Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/9PNIlNJN_6tqWQFXCQWSZxI33v8.roa
File:                     9PNIlNJN_6tqWQFXCQWSZxI33v8.roa (raw, json)
Hash identifier:          /ueMrWN7eNa/ctw6ozu8J2HT4LHZSji4trRyXDHAWBs=
Subject key identifier:   F4:F3:48:94:D2:4D:FF:AB:6A:59:01:57:09:05:92:67:12:37:DE:FF
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0235
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9PNIlNJN_6tqWQFXCQWSZxI33v8.roa
Signing time:             Fri 31 May 2024 01:33:15 +0000
ROA not before:           Fri 31 May 2024 01:33:15 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        220.150.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:33:15 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=F4F34894D24DFFAB6A590157090592671237DEFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:52:f0:b3:14:47:fb:c1:5d:f7:66:f0:b2:
                    39:59:a0:3c:48:d1:6c:49:89:e8:18:27:2e:ab:31:
                    de:7c:ae:a1:47:fa:3c:36:f7:2b:b9:74:d0:80:5f:
                    ef:fc:0f:c4:c8:c7:8c:ff:3c:91:93:ea:fa:77:b7:
                    4c:a9:58:a8:be:01:d2:d2:6f:33:9a:2b:05:9e:69:
                    e0:a4:69:84:5f:00:14:cf:ab:d1:d3:78:56:1a:89:
                    23:ed:f4:38:a2:8f:ee:5b:fe:5e:63:4b:71:a0:10:
                    38:30:47:d9:c8:5c:c8:84:70:2c:c7:f5:1c:4d:41:
                    d9:53:0b:e5:ef:69:15:c6:e5:ad:30:63:19:4e:ee:
                    ca:79:45:a3:3c:db:46:9d:de:4c:ce:f0:65:1b:b4:
                    a1:96:62:94:a9:22:0f:7e:70:ed:d5:64:95:bf:4c:
                    9b:43:fe:35:5a:b1:3a:24:de:29:b3:06:a3:13:74:
                    37:da:04:63:bb:92:08:aa:9f:31:97:c9:b9:d0:c7:
                    6e:e3:0e:3e:81:c6:49:dc:cd:41:20:d1:3c:23:7f:
                    00:42:c5:65:34:3a:f2:42:14:f6:46:fa:1f:9c:f5:
                    c8:60:ad:5e:7f:13:9c:d7:4a:2c:a1:d9:50:34:43:
                    bb:b7:a3:2c:d1:56:09:35:1b:cf:16:70:aa:89:de:
                    86:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F3:48:94:D2:4D:FF:AB:6A:59:01:57:09:05:92:67:12:37:DE:FF
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9PNIlNJN_6tqWQFXCQWSZxI33v8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:82:d2:39:df:0d:32:58:ad:56:58:c9:c7:b3:a6:d2:34:b8:
         21:7d:03:95:08:eb:cf:cf:c0:94:1d:23:8f:55:1c:5f:fc:c7:
         e8:8f:47:6d:c4:05:ee:0a:54:cd:d5:02:7b:6d:6a:77:e7:42:
         0d:ef:43:ad:31:d8:53:80:99:73:90:47:38:02:99:b1:91:5f:
         0c:d1:0e:0d:f7:3d:c0:de:33:69:ff:3c:d8:d4:ec:4d:ac:de:
         c1:57:70:2b:7b:14:33:f2:5c:de:0d:da:41:11:9c:cd:57:3f:
         27:a8:62:94:f0:c2:65:87:a4:77:80:50:ab:56:8e:47:bc:39:
         13:be:44:9b:9f:2f:c4:31:c2:de:68:08:dc:96:b9:2d:14:02:
         13:5f:5a:96:d6:85:30:2a:0b:df:81:65:6c:9c:02:7c:4b:89:
         01:f7:b4:42:fe:f1:38:f1:4c:be:4b:cd:3c:ed:45:91:eb:22:
         6c:13:c4:cb:9a:9b:64:c4:55:20:eb:db:0e:17:a0:a7:95:2c:
         de:a8:ce:4c:e2:ca:b2:51:35:45:17:be:2a:02:c8:c8:75:d9:
         3a:cf:e7:c6:25:11:b4:34:00:7e:1e:37:a7:2a:8f:b6:89:a6:
         c7:30:12:69:6a:ab:2e:75:23:f5:c7:60:be:52:b8:f5:f1:03:
         83:7d:de:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org