Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/EWyFrYLT6qI1NRTafdIKnw2LPcI.roa
File:                     EWyFrYLT6qI1NRTafdIKnw2LPcI.roa (raw, json)
Hash identifier:          Voay8bIXiJv7jJwCZlkacSjh8AvQFk02gRW9/gLIh6I=
Subject key identifier:   11:6C:85:AD:82:D3:EA:A2:35:35:14:DA:7D:D2:0A:9F:0D:8B:3D:C2
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0224
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EWyFrYLT6qI1NRTafdIKnw2LPcI.roa
Signing time:             Fri 31 May 2024 01:33:06 +0000
ROA not before:           Fri 31 May 2024 01:33:06 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        36.54.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:33:06 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=116C85AD82D3EAA2353514DA7DD20A9F0D8B3DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:f6:86:b3:00:f1:cc:0a:c1:87:1c:48:2c:
                    2f:2e:7f:95:fb:91:64:3e:0c:49:9f:54:f6:74:05:
                    a9:ff:48:92:69:5b:53:f8:b4:10:82:81:7f:0f:39:
                    3e:3c:71:fd:20:6d:6d:43:10:fa:16:42:11:78:fb:
                    b0:64:2e:47:48:53:aa:0a:5c:02:68:57:b9:3b:06:
                    52:ec:71:d7:ac:94:4f:a4:38:bb:d3:c2:41:9f:c4:
                    26:88:02:0e:e0:d8:a6:97:9f:07:f0:ad:4b:bf:82:
                    86:ae:3e:6e:0b:4b:36:a2:d6:2d:c2:f7:77:1b:42:
                    d7:c9:63:01:3d:47:25:55:52:d3:26:52:c7:5c:8f:
                    ba:8e:c8:1a:26:1d:f8:8f:73:eb:12:42:27:a1:02:
                    65:d2:59:30:69:09:3f:1f:a5:43:39:7a:26:d2:6e:
                    46:7e:92:e7:85:40:d7:0f:35:52:dd:44:3c:1b:85:
                    c3:8a:e3:e4:48:e5:63:a8:93:1a:9b:c4:32:ac:85:
                    07:b9:df:ff:94:6b:1e:e0:4d:92:8d:76:3f:36:b6:
                    83:43:2e:0d:1b:da:a1:a8:7a:35:90:3f:b0:ac:d3:
                    cb:2f:29:d2:f6:3c:85:eb:13:3a:c6:a6:e9:6e:4b:
                    14:97:81:90:5c:2f:01:d2:8e:ca:5f:25:78:eb:24:
                    ce:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6C:85:AD:82:D3:EA:A2:35:35:14:DA:7D:D2:0A:9F:0D:8B:3D:C2
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EWyFrYLT6qI1NRTafdIKnw2LPcI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.54.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:68:06:69:db:60:18:6f:75:1d:39:86:99:d1:f9:d0:f5:ce:
         8e:29:48:9f:23:02:61:6c:8d:74:b5:7e:89:4c:65:38:d5:10:
         5c:a2:a3:23:24:44:9c:03:d9:80:e4:ae:aa:ee:e7:e9:d0:e3:
         2c:56:e5:a2:5f:0f:99:5a:42:7f:d6:01:37:c4:a7:28:15:b1:
         76:bc:8a:fe:5b:69:a1:0e:c6:dc:56:6f:e5:f1:ac:33:ae:d8:
         42:8c:41:b7:57:92:a9:b9:0b:6f:fc:87:08:20:96:6e:db:89:
         3b:b4:18:ed:5f:fc:16:4b:5d:83:ee:6f:bf:60:b8:6a:a1:fe:
         85:7c:58:63:6f:7f:fa:f1:57:0b:a4:61:68:58:a9:a2:bf:8d:
         de:24:36:b8:7e:22:71:cf:93:44:f1:4f:d6:29:bc:70:61:2d:
         33:91:42:57:08:c0:91:26:4a:b0:de:14:6f:94:86:74:5c:a1:
         dc:e4:e7:a2:4f:00:a7:95:ef:b7:66:a3:b6:b8:ca:79:a4:69:
         18:d6:a6:10:c5:eb:8c:83:aa:dc:ff:ba:b0:22:39:22:89:b3:
         6c:89:20:9a:d2:b0:b6:8e:fd:a6:75:10:0b:5e:06:54:18:89:
         9c:44:1a:03:03:64:2b:f3:7d:a1:41:da:5b:4c:61:72:3c:8d:
         f3:6f:72:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:21 2024 by rpki-client on console-fra.rpki-client.org