Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/EpgCfcqgxZsdNSSZdPzyjiK129k.roa
File:                     EpgCfcqgxZsdNSSZdPzyjiK129k.roa (raw, json)
Hash identifier:          QrnYoxnv8Cri64bQz8EU2IH5d9IsPNtgnX+VVAzWrf8=
Subject key identifier:   12:98:02:7D:CA:A0:C5:9B:1D:35:24:99:74:FC:F2:8E:22:B5:DB:D9
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0304
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EpgCfcqgxZsdNSSZdPzyjiK129k.roa
Signing time:             Thu 17 Oct 2024 01:41:03 +0000
ROA not before:           Thu 17 Oct 2024 01:41:03 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     10013
IP address blocks:        111.235.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 772 (0x304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 17 01:41:03 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=1298027DCAA0C59B1D35249974FCF28E22B5DBD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:7d:42:b3:73:52:98:ca:42:77:04:65:6d:
                    c6:73:45:c8:46:7a:09:eb:29:d5:38:a8:54:52:a7:
                    f3:79:cd:60:67:4b:32:19:fb:57:eb:22:12:39:15:
                    63:fa:9d:12:42:bb:f7:3c:0c:5b:d5:91:7d:38:62:
                    75:15:06:42:17:d5:0d:ba:c5:c0:13:cd:93:1b:02:
                    b3:ec:4e:ee:2c:3d:2c:23:f0:a4:11:cc:f8:1d:3e:
                    d6:3d:b9:3c:7b:f1:c5:50:71:0f:37:21:13:66:82:
                    99:a5:98:d7:de:6e:a0:84:3c:b1:1d:09:ef:70:30:
                    f7:35:0a:96:c1:23:ef:ba:bc:9f:87:88:d8:c3:2d:
                    67:96:04:2c:ad:4c:25:b3:a2:43:7a:5f:f8:a8:79:
                    a9:4e:f3:37:3c:5d:06:07:26:5a:f7:f6:9d:45:75:
                    d1:cf:30:a4:ca:6a:5a:49:17:b4:41:22:fc:39:fc:
                    08:ea:55:dc:3d:e3:ab:a1:13:9e:ce:ba:ad:1b:8e:
                    61:91:dc:05:b1:2d:58:42:a9:bc:0f:3a:0e:2c:3c:
                    0e:5d:48:50:8a:91:b8:04:6e:19:7b:bd:15:e0:6a:
                    7f:34:eb:1c:da:ce:8c:26:77:de:4d:59:ac:70:aa:
                    83:3f:8c:25:f0:0f:6a:ad:32:a2:32:a3:fa:86:e6:
                    dc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:98:02:7D:CA:A0:C5:9B:1D:35:24:99:74:FC:F2:8E:22:B5:DB:D9
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EpgCfcqgxZsdNSSZdPzyjiK129k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.235.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:e7:37:51:32:b3:f7:de:5c:cb:47:05:9c:0f:e4:14:78:d0:
         f6:c5:37:54:9c:12:14:11:d9:61:a7:72:4f:f1:da:99:1f:fd:
         bf:b0:4e:39:fe:79:94:4e:4c:1b:53:44:00:25:ca:5e:c3:2e:
         02:31:ac:97:fe:4a:74:a2:5c:8c:fa:ae:37:2c:70:d8:46:6d:
         01:09:46:7b:81:10:31:6a:ca:9d:6b:d7:5f:d8:90:68:8f:5d:
         a2:80:b2:80:e7:2b:bb:98:9e:b6:19:ba:32:09:82:9a:73:6c:
         b1:4d:c7:e9:99:c5:20:0f:b7:80:21:5a:e1:f5:27:1b:46:49:
         c4:9f:44:63:88:27:e8:30:ea:4c:d2:e5:52:4a:9f:b8:3e:26:
         94:d5:79:44:1b:16:3a:43:41:05:7d:09:f3:8b:4b:ca:d9:27:
         92:9e:d5:49:91:c1:ec:ca:ac:13:4b:61:10:cb:73:f9:04:7f:
         53:e0:1a:d6:90:ef:83:24:fd:5e:a4:2e:26:7e:12:83:73:e2:
         05:36:57:d7:4e:21:ad:72:3a:32:a1:dd:19:22:9e:d3:57:64:
         d2:11:a4:4b:88:f0:86:85:1b:bc:a3:2f:66:e0:75:99:90:c8:
         64:fd:18:e7:2a:61:59:cb:1b:9a:75:1c:5e:a0:83:75:69:f1:
         5f:e6:f8:7e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAwQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMTcw
MTQxMDNaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDEyOTgwMjdEQ0FBMEM1
OUIxRDM1MjQ5OTc0RkNGMjhFMjJCNURCRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpxX1Cs3NSmMpCdwRlbcZzRchGegnrKdU4qFRSp/N5zWBnSzIZ
+1frIhI5FWP6nRJCu/c8DFvVkX04YnUVBkIX1Q26xcATzZMbArPsTu4sPSwj8KQR
zPgdPtY9uTx78cVQcQ83IRNmgpmlmNfebqCEPLEdCe9wMPc1CpbBI++6vJ+HiNjD
LWeWBCytTCWzokN6X/ioealO8zc8XQYHJlr39p1FddHPMKTKalpJF7RBIvw5/Ajq
Vdw946uhE57Ouq0bjmGR3AWxLVhCqbwPOg4sPA5dSFCKkbgEbhl7vRXgan806xza
zowmd95NWaxwqoM/jCXwD2qtMqIyo/qG5tyzAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUEpgCfcqgxZsdNSSZdPzyjiK129kwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L0VwZ0NmY3FneFpzZE5TU1pkUHp5amlLMTI5ay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFv6yQwDQYJKoZIhvcNAQELBQADggEBAILnN1Eys/feXMtHBZwP5BR40PbF
N1ScEhQR2WGnck/x2pkf/b+wTjn+eZROTBtTRAAlyl7DLgIxrJf+SnSiXIz6rjcs
cNhGbQEJRnuBEDFqyp1r11/YkGiPXaKAsoDnK7uYnrYZujIJgppzbLFNx+mZxSAP
t4AhWuH1JxtGScSfRGOIJ+gw6kzS5VJKn7g+JpTVeUQbFjpDQQV9CfOLS8rZJ5Ke
1UmRwezKrBNLYRDLc/kEf1PgGtaQ74Mk/V6kLiZ+EoNz4gU2V9dOIa1yOjKh3Rki
ntNXZNIRpEuI8IaFG7yjL2bgdZmQyGT9GOcqYVnLG5p1HF6gg3Vp8V/m+H4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:21 2024 by rpki-client on console-fra.rpki-client.org