Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/JWWUCrAIJVfdXcTjOX6xjgAgY60.roa
File:                     JWWUCrAIJVfdXcTjOX6xjgAgY60.roa (raw, json)
Hash identifier:          Igo/4L4NQoBKLgUpZb7qCzfQqXIKQoarT4WKOtGRvy4=
Subject key identifier:   25:65:94:0A:B0:08:25:57:DD:5D:C4:E3:39:7E:B1:8E:00:20:63:AD
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02DB
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JWWUCrAIJVfdXcTjOX6xjgAgY60.roa
Signing time:             Mon 30 Sep 2024 01:28:38 +0000
ROA not before:           Mon 30 Sep 2024 01:28:38 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     4686
IP address blocks:        124.255.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731 (0x2db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Sep 30 01:28:38 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=2565940AB0082557DD5DC4E3397EB18E002063AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:05:10:ca:3c:7b:bd:fb:c2:4c:0e:9a:33:3f:
                    1e:22:c4:a4:e5:55:15:4e:45:29:2f:57:42:3c:2e:
                    81:52:84:96:2e:8b:47:77:92:5c:37:b5:31:32:47:
                    fa:8f:20:d4:f9:0f:17:ae:b3:7a:4f:81:90:7c:5c:
                    c9:cb:fb:75:a6:9b:38:6f:ba:e1:a8:6c:72:25:d9:
                    02:d5:f4:65:59:26:b3:21:f3:94:8f:9e:11:ff:73:
                    23:4d:08:8a:b3:0e:c3:6a:3e:d7:11:a1:33:d5:8f:
                    5e:12:72:14:a2:a3:3d:33:5c:51:73:3a:2e:07:3b:
                    c1:af:f9:e9:37:9a:79:de:69:e6:d3:76:b4:e6:6b:
                    53:e4:f0:13:34:01:3c:e5:d0:ed:5f:0b:f9:92:b4:
                    64:cf:a8:fe:73:5c:81:3f:09:02:3e:23:1b:a2:77:
                    b2:57:32:6d:e5:e9:55:a4:d0:7f:f7:bd:45:26:48:
                    c2:01:1c:1e:c6:c3:0a:d6:7b:f5:18:ce:f0:e8:cc:
                    f4:02:96:ec:d8:b8:80:ca:1a:98:f7:f8:12:57:bb:
                    cd:23:8e:0f:60:90:01:85:0f:33:e5:fe:5a:73:4a:
                    b1:60:33:b6:4b:e6:be:00:02:2d:5a:54:a8:50:bb:
                    0c:4f:eb:c6:a7:b0:fc:ea:16:6f:74:82:94:9a:6e:
                    a1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:65:94:0A:B0:08:25:57:DD:5D:C4:E3:39:7E:B1:8E:00:20:63:AD
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JWWUCrAIJVfdXcTjOX6xjgAgY60.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.255.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:fe:93:c9:85:a3:06:b1:b6:dd:ce:95:86:a8:4f:fd:87:15:
         b5:50:b4:4f:ad:c7:72:3d:8b:7d:24:5e:37:ae:e9:31:67:2f:
         66:82:0a:b8:a7:76:4b:bf:7e:f6:e7:ea:68:61:71:bf:aa:f1:
         d4:06:26:db:af:8d:61:1e:02:42:5b:31:b2:d6:d1:33:19:82:
         da:05:75:f0:8d:d2:9e:29:b5:ed:d1:bb:47:76:32:6e:62:0a:
         02:7e:8e:6e:da:78:bb:08:9f:ff:47:2d:a6:7b:f3:ca:4e:bd:
         89:82:02:82:1a:f0:e9:88:02:c8:94:d2:3f:45:66:29:bc:77:
         b6:1a:d8:30:f9:5f:25:c1:b2:79:39:6c:eb:3e:28:c2:f1:dd:
         36:1c:96:18:3b:22:a1:22:c3:c9:eb:e8:b5:54:68:71:86:5d:
         9d:49:0b:b7:fb:b8:0b:30:53:2f:17:ca:50:63:53:f4:47:5f:
         42:c9:4e:78:b0:b0:4e:1c:a7:e4:14:4a:1a:13:2d:bc:fd:6f:
         4b:60:84:54:e3:84:ac:ce:5f:7e:3f:29:84:3f:1d:8b:d7:94:
         5e:0b:5c:61:55:02:99:5e:34:ae:7a:20:b5:c6:42:82:90:46:
         f9:29:ae:b3:41:09:42:fb:4c:9a:53:c0:4e:56:57:fc:e6:85:
         86:d7:74:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:20 2024 by rpki-client on console-ams.rpki-client.org