Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/IFrYkCgBxysdW-hY9YG0k7SOpeQ.roa
File:                     IFrYkCgBxysdW-hY9YG0k7SOpeQ.roa (raw, json)
Hash identifier:          zjIBylhi8EnwBpmQfjS8fmgDrSumZKjGp18SWhVSbx4=
Subject key identifier:   20:5A:D8:90:28:01:C7:2B:1D:5B:E8:58:F5:81:B4:93:B4:8E:A5:E4
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0286
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IFrYkCgBxysdW-hY9YG0k7SOpeQ.roa
Signing time:             Fri 31 May 2024 01:39:39 +0000
ROA not before:           Fri 31 May 2024 01:39:39 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        119.150.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646 (0x286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:39:39 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=205AD8902801C72B1D5BE858F581B493B48EA5E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:d1:d5:32:84:0f:31:52:ce:1e:3e:00:36:
                    b0:5a:6d:be:33:86:15:4a:ee:bf:a3:20:e9:cf:1d:
                    17:e8:3e:28:c9:d4:5a:89:86:f5:4f:32:59:b3:5c:
                    00:ae:1f:8d:bf:00:0d:cf:60:ff:b8:f4:e0:b7:12:
                    07:e8:20:35:c1:9f:c2:ff:33:f2:62:af:fe:2a:52:
                    3b:77:b1:0b:92:8f:d2:ab:36:e9:e5:bb:2d:61:4f:
                    c9:a2:3f:a1:f4:5a:67:d7:90:c5:89:f7:df:b5:ad:
                    7d:b2:4b:d2:ae:69:47:4f:fe:8d:fe:51:aa:af:53:
                    15:97:4d:28:4c:a7:36:fe:57:4b:fb:5d:fa:77:ca:
                    84:db:f7:5b:9c:b4:02:03:b1:b0:19:5f:12:17:a3:
                    13:c4:05:bb:e8:f2:43:5f:24:74:b5:dc:35:01:19:
                    87:ba:ba:89:46:4a:ab:62:4a:61:5e:19:20:8c:ce:
                    9a:63:6e:26:c1:9c:22:20:3a:f6:4b:b6:f1:d6:e3:
                    eb:94:05:07:a9:be:2c:a5:4b:7a:51:24:91:74:13:
                    dd:65:2d:0b:34:62:34:64:b1:d6:2d:c2:3d:52:5e:
                    f1:6c:bd:68:f9:bb:1c:55:80:f5:83:40:4e:c1:94:
                    e3:00:62:1a:59:3a:6e:fe:e7:52:94:80:22:4e:e9:
                    e7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5A:D8:90:28:01:C7:2B:1D:5B:E8:58:F5:81:B4:93:B4:8E:A5:E4
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IFrYkCgBxysdW-hY9YG0k7SOpeQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         18:17:bb:e3:1a:6a:e2:62:bc:fd:89:ba:62:cf:8a:b4:e6:26:
         06:ca:c5:f0:67:05:ea:94:3c:6c:18:ef:18:48:91:d6:07:03:
         f9:1b:91:23:ed:f5:d6:84:53:ee:fd:21:96:4b:6a:63:93:d2:
         df:5b:be:9d:21:b5:96:f4:cc:a2:12:c6:3d:8a:f0:c6:0f:76:
         07:fe:be:fd:9b:06:8f:58:bd:45:4a:8e:3f:a0:49:af:5a:cf:
         c6:77:39:01:40:cb:89:28:6b:42:82:df:03:45:31:1a:af:58:
         9a:21:65:65:59:e2:dc:dc:37:dc:f8:e6:11:d4:b5:70:35:46:
         a1:a5:8b:99:3d:13:9c:8c:64:7c:37:d9:56:06:cb:cf:90:1f:
         f2:c1:a4:3e:f0:4d:e5:25:55:d2:87:f1:97:f8:b3:56:f9:33:
         f1:42:d2:f9:d2:15:bf:58:af:a1:5b:a4:73:f4:65:af:74:75:
         d2:07:41:3c:1c:08:7b:84:dd:c7:b7:7e:c8:2d:36:4a:98:e8:
         80:15:b4:02:35:e1:be:cc:c4:86:50:fb:fd:a8:a0:2a:d4:40:
         25:2b:0d:21:ba:c6:b4:2a:88:04:f7:77:36:dd:56:9c:78:e9:
         ca:19:fe:66:b9:dc:78:2b:4b:c1:47:bf:12:f8:3a:f4:89:be:
         bc:cd:fe:99
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw
MTM5MzlaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDIwNUFEODkwMjgwMUM3
MkIxRDVCRTg1OEY1ODFCNDkzQjQ4RUE1RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2kdHVMoQPMVLOHj4ANrBabb4zhhVK7r+jIOnPHRfoPijJ1FqJ
hvVPMlmzXACuH42/AA3PYP+49OC3EgfoIDXBn8L/M/Jir/4qUjt3sQuSj9KrNunl
uy1hT8miP6H0WmfXkMWJ99+1rX2yS9KuaUdP/o3+UaqvUxWXTShMpzb+V0v7Xfp3
yoTb91uctAIDsbAZXxIXoxPEBbvo8kNfJHS13DUBGYe6uolGSqtiSmFeGSCMzppj
bibBnCIgOvZLtvHW4+uUBQepviylS3pRJJF0E91lLQs0YjRksdYtwj1SXvFsvWj5
uxxVgPWDQE7BlOMAYhpZOm7+51KUgCJO6eeDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUIFrYkCgBxysdW+hY9YG0k7SOpeQwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L0lGcllrQ2dCeHlzZFctaFk5WUcwazdTT3BlUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZ3loAwDQYJKoZIhvcNAQELBQADggEBABgXu+MaauJivP2JumLPirTmJgbK
xfBnBeqUPGwY7xhIkdYHA/kbkSPt9daEU+79IZZLamOT0t9bvp0htZb0zKISxj2K
8MYPdgf+vv2bBo9YvUVKjj+gSa9az8Z3OQFAy4koa0KC3wNFMRqvWJohZWVZ4tzc
N9z45hHUtXA1RqGli5k9E5yMZHw32VYGy8+QH/LBpD7wTeUlVdKH8Zf4s1b5M/FC
0vnSFb9Yr6FbpHP0Za90ddIHQTwcCHuE3ce3fsgtNkqY6IAVtAI14b7MxIZQ+/2o
oCrUQCUrDSG6xrQqiAT3dzbdVpx46coZ/ma53HgrS8FHvxL4OvSJvrzN/pk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:21 2024 by rpki-client on console-fra.rpki-client.org