Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/E26c2muwOODRFbNaTrm69eUsJWc.roa
File:                     E26c2muwOODRFbNaTrm69eUsJWc.roa (raw, json)
Hash identifier:          tLAs+VL2UeQ/JOwFJ5g9+dbu0Af9m7+PCMxAhAf6Anw=
Subject key identifier:   13:6E:9C:DA:6B:B0:38:E0:D1:15:B3:5A:4E:B9:BA:F5:E5:2C:25:67
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0323
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/E26c2muwOODRFbNaTrm69eUsJWc.roa
Signing time:             Thu 24 Oct 2024 01:27:59 +0000
ROA not before:           Thu 24 Oct 2024 01:27:59 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     10013
IP address blocks:        220.150.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 803 (0x323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 24 01:27:59 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=136E9CDA6BB038E0D115B35A4EB9BAF5E52C2567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0b:1d:b7:09:3e:ec:bc:44:fd:85:b1:1f:89:
                    79:02:2f:84:3d:2b:d5:e2:b3:82:f7:8a:53:b4:d5:
                    d8:01:66:b5:97:ec:96:73:61:8c:5a:06:cb:cc:89:
                    18:f0:4e:b9:61:ec:4f:2a:46:2b:50:72:96:f2:47:
                    6f:90:e2:3a:23:db:72:af:e6:57:0a:67:bb:94:0f:
                    b1:c5:1e:d4:4a:72:ef:59:d5:d7:85:35:fe:49:9c:
                    20:43:2c:84:46:2d:60:5d:bc:48:2f:1d:88:4c:bf:
                    6c:26:b3:f6:0f:76:e1:19:c4:15:a4:36:9f:8b:6b:
                    30:3f:78:1b:b8:03:80:fc:d0:6a:66:53:df:d4:e2:
                    5d:33:07:7e:3a:0f:28:15:10:bc:06:89:75:d9:0f:
                    ed:63:96:ef:28:67:ce:18:e4:40:3c:76:b7:63:0e:
                    8b:f3:60:06:f2:54:31:c9:11:93:37:68:8c:e3:72:
                    7f:7c:4d:ad:d3:e2:5a:67:4d:d9:c6:ac:b3:12:4b:
                    4e:11:bf:e4:8e:43:20:b0:ff:e4:17:5b:af:03:ce:
                    ec:f1:b1:b0:6a:fc:d8:cd:47:e9:25:50:9b:61:c9:
                    f4:28:d3:d9:f4:b0:89:3e:59:72:d5:79:19:a3:40:
                    57:e1:ec:36:a6:98:e8:f1:76:b5:43:46:a1:ad:64:
                    30:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6E:9C:DA:6B:B0:38:E0:D1:15:B3:5A:4E:B9:BA:F5:E5:2C:25:67
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/E26c2muwOODRFbNaTrm69eUsJWc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:4c:72:09:8c:96:47:1a:c1:a6:d6:27:44:fd:e5:4c:94:a8:
         0b:59:98:0e:2e:fb:d5:62:d7:ad:83:58:f8:e6:72:a6:e5:39:
         84:64:ed:73:a4:37:4f:a7:ba:94:2a:24:a4:7a:f7:c8:d9:c1:
         a0:9a:8a:0b:7d:96:85:9e:ec:d5:8a:66:20:a0:8c:f2:f5:71:
         f4:49:9d:9f:6d:2f:f7:1d:d4:46:d3:67:55:38:5c:9d:4f:66:
         2f:c1:d0:9a:de:b3:d8:1b:8c:7b:17:a8:ee:a6:9e:49:33:5f:
         8a:27:af:36:2d:dc:28:ab:d9:48:cd:5d:ca:c5:f9:f8:7b:39:
         9a:7a:9b:c8:38:08:5e:1d:78:3e:39:8f:dc:cd:73:9f:cb:25:
         40:60:86:8e:9c:97:5b:6e:a0:91:fd:87:e9:d7:6a:c7:15:88:
         2f:0d:36:14:ce:78:83:71:e5:09:3c:92:1c:8b:c6:ee:dc:7f:
         6d:8c:d3:ed:c3:d8:7e:af:63:4f:70:4b:6f:e9:7a:61:2b:2b:
         74:87:df:7f:27:c8:8d:3a:53:4d:f0:8a:46:88:55:0c:d7:f7:
         8c:6a:b5:41:b1:e0:aa:7c:f2:fa:19:7f:91:9f:8d:a0:6f:61:
         5e:14:bf:f4:5a:26:2a:e6:ef:3d:60:d2:d6:b3:f6:b6:c8:2f:
         d5:47:ea:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org