Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/9Uke3Xr-9ITOMXYfsFfLLZdLzFY.roa
File:                     9Uke3Xr-9ITOMXYfsFfLLZdLzFY.roa (raw, json)
Hash identifier:          3XtBTkeFt4j7KU9Er9X6qGXEfjGYKlk6OiERM7BBfDQ=
Subject key identifier:   F5:49:1E:DD:7A:FE:F4:84:CE:31:76:1F:B0:57:CB:2D:97:4B:CC:56
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0220
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9Uke3Xr-9ITOMXYfsFfLLZdLzFY.roa
Signing time:             Fri 31 May 2024 01:33:05 +0000
ROA not before:           Fri 31 May 2024 01:33:05 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        36.52.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:33:05 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=F5491EDD7AFEF484CE31761FB057CB2D974BCC56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:86:e9:86:0b:95:b7:04:2f:22:65:c4:33:90:
                    f9:2c:a4:b4:54:2f:c3:d9:b1:81:3f:ab:04:d8:30:
                    7a:27:9d:50:19:80:ff:1e:4c:d0:e8:5f:26:73:ea:
                    cd:a6:8e:dd:a2:9c:23:1e:f0:a7:e3:47:0d:5b:00:
                    c5:f0:6b:72:61:fa:f5:c3:a9:d6:a7:82:8f:c5:44:
                    b2:0a:eb:c5:aa:ba:f2:01:42:00:33:18:dc:3e:90:
                    5e:0b:73:15:ef:bd:ed:86:cb:11:cd:5b:0f:27:d4:
                    fa:ff:86:4e:bb:ad:ce:56:f6:d3:0d:c0:f9:9d:8d:
                    d4:bf:0b:76:5e:4c:44:de:40:92:e6:54:a6:41:96:
                    08:ff:00:0a:69:c3:c3:71:67:48:d5:d9:3d:5c:fc:
                    2e:cb:ab:c8:6c:0f:2c:4e:c9:b5:82:6d:11:20:7b:
                    77:48:37:ed:16:c0:ec:36:4d:f8:b8:27:89:ee:8c:
                    ba:58:c4:bb:58:3a:df:e1:8d:48:ec:1b:10:2a:b0:
                    ff:dc:83:73:47:f8:76:2d:58:96:75:36:cc:59:bb:
                    57:66:57:7c:80:0b:fc:1f:30:57:92:44:8a:97:45:
                    ba:69:b8:5a:a9:89:60:5d:96:0b:90:81:c2:04:f9:
                    a2:4a:4f:62:88:ee:dd:dd:7e:d7:f0:d9:56:02:7f:
                    34:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:49:1E:DD:7A:FE:F4:84:CE:31:76:1F:B0:57:CB:2D:97:4B:CC:56
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9Uke3Xr-9ITOMXYfsFfLLZdLzFY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         68:87:ea:df:e8:f9:23:3e:d3:1a:78:3a:3d:e5:b7:7e:2d:26:
         d1:96:16:b9:4d:01:4d:e7:d3:9b:85:63:92:47:a5:53:dc:88:
         f7:e2:9a:4f:3d:5d:1e:ca:f9:4e:f7:8b:1c:82:52:a5:c0:38:
         30:0b:ab:96:e3:89:d7:98:e0:76:d1:5f:05:39:1d:93:61:87:
         6b:ef:fb:f4:68:e4:01:c8:01:14:01:b4:49:bc:30:81:b9:ff:
         62:51:14:a9:f1:57:06:0c:1d:b0:9a:fb:5b:a0:19:99:00:b4:
         c1:d0:e8:64:53:2d:74:a2:a5:71:0e:b0:15:a5:e3:af:1d:a6:
         cc:aa:4f:ba:b1:30:a5:20:16:c2:0b:2a:02:85:5e:53:33:ee:
         9d:18:68:cd:53:26:a0:73:a5:3e:cf:05:db:ae:57:56:4b:73:
         2d:3f:b2:a5:36:7a:99:bb:46:f4:2e:67:43:00:08:63:2f:cc:
         89:54:14:29:f8:a3:85:f9:aa:fd:b4:e3:14:1a:f6:b6:44:27:
         6c:33:68:56:cf:53:5e:ab:34:a8:93:d0:51:ac:ed:ee:05:31:
         46:53:bc:1b:5e:82:db:0a:1d:24:7e:af:cd:c7:68:02:a3:60:
         6f:bd:c2:54:95:82:69:66:4c:5d:c5:01:67:ad:57:b4:dd:f7:
         2a:b4:94:8f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw
MTMzMDVaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEY1NDkxRUREN0FGRUY0
ODRDRTMxNzYxRkIwNTdDQjJEOTc0QkNDNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3humGC5W3BC8iZcQzkPkspLRUL8PZsYE/qwTYMHonnVAZgP8e
TNDoXyZz6s2mjt2inCMe8KfjRw1bAMXwa3Jh+vXDqdango/FRLIK68WquvIBQgAz
GNw+kF4LcxXvve2GyxHNWw8n1Pr/hk67rc5W9tMNwPmdjdS/C3ZeTETeQJLmVKZB
lgj/AAppw8NxZ0jV2T1c/C7Lq8hsDyxOybWCbREge3dIN+0WwOw2Tfi4J4nujLpY
xLtYOt/hjUjsGxAqsP/cg3NH+HYtWJZ1NsxZu1dmV3yAC/wfMFeSRIqXRbppuFqp
iWBdlguQgcIE+aJKT2KI7t3dftfw2VYCfzS7AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU9Uke3Xr+9ITOMXYfsFfLLZdLzFYwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0LzlVa2UzWHItOUlUT01YWWZzRmZMTFpkTHpGWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMkNNAwDQYJKoZIhvcNAQELBQADggEBAGiH6t/o+SM+0xp4Oj3lt34tJtGW
FrlNAU3n05uFY5JHpVPciPfimk89XR7K+U73ixyCUqXAODALq5bjideY4HbRXwU5
HZNhh2vv+/Ro5AHIARQBtEm8MIG5/2JRFKnxVwYMHbCa+1ugGZkAtMHQ6GRTLXSi
pXEOsBWl468dpsyqT7qxMKUgFsILKgKFXlMz7p0YaM1TJqBzpT7PBduuV1ZLcy0/
sqU2epm7RvQuZ0MACGMvzIlUFCn4o4X5qv204xQa9rZEJ2wzaFbPU16rNKiT0FGs
7e4FMUZTvBtegtsKHSR+r83HaAKjYG+9wlSVgmlmTF3FAWetV7Td9yq0lI8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org