:ce:7e:d0:b8:44:28:78:91:85:2c:06:ca:4c:c2:
         0b:be:75:6f:5f:7c:ce:b7:a6:0f:24:df:a1:16:98:e7:ca:ec:
         19:7a:a0:29:4f:65:63:33:34:06:42:ae:1c:00:1d:16:63:55:
         cc:5b:b3:7f:c1:35:00:0c:1d:92:fd:6b:02:64:3d:7c:7c:8e:
         fe:ea:b1:61:3a:87:9e:f7:e2:fa:7f:9f:b9:a4:f5:e3:4a:d7:
         86:0c:ea:63:57:f7:dd:88:26:d7:5d:60:78:10:2f:c4:99:6f:
         75:e7:cf:9d:31:f6:69:3e:36:55:c6:48:36:7a:4a:6a:fa:3b:
         83:75:36:7c:17:1f:ab:8b:92:a3:49:3d:1f:80:d2:07:37:a1:
         ea:97:6d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org