Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/FMwzEW7jMWV8C6ldfVJ-1DCTz2o.roa
File:                     FMwzEW7jMWV8C6ldfVJ-1DCTz2o.roa (raw, json)
Hash identifier:          9D723os19R3PUXYhe4bNOKikOAVJ+8v4Vi2OLSKa63A=
Subject key identifier:   14:CC:33:11:6E:E3:31:65:7C:0B:A9:5D:7D:52:7E:D4:30:93:CF:6A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       031D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/FMwzEW7jMWV8C6ldfVJ-1DCTz2o.roa
Signing time:             Thu 24 Oct 2024 01:24:03 +0000
ROA not before:           Thu 24 Oct 2024 01:24:04 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     10013
IP address blocks:        183.181.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 797 (0x31d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 24 01:24:04 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=14CC33116EE331657C0BA95D7D527ED43093CF6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:92:a7:89:ac:7c:f6:63:bf:9e:95:30:f8:b5:
                    d9:95:24:66:d6:91:c5:37:9c:07:e0:15:4e:62:57:
                    50:87:7e:72:6d:54:3a:2a:a9:f4:ce:d3:6d:90:a2:
                    6c:5d:07:67:5b:6f:cc:94:17:64:5f:3b:3f:5c:97:
                    82:01:aa:e2:52:85:24:1e:a3:67:16:3a:a7:71:09:
                    e8:d3:f4:b3:58:d7:20:7c:69:cd:35:c4:7d:4b:d5:
                    10:f4:ac:29:ea:e7:aa:e1:23:67:19:d1:03:19:39:
                    32:c3:fd:e5:9c:bc:78:15:a3:cb:50:83:9c:d9:2c:
                    cf:2f:61:b8:09:d0:4c:dc:5c:df:1f:9b:24:df:df:
                    1d:a6:cf:50:b9:25:ce:95:70:7f:4a:13:0e:02:67:
                    f8:b8:da:72:bc:37:c1:67:44:76:a2:df:83:50:72:
                    2c:d8:66:47:5b:cf:5d:86:80:c5:b7:6a:7e:5c:60:
                    ab:49:c9:a8:16:2d:8f:c4:57:6d:2f:77:21:44:9c:
                    18:06:b7:9f:2c:4f:37:79:bb:ae:f0:72:f5:1c:c4:
                    16:b4:34:b1:43:0f:80:f6:12:48:0e:e7:8d:6d:e0:
                    b8:1d:a5:da:3c:73:39:c2:1f:9a:33:d0:f0:c3:b3:
                    45:15:d2:92:d7:4a:66:5d:cf:aa:9b:d5:a6:67:cf:
                    11:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CC:33:11:6E:E3:31:65:7C:0B:A9:5D:7D:52:7E:D4:30:93:CF:6A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/FMwzEW7jMWV8C6ldfVJ-1DCTz2o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:4a:a7:7c:b1:21:d7:af:e1:70:47:e4:6e:9d:0c:27:be:08:
         7a:f8:ff:72:e1:34:9f:75:15:2c:a6:55:27:c2:2b:27:51:20:
         de:f0:16:72:04:fe:6f:8c:34:a5:8f:32:35:ae:e4:99:06:c9:
         e8:66:84:b5:36:c5:07:13:ca:74:fb:1c:13:c3:09:f8:c2:44:
         5b:ba:db:1c:bd:d3:8e:b8:97:01:3c:41:45:10:28:5a:f7:fd:
         ce:0e:ba:49:f8:a4:37:ec:51:7e:1d:7d:77:34:8f:87:8b:67:
         3c:8e:b9:6d:f5:3e:38:b4:af:ae:52:f6:28:c9:3d:1b:98:ef:
         50:fe:64:85:8c:ba:9b:cd:c7:45:ff:ee:16:6c:1b:6c:57:54:
         95:b1:8a:90:bb:72:0a:40:50:8a:ef:bc:5d:d3:a7:5a:6f:b0:
         1b:d3:32:be:85:8f:0c:bc:73:da:a4:65:0b:fd:d5:22:02:d9:
         6f:b4:26:07:c0:db:a2:30:b0:2a:c8:f1:65:15:2d:3d:f6:64:
         1b:cb:cf:04:ad:fb:0a:89:02:0b:b3:77:af:ff:5d:59:1c:3b:
         95:8b:8a:1c:eb:c4:00:78:c1:f3:72:cb:04:4f:3b:04:5d:8f:
         91:67:b7:ff:b1:f0:18:0a:d8:05:9e:d4:6a:b2:5c:e3:6a:99:
         c2:8c:0f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:32 2025 by rpki-client