Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/5viOIiII8Vx3pEfPvQ1bEyvTPRY.roa
File:                     5viOIiII8Vx3pEfPvQ1bEyvTPRY.roa (raw, json)
Hash identifier:          zJxWwD8LfEwVqhH/fnTlOl6FOr+Hse3938mlF4wkpXw=
Subject key identifier:   E6:F8:8E:22:22:08:F1:5C:77:A4:47:CF:BD:0D:5B:13:2B:D3:3D:16
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02A8
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/5viOIiII8Vx3pEfPvQ1bEyvTPRY.roa
Signing time:             Fri 31 May 2024 01:41:36 +0000
ROA not before:           Fri 31 May 2024 01:41:36 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        122.145.136.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:41:36 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=E6F88E222208F15C77A447CFBD0D5B132BD33D16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e9:f3:42:b7:2b:b6:b2:d7:3d:9f:63:66:a9:
                    9e:15:82:2f:8b:67:ae:37:bb:40:70:4c:a5:36:f2:
                    21:2c:5b:33:6c:1e:c2:8f:ca:5c:09:b1:7e:d4:79:
                    49:cf:96:7a:60:71:28:c4:fb:1d:c2:25:e6:46:1d:
                    03:09:bd:7f:d5:d3:da:ab:1a:8a:a3:93:83:31:bf:
                    68:e0:a9:3b:32:e6:2f:80:ad:96:77:2f:1c:88:bf:
                    14:63:9b:96:0d:b4:a7:84:9e:27:32:77:3d:3d:cf:
                    92:0b:1d:ad:5c:ea:79:c0:db:cd:30:74:70:6f:d8:
                    d2:5d:da:d2:66:14:d7:50:17:95:33:78:aa:4a:50:
                    ed:35:c2:62:7a:cb:26:3f:01:4c:fa:af:58:58:f1:
                    f8:45:ef:0a:cb:87:20:88:62:f7:5d:ac:e1:26:0a:
                    4b:54:3c:e3:29:5a:25:32:fb:9b:80:87:c6:b1:03:
                    8d:a8:4b:ea:ec:68:7b:e8:dc:84:7c:e0:fe:9b:f9:
                    64:f2:23:c7:be:00:18:f8:ef:61:84:82:75:7b:ab:
                    04:49:d6:0d:a9:94:93:dd:13:6e:b4:f6:ac:1b:ba:
                    cd:af:7f:e4:e2:41:2b:51:3f:79:7e:99:65:df:b0:
                    bf:15:12:95:77:84:e8:c0:d0:da:9d:04:f6:ea:82:
                    e2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F8:8E:22:22:08:F1:5C:77:A4:47:CF:BD:0D:5B:13:2B:D3:3D:16
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/5viOIiII8Vx3pEfPvQ1bEyvTPRY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:25:97:5f:40:4c:fb:44:2e:84:2b:2d:46:b6:4c:48:96:0e:
         bb:91:de:e8:ab:18:13:d0:d7:7f:49:14:f8:37:49:f7:15:45:
         2d:34:56:f1:a6:16:e7:f3:76:48:f2:95:61:68:09:53:9f:4a:
         f9:cd:df:59:bc:07:b3:c5:3a:a0:15:a8:5a:a4:ac:ff:37:d2:
         1d:69:7a:eb:3f:b4:66:7e:42:38:19:83:64:95:08:5f:53:f2:
         0c:97:9f:2c:d5:85:df:e2:22:8b:78:90:1f:5a:0a:5b:6a:fd:
         66:cd:a3:e4:a8:0d:6d:e6:4f:1c:61:61:f4:54:6a:f1:4a:d3:
         bc:e1:51:8e:da:0f:c0:fe:c7:1d:06:5c:d0:34:ea:54:c0:ba:
         7a:e3:2a:0d:ad:14:11:0f:49:d1:87:06:6c:fc:24:8c:d7:d5:
         cf:6d:d6:b2:43:ad:2e:fe:6c:00:e7:73:dc:16:28:20:ab:0c:
         f1:d1:fb:bf:75:e9:48:df:72:be:37:af:2d:08:b8:1d:06:bf:
         9d:86:13:cc:48:9e:6a:16:f4:b6:24:31:59:0d:45:a4:26:ab:
         55:5e:72:a3:97:6e:ba:64:4d:e2:87:f6:4a:9d:c2:b3:50:b3:
         ae:3e:60:2d:31:90:af:77:10:3b:a0:e1:34:28:1d:93:a9:c4:
         ec:54:d9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org