Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/J2ezPxm69eOZm6Gc7tQWYWcuImo.roa
File:                     J2ezPxm69eOZm6Gc7tQWYWcuImo.roa (raw, json)
Hash identifier:          U9Dhrh61yQ/jWH8FQJcQeUvEwh/V/zn4ClfwZY5u4LQ=
Subject key identifier:   27:67:B3:3F:19:BA:F5:E3:99:9B:A1:9C:EE:D4:16:61:67:2E:22:6A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02CF
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/J2ezPxm69eOZm6Gc7tQWYWcuImo.roa
Signing time:             Sun 30 Jun 2024 01:32:16 +0000
ROA not before:           Sun 30 Jun 2024 01:32:16 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     10013
IP address blocks:        180.131.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jun 30 01:32:16 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=2767B33F19BAF5E3999BA19CEED41661672E226A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f4:32:c4:af:47:c0:9d:76:28:db:d4:a3:b4:
                    49:a5:21:6c:c1:c2:9b:1f:4b:b5:f4:7b:93:d1:18:
                    fc:10:dd:26:92:f3:f9:58:80:0d:53:dd:5b:24:bc:
                    38:a4:f3:7a:44:09:36:df:1d:c0:90:3f:87:28:31:
                    c3:5e:4b:65:fb:c9:a0:03:b0:98:2c:26:31:fe:fd:
                    0d:65:3c:de:17:04:34:dc:8e:25:93:16:88:09:93:
                    03:65:6d:a4:01:e5:f5:13:20:97:12:15:d6:a5:68:
                    b1:a8:13:6e:38:54:58:bd:e6:32:9e:7b:0f:0f:20:
                    08:28:e7:b5:0f:9c:8c:00:ce:fb:f4:5c:83:e5:f2:
                    62:3a:ed:d5:7d:60:9f:ed:26:a4:c1:00:6c:8e:a1:
                    a7:bc:d7:2e:c8:da:69:18:04:fc:9e:b0:10:1f:3d:
                    d8:f8:fa:eb:4c:b3:dd:84:e0:bd:77:07:ac:41:1a:
                    6b:81:44:9d:d0:5b:74:27:38:72:58:ba:6c:08:25:
                    c7:b7:74:7c:0d:d6:3e:80:bd:34:3c:6b:a1:ff:0c:
                    99:c5:8c:69:51:02:90:14:2d:39:07:0b:4e:b8:e7:
                    fc:fe:2a:e5:fa:35:4e:e5:0d:e9:60:0f:c8:8b:de:
                    51:06:e9:bd:26:4b:ab:c9:7c:ca:c9:39:29:35:8b:
                    1d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:67:B3:3F:19:BA:F5:E3:99:9B:A1:9C:EE:D4:16:61:67:2E:22:6A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/J2ezPxm69eOZm6Gc7tQWYWcuImo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:33:9f:a4:67:d3:96:93:b5:31:c2:4a:e1:8a:3b:81:81:2b:
         6a:9a:4a:1a:68:bc:cc:18:59:0d:a8:a9:25:1e:d9:91:b8:7a:
         2d:aa:1b:8e:a8:2f:7b:76:b0:d4:57:4c:8a:ff:a3:c4:ce:93:
         d5:60:15:56:50:f7:fb:2b:89:03:79:4b:de:0e:ec:e8:01:a7:
         8b:0a:50:36:8a:80:0d:ae:af:17:9f:c4:87:81:cc:bd:e1:f2:
         e4:c8:61:1b:f6:f0:0e:80:63:d4:d6:bc:1d:38:13:75:06:c1:
         86:86:9c:a7:ff:a0:2a:81:1e:63:09:d4:4d:cd:5e:f9:94:64:
         bb:bb:31:06:6f:fb:68:47:55:74:55:43:bc:3c:2a:7a:92:7c:
         49:8a:8d:75:51:b3:bc:df:c1:e5:2f:aa:f9:ad:81:a1:55:2d:
         69:7f:6f:fa:06:d2:44:1c:6e:20:87:51:21:81:97:3d:b5:50:
         e1:d5:cf:a8:15:00:16:48:9b:01:fa:0d:4b:1e:89:9b:2b:5c:
         01:4a:2c:d7:c8:81:4f:5f:54:09:2a:80:07:22:30:42:d5:03:
         2b:1c:ed:82:04:f2:82:62:0a:04:1c:f1:53:85:bc:8f:2a:90:
         59:99:f3:2d:1b:23:93:d4:4e:d4:a0:d6:5f:b7:d1:4d:77:90:
         f8:37:6f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org