Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/OYu8NMyVcVb0d5N0R8ecSE03TpA.roa
File:                     OYu8NMyVcVb0d5N0R8ecSE03TpA.roa (raw, json)
Hash identifier:          VIvEnCTq9t6ZDAhcrUmK8LdVCI34d65KXtJiUfPNNJI=
Subject key identifier:   39:8B:BC:34:CC:95:71:56:F4:77:93:74:47:C7:9C:48:4D:37:4E:90
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0225
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OYu8NMyVcVb0d5N0R8ecSE03TpA.roa
Signing time:             Fri 31 May 2024 01:33:06 +0000
ROA not before:           Fri 31 May 2024 01:33:06 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        36.54.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:33:06 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=398BBC34CC957156F477937447C79C484D374E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:31:50:ce:c4:73:ab:27:b2:f3:0c:bb:a2:58:
                    fc:f0:90:44:84:19:0a:4e:e3:a3:28:b4:e1:e8:17:
                    74:6c:e7:42:54:d0:50:60:9a:8d:ad:90:85:27:a6:
                    8d:51:94:29:a7:b8:d3:cd:62:f0:59:c9:61:f6:76:
                    5a:b9:40:3d:e8:07:7c:7a:6a:3a:2d:18:4b:ce:78:
                    f4:19:ab:68:f8:87:8f:98:7a:c4:2c:c3:51:59:29:
                    1d:41:83:bc:5f:58:c1:c3:1d:85:1e:cf:84:4e:e0:
                    3a:97:db:f7:85:b6:b3:ed:eb:d0:3f:e3:c9:48:a2:
                    ea:9d:cd:9d:c5:76:df:a7:35:a7:c9:61:55:92:0b:
                    80:52:d5:05:02:59:2d:de:7e:bd:b4:18:fd:84:1f:
                    74:89:2d:4f:d1:70:5c:2c:c2:e3:fe:40:39:23:1a:
                    43:d4:09:ce:be:ad:76:03:8c:4a:46:10:a5:b2:f3:
                    c8:6c:05:0e:b4:41:cf:39:b4:68:5c:c6:ed:0f:02:
                    43:0c:80:d4:33:12:02:ef:45:63:4e:0b:56:16:c5:
                    83:38:1f:2c:bf:a0:3d:59:11:b1:6d:c9:6b:2e:fb:
                    62:03:b0:9f:03:80:6e:01:f8:d0:42:56:a7:73:81:
                    0a:3d:40:f7:50:9c:03:dd:d5:ca:9b:d6:80:73:33:
                    68:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8B:BC:34:CC:95:71:56:F4:77:93:74:47:C7:9C:48:4D:37:4E:90
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OYu8NMyVcVb0d5N0R8ecSE03TpA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.54.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:d7:b1:41:1a:2d:40:3b:0c:71:80:8e:e1:4c:80:c3:12:17:
         89:b3:7a:25:68:6f:3d:7c:9f:2d:27:8d:1b:bb:c2:d9:36:80:
         3b:da:6d:ce:82:5d:5c:00:5b:74:fb:74:f4:3f:25:30:fa:3d:
         15:fd:4e:90:55:8c:64:2c:d6:87:a9:1e:28:eb:fa:4a:69:63:
         3b:21:c3:6a:16:bc:f4:78:ef:c8:0c:be:5d:d7:d5:aa:7c:41:
         cb:37:7e:35:0a:44:d4:4f:93:0b:79:2e:05:b8:6f:7e:c9:0f:
         4b:40:35:d8:8f:6f:91:f7:18:a0:25:c2:d0:7c:7c:a6:c5:89:
         bc:a1:bd:22:b0:f0:5b:ad:c2:bd:a1:5c:82:67:bf:de:3d:b5:
         a0:2f:9e:3a:d8:ae:2f:16:73:e1:06:b0:98:46:5f:a3:fe:83:
         1a:ee:15:2c:29:a9:79:25:dd:ab:ca:99:24:01:e6:55:77:6c:
         c8:14:2d:a3:a4:54:e8:fd:a1:f3:9f:72:4e:3f:82:99:60:42:
         0d:d0:65:3b:5c:27:38:62:9e:48:dc:8e:ef:84:9e:dc:85:f2:
         72:be:d5:f9:9b:c4:0a:dc:26:bb:c4:78:49:51:09:23:8e:6d:
         1b:8a:d0:32:ee:a0:80:55:ee:0d:58:bc:57:30:20:dd:c9:5c:
         ce:87:62:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:17:14 2024 by rpki-client on console-fra.rpki-client.org