Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/9L6vlabtaCNX8-zVlAlKr3-mB-M.roa
File:                     9L6vlabtaCNX8-zVlAlKr3-mB-M.roa (raw, json)
Hash identifier:          OGNZUk6vm/OLXFihzcKdCOd+8N4GjH9JurPKrPU2cIk=
Subject key identifier:   F4:BE:AF:95:A6:ED:68:23:57:F3:EC:D5:94:09:4A:AF:7F:A6:07:E3
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0295
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9L6vlabtaCNX8-zVlAlKr3-mB-M.roa
Signing time:             Fri 31 May 2024 01:39:45 +0000
ROA not before:           Fri 31 May 2024 01:39:45 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        220.150.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661 (0x295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:39:45 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=F4BEAF95A6ED682357F3ECD594094AAF7FA607E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0e:9e:11:9d:7b:45:94:be:a7:35:c8:c3:72:
                    b1:66:69:0b:d4:1d:8f:16:8b:25:bd:e1:87:02:40:
                    94:9a:3b:28:2c:f1:09:fa:a8:43:f4:32:71:06:7b:
                    44:bc:a5:58:b6:32:86:fe:ee:4a:e2:9d:2a:a8:1e:
                    b4:96:86:49:51:ec:76:1c:ae:f9:7b:fd:bf:fb:16:
                    46:9c:7a:fe:24:e9:71:29:26:79:a2:68:e7:ab:df:
                    34:d2:54:db:3c:75:6e:e1:0c:a7:42:a9:a7:e8:3e:
                    20:c9:1c:cb:4a:67:cd:a8:40:0e:f5:23:d7:fe:45:
                    13:9c:33:b6:2f:9c:14:e9:7f:84:6b:45:01:49:f5:
                    e4:9e:81:b4:b6:a8:56:92:4a:5a:84:64:68:c5:d6:
                    3a:a9:61:6c:d0:74:d8:ee:37:19:db:1a:c3:8a:bd:
                    98:64:21:e2:1e:2b:23:2d:06:07:59:e7:02:b9:5e:
                    7c:ef:fb:ef:4a:94:20:f1:fb:23:02:d9:2a:9b:86:
                    b4:ee:65:95:f7:9a:5a:81:26:e3:92:91:6c:fa:25:
                    87:a3:63:43:e5:63:56:ad:9c:c1:73:83:07:ca:7f:
                    2e:e7:ff:6b:31:a4:06:b2:fe:b0:35:45:eb:a5:5d:
                    9c:0b:aa:6d:86:12:24:7d:4a:88:6e:ec:d6:ef:4c:
                    eb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BE:AF:95:A6:ED:68:23:57:F3:EC:D5:94:09:4A:AF:7F:A6:07:E3
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9L6vlabtaCNX8-zVlAlKr3-mB-M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:23:0d:88:19:7a:4c:16:a5:7b:08:9f:58:d2:ff:51:f6:63:
         5b:02:ac:bf:83:af:2f:8e:9c:ad:da:42:83:fa:dd:e8:0b:a6:
         e5:2b:f7:27:ab:1e:34:db:79:e9:29:24:38:16:76:31:09:6a:
         e8:7f:f8:fb:18:5e:14:8d:75:2a:02:2c:04:e6:76:68:5a:d9:
         6a:b7:62:a1:eb:a3:d6:7b:b7:2f:d7:d1:4e:cc:fc:4a:66:00:
         b8:77:68:55:11:ca:d5:88:87:be:bb:78:37:84:c0:d2:ec:1b:
         af:7a:8f:18:f3:d9:ca:dc:8c:42:d6:0d:bb:4d:e1:02:db:da:
         ac:c4:37:9c:f6:55:26:10:3d:32:eb:28:b7:db:cf:31:95:04:
         32:74:59:45:bd:d5:a5:bb:65:e5:ce:48:b9:0d:b2:59:19:aa:
         61:d0:0f:22:12:9c:07:ef:f0:f9:60:63:32:71:70:12:c4:26:
         d3:e2:1b:7f:fb:fa:f3:b2:e2:eb:a2:d1:16:54:04:04:8a:40:
         21:f6:41:6e:13:bc:1d:de:04:2c:2b:c9:5a:33:9a:4f:67:66:
         74:7c:d5:44:1b:e9:f7:37:d4:62:e8:80:a1:11:4d:ec:73:ce:
         45:ce:3b:c2:f1:a1:c3:96:32:65:f2:3b:26:ce:ed:d1:76:50:
         8d:2e:06:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:43 2024 by rpki-client on console-ams.rpki-client.org