Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/BhxxYZv-qvqAmZujjQzkZnRaKqE.roa
File:                     BhxxYZv-qvqAmZujjQzkZnRaKqE.roa (raw, json)
Hash identifier:          xbS+WydauE7oQuAMY9p1Rf8/rfkzB6MRlqtjedFEHpE=
Subject key identifier:   06:1C:71:61:9B:FE:AA:FA:80:99:9B:A3:8D:0C:E4:66:74:5A:2A:A1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0236
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/BhxxYZv-qvqAmZujjQzkZnRaKqE.roa
Signing time:             Fri 31 May 2024 01:33:15 +0000
ROA not before:           Fri 31 May 2024 01:33:15 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        219.109.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:33:15 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=061C71619BFEAAFA80999BA38D0CE466745A2AA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:11:89:30:97:b8:4e:3e:76:22:64:e9:dc:
                    b8:b8:bc:5e:b0:a5:4e:af:ef:21:34:fe:21:4e:21:
                    7d:45:43:14:24:bd:98:8e:60:b3:d2:be:06:ee:79:
                    b7:46:20:07:bf:df:fa:ff:8a:5a:d2:06:79:7f:97:
                    56:22:c6:95:a8:30:14:e6:ad:8f:6b:2d:94:1e:49:
                    81:12:96:7b:ca:6a:10:62:af:d0:06:30:5c:59:29:
                    a7:d3:4c:67:07:85:3e:05:bd:5c:95:e2:e6:92:28:
                    6e:a2:55:67:c2:2b:bb:74:c3:32:67:25:87:f2:5b:
                    f8:28:e2:04:87:41:36:c5:5f:0c:7a:ee:8a:99:6e:
                    10:89:51:95:6b:60:c4:f6:f9:c5:1e:e0:17:00:39:
                    19:76:fb:39:4b:d5:42:30:8c:1d:4e:1b:6b:5b:82:
                    7a:50:ad:55:94:20:8b:48:6e:bd:5c:9d:20:dd:59:
                    e7:f5:59:32:1e:97:48:a5:04:13:90:9f:3b:fe:72:
                    57:a1:d8:a6:3c:f5:17:66:b2:b8:d8:32:ef:0f:b3:
                    b5:ac:94:e6:f3:b9:4b:2f:49:08:ed:67:23:6d:e8:
                    e8:21:f1:23:93:05:78:92:15:c7:d4:2c:47:81:c9:
                    f4:99:80:c3:9f:2b:4d:06:ab:92:0d:ba:19:eb:33:
                    e8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1C:71:61:9B:FE:AA:FA:80:99:9B:A3:8D:0C:E4:66:74:5A:2A:A1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/BhxxYZv-qvqAmZujjQzkZnRaKqE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.109.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:14:d7:c3:76:55:e9:da:62:d1:72:b6:8d:b0:7a:95:98:e3:
         21:01:22:b2:19:5c:8a:bf:fe:51:13:e5:d6:d3:47:5b:23:70:
         06:67:00:7f:6c:89:7c:c5:c7:cc:e9:9b:6a:bb:e6:ee:fb:0c:
         60:e3:a3:42:5e:56:f8:60:7b:73:a6:09:39:fe:9d:62:7a:c1:
         6d:aa:4c:26:25:36:7a:55:08:a1:68:f3:b6:49:da:c0:4b:5b:
         ab:8a:01:1d:a2:69:0c:c8:0e:6d:f9:ce:0c:01:b4:ed:1e:9b:
         bd:17:4e:7e:1c:9c:5f:d9:dc:e8:5c:6c:73:aa:c0:fc:19:91:
         ae:78:49:b8:fe:21:fa:e1:ee:66:c5:b6:f4:13:6c:4e:b7:3c:
         44:e3:b9:cd:44:51:b0:08:11:a8:00:53:a8:60:3b:f4:f7:54:
         74:c7:a0:18:40:14:9e:c9:a0:00:63:0c:a1:d1:30:2d:e4:05:
         0d:0f:19:76:f3:62:fb:c6:8c:6f:a1:9e:53:09:c1:f9:65:83:
         f9:b8:0d:07:4d:1d:75:3f:9f:1d:8b:90:7a:33:08:aa:15:61:
         5d:33:45:85:1e:f4:27:ec:1f:63:99:af:35:7e:d4:7c:4b:d5:
         52:6a:4d:3a:c2:84:49:35:92:60:d9:1a:db:d4:83:98:d9:a9:
         27:7f:9d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:26 2024 by rpki-client on console-ams.rpki-client.org