Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/DHzKhE4MBH_IzAeSIrECxoLbbEo.roa
File:                     DHzKhE4MBH_IzAeSIrECxoLbbEo.roa (raw, json)
Hash identifier:          fybzFiRzDJimbocxmy/kGu3luu69AKcSh93q+e8yPSg=
Subject key identifier:   0C:7C:CA:84:4E:0C:04:7F:C8:CC:07:92:22:B1:02:C6:82:DB:6C:4A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0276
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DHzKhE4MBH_IzAeSIrECxoLbbEo.roa
Signing time:             Fri 31 May 2024 01:37:46 +0000
ROA not before:           Fri 31 May 2024 01:37:46 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        110.3.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:37:46 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=0C7CCA844E0C047FC8CC079222B102C682DB6C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:24:e4:83:6f:d4:d1:d7:81:af:0e:86:db:
                    5e:96:11:91:10:b7:f9:0e:0a:c8:81:13:d9:18:50:
                    c1:82:df:a2:0c:b7:55:cd:6c:02:39:e0:9b:8d:1e:
                    1e:bf:de:87:36:d5:32:f3:cb:1b:f4:3c:ce:43:95:
                    3c:e8:28:86:b4:bf:bb:05:49:c1:d6:88:95:be:90:
                    a9:ad:24:e5:bb:0b:49:81:25:83:02:de:03:21:95:
                    f7:c3:e6:55:72:ea:b9:f8:dc:5a:e8:fd:f9:94:45:
                    d3:72:60:06:cd:d5:00:3f:78:7c:b6:2b:6d:55:98:
                    ba:bf:98:6e:7b:89:88:d0:f4:00:7b:a9:37:d4:04:
                    f6:15:b6:af:95:0a:cc:58:8a:06:7a:d8:18:aa:2c:
                    99:d5:a6:fc:0f:02:22:a0:b4:46:8a:b8:4b:c8:b9:
                    8e:d5:83:c1:1e:13:13:86:8e:9a:5f:ff:a2:33:ae:
                    49:d4:33:0a:1c:8a:9e:c5:8e:da:0a:bd:32:9b:a0:
                    94:03:bd:40:87:95:24:e3:a1:5a:da:6a:18:2f:60:
                    f6:80:16:1f:d4:bf:9f:e5:f3:ca:1b:59:18:fa:2f:
                    9b:1a:9d:9a:93:0a:c1:7a:73:8c:4b:15:ae:67:f4:
                    8c:10:e5:70:e4:0a:2c:67:2f:bc:02:8f:c1:d8:60:
                    da:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7C:CA:84:4E:0C:04:7F:C8:CC:07:92:22:B1:02:C6:82:DB:6C:4A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DHzKhE4MBH_IzAeSIrECxoLbbEo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.3.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7f:b4:88:70:52:6e:34:d8:a0:4d:16:4b:bb:7a:16:ff:c2:c2:
         fe:b3:6c:86:2c:90:c2:c8:84:8e:f4:a6:a3:03:f3:0b:b5:9c:
         b2:db:4c:40:ad:46:f1:e2:8b:84:3b:c0:1b:d2:cb:32:b6:37:
         ed:f8:0f:27:65:84:73:69:3e:af:c2:e4:ae:ce:79:33:9d:29:
         f6:17:18:97:08:bb:83:5a:f3:9d:28:78:3c:12:48:b1:f4:d6:
         69:d9:e9:c1:c5:45:25:da:f1:ca:be:ce:79:cf:fe:d6:8d:bb:
         71:b3:b5:65:01:12:9c:1a:0a:5b:66:83:7b:7c:ce:96:55:ec:
         e5:77:ee:d6:ff:83:50:58:09:9e:eb:4b:db:b5:29:55:c7:8a:
         23:bb:26:fd:de:f5:69:24:6f:a4:0d:55:c3:8d:51:60:31:ab:
         f7:f4:1c:2b:e7:33:38:4f:70:a2:dd:8f:f3:25:d1:b0:1a:cf:
         63:75:93:ab:c6:c0:80:e0:cd:cd:78:14:2b:a7:51:ee:80:2d:
         b7:15:46:6c:d3:5a:c6:31:4b:9f:4a:61:7b:04:2c:c6:d8:56:
         51:cb:32:0b:ec:a5:1b:ac:59:9a:7f:72:51:d8:10:7f:d8:c3:
         71:de:4f:b8:42:b6:88:0e:5e:38:1f:52:d4:1c:b2:f4:05:98:
         fc:e1:1a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:20 2024 by rpki-client on console-ams.rpki-client.org