Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/5b6RG97btJPqtoJwROhkECl3Z6M.roa
File:                     5b6RG97btJPqtoJwROhkECl3Z6M.roa (raw, json)
Hash identifier:          P2S2eTrx/rDuLxQuqdOaA8iFW0Db/O+8RzN9cuvje4g=
Subject key identifier:   E5:BE:91:1B:DE:DB:B4:93:EA:B6:82:70:44:E8:64:10:29:77:67:A3
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02DA
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/5b6RG97btJPqtoJwROhkECl3Z6M.roa
Signing time:             Mon 30 Sep 2024 01:28:37 +0000
ROA not before:           Mon 30 Sep 2024 01:28:37 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     4686
IP address blocks:        124.255.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730 (0x2da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Sep 30 01:28:37 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=E5BE911BDEDBB493EAB6827044E86410297767A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f9:8a:26:16:e4:7c:68:cd:1c:48:31:5b:ca:
                    31:a5:37:30:bb:4e:15:86:e1:6f:b3:1b:d0:6c:f8:
                    d9:09:6e:e7:19:f3:20:31:76:79:93:02:c6:64:49:
                    91:c3:24:f8:95:ae:2a:63:04:cd:42:53:9e:7d:7e:
                    20:08:42:7a:be:c1:93:17:7a:fa:65:1f:df:7f:27:
                    80:b8:99:17:ce:d6:9b:00:d2:b2:26:25:a8:e6:77:
                    5e:04:55:d8:c8:0f:28:a6:06:99:26:7e:c3:4d:3c:
                    dd:00:d1:19:39:16:4e:35:f4:6e:1d:da:15:79:b1:
                    ed:60:d0:c6:91:ef:5a:55:88:54:ef:c8:98:be:bd:
                    eb:ce:52:da:57:39:85:c5:98:09:83:85:e0:54:eb:
                    46:64:45:a6:fc:99:19:b6:07:0e:e5:d3:66:ad:79:
                    aa:7c:08:c2:fe:a0:9e:c1:73:8b:20:a4:20:7e:c8:
                    0b:ad:68:23:3a:82:f4:20:b1:7e:0f:d0:7c:02:06:
                    38:87:ae:49:9e:0f:f6:19:62:51:e9:82:d3:5b:b8:
                    a5:34:a6:14:95:fd:d0:ea:51:bb:90:48:aa:8e:6c:
                    18:bf:12:3c:2e:49:bf:13:aa:90:cf:08:f1:59:92:
                    15:0d:db:50:68:eb:bd:4e:3a:db:1f:9e:a9:69:73:
                    2c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BE:91:1B:DE:DB:B4:93:EA:B6:82:70:44:E8:64:10:29:77:67:A3
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/5b6RG97btJPqtoJwROhkECl3Z6M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.255.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:f6:4b:96:63:ba:ae:b8:b6:08:3f:3a:16:53:fb:23:88:d0:
         66:cc:7c:3d:0b:b3:ad:c5:96:be:eb:0c:f2:db:a5:29:14:42:
         20:08:c9:b3:fe:98:14:a3:cb:b9:47:0c:24:fe:86:3e:93:9f:
         b9:d8:03:24:e8:27:fd:aa:68:47:8a:09:ce:ca:67:f2:59:72:
         ca:2d:e8:07:c3:d6:c9:dd:9d:6f:f8:6b:21:02:c8:2f:e6:10:
         e1:61:d1:9d:d3:6f:6a:0a:36:df:fb:3a:21:94:7f:34:23:98:
         bb:6f:44:14:b4:76:7d:5f:2f:e7:28:f0:f3:9e:21:53:7c:17:
         c6:ef:c3:4b:64:4e:ae:ad:09:e5:05:71:86:2f:e1:c4:9a:d7:
         78:01:64:f3:ac:ae:2a:83:b5:05:a6:7e:1e:e1:56:30:e2:4c:
         bf:f9:c8:34:f0:e0:53:83:e0:68:0a:0a:3c:30:d4:b4:86:c8:
         87:e8:7e:7c:51:c0:16:9d:53:d8:63:19:83:49:5e:04:74:9f:
         bf:8d:30:54:c1:92:af:62:26:2a:d8:79:ca:e6:9d:54:64:9a:
         c8:d9:02:ca:ca:6f:cd:d7:62:25:4c:32:8d:1c:dd:d4:0c:9f:
         b5:36:44:bf:48:6d:4f:c6:a9:ac:ee:96:0c:1e:09:74:ae:3c:
         55:bf:96:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:21 2024 by rpki-client on console-fra.rpki-client.org