Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/982mxa6J0N8tVDaVWW5O52REvts.roa
File:                     982mxa6J0N8tVDaVWW5O52REvts.roa (raw, json)
Hash identifier:          qyvyRymovLPtqYouNywohN+lYYr6sg+e6cpXMR7q6G0=
Subject key identifier:   F7:CD:A6:C5:AE:89:D0:DF:2D:54:36:95:59:6E:4E:E7:64:44:BE:DB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0233
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/982mxa6J0N8tVDaVWW5O52REvts.roa
Signing time:             Fri 31 May 2024 01:33:14 +0000
ROA not before:           Fri 31 May 2024 01:33:14 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        220.215.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:33:14 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=F7CDA6C5AE89D0DF2D543695596E4EE76444BEDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d8:32:31:c6:fc:7b:97:85:9d:f7:c1:77:04:
                    b8:84:4c:94:f0:ba:36:a3:a4:29:26:49:81:29:2c:
                    af:ee:0c:30:18:96:97:8a:54:ef:0f:b7:08:6f:00:
                    4e:c1:e0:d3:f5:98:44:bf:e4:dd:aa:ce:32:c0:31:
                    00:77:d8:4c:62:61:3e:2e:24:2b:86:fb:e3:49:2e:
                    95:8f:63:d6:0d:c0:d9:8c:e5:e7:79:03:f2:43:57:
                    af:0e:a7:7b:ab:9a:f2:a2:a3:81:48:33:a0:2f:b1:
                    88:79:eb:8d:9d:5d:66:f2:6c:29:7c:3a:64:a2:3d:
                    58:9a:f7:52:22:7d:5c:87:68:f4:e7:89:d8:8e:0d:
                    16:f1:86:f1:40:1a:22:78:4d:75:d4:d8:20:38:6d:
                    25:59:d4:07:56:eb:73:09:32:f0:1b:fe:9a:7c:d8:
                    96:62:7e:df:0b:6b:8c:f5:ca:6e:dc:87:21:2e:0f:
                    21:27:7f:da:2c:03:e2:09:16:e1:c0:41:18:b7:63:
                    2d:86:6a:6b:e5:95:38:8e:7b:db:e3:7a:03:f2:68:
                    f4:1a:3d:f1:c5:e5:a4:10:92:65:5c:c4:31:84:6c:
                    5f:d2:a5:c3:59:68:1a:bb:5c:73:61:63:27:a4:16:
                    6f:fa:6f:3a:ae:86:84:98:cb:4e:9f:0f:00:b8:e8:
                    45:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CD:A6:C5:AE:89:D0:DF:2D:54:36:95:59:6E:4E:E7:64:44:BE:DB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/982mxa6J0N8tVDaVWW5O52REvts.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.215.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:0b:0f:ff:f7:b5:7c:38:51:a4:5f:44:0e:13:e1:76:3d:6c:
         11:60:7c:48:91:42:38:df:15:c2:20:14:14:cf:da:7e:9a:00:
         e7:4c:74:37:0e:45:f9:13:43:3e:ab:05:8a:fe:09:33:9b:3e:
         94:6a:2f:fb:1d:30:d8:73:f9:de:8e:7f:7d:dc:db:a8:8a:66:
         82:50:4a:a7:51:a8:c5:99:41:80:1a:35:2f:65:96:ed:12:1b:
         38:f3:a4:63:18:66:47:4d:35:73:4a:07:7a:2a:bf:f1:c0:4e:
         72:e4:3d:ce:55:e7:d4:14:63:56:7e:78:ea:63:b1:5b:9d:7e:
         27:48:54:c3:37:bb:dd:4e:ff:65:83:c8:d7:0e:82:31:ac:97:
         30:49:0d:87:0d:64:1a:fb:1f:de:ae:80:95:2a:72:4b:4a:01:
         77:15:bc:0d:a5:e5:94:71:14:26:3f:39:99:dc:16:05:b4:60:
         49:91:eb:3f:56:65:6f:3a:68:56:75:e6:64:34:60:b0:aa:e2:
         a9:9e:1e:38:1f:c2:88:dd:8c:0a:c3:f6:61:9e:42:e6:e2:01:
         b1:46:6c:c0:9f:ea:2b:9b:61:e8:04:88:c5:92:00:31:2a:d2:
         ce:c7:ba:59:23:8f:a6:7d:72:41:d0:7e:2d:1d:e8:bf:48:09:
         70:40:ed:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:43 2024 by rpki-client on console-ams.rpki-client.org