Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/IgvH3pn5pSPPr03209pipIEt20E.roa
File:                     IgvH3pn5pSPPr03209pipIEt20E.roa (raw, json)
Hash identifier:          hfCKy+T1J1yceRrXtWyIUOv6dnYTULp4LqbSa8rE9m4=
Subject key identifier:   22:0B:C7:DE:99:F9:A5:23:CF:AF:4D:F6:D3:DA:62:A4:81:2D:DB:41
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       029E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IgvH3pn5pSPPr03209pipIEt20E.roa
Signing time:             Fri 31 May 2024 01:39:49 +0000
ROA not before:           Fri 31 May 2024 01:39:49 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        175.103.184.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:39:49 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=220BC7DE99F9A523CFAF4DF6D3DA62A4812DDB41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:6e:e6:03:71:c7:5d:b9:4c:da:0d:b8:6f:
                    36:b8:be:78:7b:84:1f:6f:f1:71:b3:27:b5:19:b9:
                    a2:f7:0a:65:a5:dc:f4:e3:4d:52:e6:3a:4f:64:37:
                    07:6f:6f:76:7c:94:31:49:a5:3b:22:96:a3:26:7c:
                    d0:17:3f:7c:d3:cc:4f:a0:fe:44:7a:33:a4:76:c9:
                    e4:6d:92:7f:8b:fc:78:44:cc:c7:70:4e:06:d1:b5:
                    97:bd:ef:d7:8e:f0:07:82:33:44:41:d0:0a:1d:ac:
                    26:ad:0d:2b:9b:5f:4f:17:b4:26:0d:78:d6:51:90:
                    21:c4:d3:7b:0f:2d:24:c0:d1:d4:05:87:bf:e2:85:
                    de:a5:83:bf:2a:af:7f:c0:b1:1e:48:fa:c6:51:cb:
                    f4:fd:5f:ad:44:fb:f0:52:d4:c9:7e:00:c4:5d:23:
                    cc:ab:8e:68:e1:5e:dd:bc:26:d8:ee:62:60:f9:26:
                    af:1f:51:82:d4:14:70:a1:b1:d0:c3:d2:96:2d:b8:
                    75:bb:78:a6:4f:74:3e:47:eb:ee:8e:e9:58:21:f8:
                    a3:31:ed:c9:26:4c:fd:3d:bf:8d:98:3d:e4:af:f0:
                    bf:af:80:f3:03:7d:05:6f:53:f1:9e:08:3b:18:c6:
                    f3:21:3e:13:f8:fd:52:20:50:d4:53:9f:d6:64:5d:
                    a3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0B:C7:DE:99:F9:A5:23:CF:AF:4D:F6:D3:DA:62:A4:81:2D:DB:41
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IgvH3pn5pSPPr03209pipIEt20E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:9f:2a:6c:31:58:12:93:39:cf:22:12:15:f5:52:9f:0e:3a:
         f1:ac:a3:e7:6e:71:1b:f2:34:f9:9d:de:5b:3e:bf:a0:87:20:
         fc:61:d7:db:a9:88:3f:d9:89:c5:80:99:9f:78:de:74:62:92:
         a1:b5:5e:d4:4d:c4:c7:96:46:fd:a8:c4:45:6b:91:55:49:b1:
         ce:c4:e3:67:ba:fc:84:4d:b0:ae:f7:3a:78:c7:cc:5e:31:42:
         38:83:0b:7b:47:78:7a:06:a7:3e:35:8b:1a:83:97:16:24:63:
         54:85:cd:c4:af:92:c4:3e:59:ad:8c:a8:0e:87:a4:35:9f:f3:
         1e:d7:3f:65:e9:f3:ae:e4:e5:49:68:96:5b:37:7c:20:d5:3b:
         6a:a6:33:6b:fb:f1:b7:ba:c1:23:70:2d:1c:a9:2a:ad:95:a8:
         2f:48:fb:ef:96:20:33:b7:af:b1:25:f7:91:f0:77:94:57:27:
         dc:cb:a5:c4:e3:f4:fa:9e:2e:72:98:29:29:ab:32:b3:c0:4c:
         6b:50:31:89:aa:5f:46:ca:33:23:c1:00:06:f2:b0:b6:a1:35:
         43:f5:3a:22:8f:a1:09:97:d9:46:84:ed:81:a3:b3:6e:83:26:
         7a:ec:dd:00:aa:4b:bd:1e:c4:f1:d1:79:6e:61:d0:d0:1b:ab:
         ff:60:30:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org