Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/9FJplGUHSayX24Igic4Hug9JlVk.roa
File:                     9FJplGUHSayX24Igic4Hug9JlVk.roa (raw, json)
Hash identifier:          FCt9eJSTJYTdG8XaUYqFyGqjRqgiOOIop2epk64tUVA=
Subject key identifier:   F4:52:69:94:65:07:49:AC:97:DB:82:20:89:CE:07:BA:0F:49:95:59
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0275
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9FJplGUHSayX24Igic4Hug9JlVk.roa
Signing time:             Fri 31 May 2024 01:37:45 +0000
ROA not before:           Fri 31 May 2024 01:37:45 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        110.2.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:37:45 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=F4526994650749AC97DB822089CE07BA0F499559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:02:d9:4e:e3:96:ed:75:3c:f8:09:f2:11:
                    2c:1d:c0:a0:c2:cf:f9:ab:a7:a9:1c:71:51:1e:66:
                    15:c1:2b:e2:88:8b:98:93:cd:9c:04:0f:6f:1b:94:
                    6e:4f:e5:c4:df:01:fb:cd:70:ff:95:73:1f:0b:bc:
                    9a:5a:50:6d:a9:56:1f:75:26:ee:e0:b7:8d:a2:9e:
                    9a:e5:ba:88:3a:d2:aa:8e:ca:32:07:52:54:d1:29:
                    77:2b:51:c8:c0:63:84:a2:a2:87:b2:78:20:61:1b:
                    20:87:7f:03:d3:26:b6:fb:30:9f:2a:25:07:cc:d2:
                    45:dc:1a:86:16:04:42:66:79:48:cc:90:df:c2:27:
                    a8:be:19:9d:88:ee:14:bb:41:a0:76:f4:d8:7a:3d:
                    16:48:68:c9:10:35:53:f4:b2:36:5c:95:68:9d:01:
                    0c:45:ad:08:74:fd:1b:f2:29:a7:7c:6c:da:1c:cb:
                    09:e5:1c:44:8a:66:f3:99:09:41:0a:03:42:b4:53:
                    6e:b8:d6:7a:67:bc:92:9e:8c:9a:41:f5:29:be:67:
                    3d:30:73:eb:81:50:70:d2:ea:71:da:d5:fd:f9:d4:
                    a2:25:18:ec:c0:2f:8d:4a:8a:1e:e1:05:d3:a2:e3:
                    f2:8b:13:47:07:74:a8:7b:1b:57:c4:b3:d4:26:6d:
                    bc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:52:69:94:65:07:49:AC:97:DB:82:20:89:CE:07:BA:0F:49:95:59
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9FJplGUHSayX24Igic4Hug9JlVk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.2.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         18:4b:a8:5b:fd:6d:d9:50:64:09:b3:cf:3e:ef:2a:9c:34:ab:
         00:74:53:b4:6d:17:8d:15:a1:1d:d8:4e:e2:1b:57:06:34:0c:
         b3:0d:01:6e:01:2a:77:92:15:3a:16:f3:43:34:a3:c9:3b:d4:
         a3:27:3e:4c:85:46:d0:19:73:8f:4f:48:aa:4c:63:6e:ff:7a:
         ae:05:44:72:2b:59:2f:3c:33:44:f2:a7:5f:a2:d9:3c:39:33:
         96:2f:4a:0a:b0:86:92:e5:b2:5a:96:ca:e6:4f:72:e1:e9:4f:
         38:b1:c1:21:8d:5f:c1:14:93:20:9c:87:e4:3b:62:bf:dc:61:
         55:17:fc:16:2e:ff:fd:20:d5:53:ce:2f:1b:40:51:0c:b0:fc:
         a2:99:78:3b:bc:3c:ea:bc:0c:28:cd:4e:d6:90:e4:74:6b:42:
         c7:de:f0:9e:d5:80:cb:78:95:99:bd:fb:19:cf:eb:44:2c:3f:
         fa:ce:2d:57:c7:ae:30:13:84:f3:80:55:c7:2a:e6:1a:b4:d2:
         f1:08:1b:b9:48:00:20:34:75:1b:e0:83:c1:46:12:9b:16:83:
         c4:04:26:81:1a:58:90:f5:a0:38:84:4a:3d:34:64:10:f3:31:
         d1:16:88:a0:40:47:54:e9:cc:bc:7d:d9:4f:63:a4:e9:b4:04:
         d6:5d:0b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org