Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/RbxQgLVk6RUwvdjR_u7PPZL5dn8.roa
File:                     RbxQgLVk6RUwvdjR_u7PPZL5dn8.roa (raw, json)
Hash identifier:          6SR0xTtF1G6mRLONtS7Oqddw06KnqTscrF+B7Zou/XQ=
Subject key identifier:   45:BC:50:80:B5:64:E9:15:30:BD:D8:D1:FE:EE:CF:3D:92:F9:76:7F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       021A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RbxQgLVk6RUwvdjR_u7PPZL5dn8.roa
Signing time:             Fri 31 May 2024 01:29:18 +0000
ROA not before:           Fri 31 May 2024 01:29:18 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        220.150.72.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:29:18 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=45BC5080B564E91530BDD8D1FEEECF3D92F9767F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:e4:c7:8c:80:d0:11:cc:31:c2:0d:36:2e:
                    e3:70:f1:fe:9e:a1:2c:4b:22:51:7e:44:7f:66:6e:
                    ea:2c:d1:5d:db:f9:85:83:ea:d3:44:86:e5:18:df:
                    51:92:97:e3:9a:55:0b:8f:39:b5:8b:e4:e9:9a:9b:
                    97:b4:9e:e8:d3:9c:47:eb:c8:16:cb:32:cd:51:17:
                    62:28:b2:e1:57:47:fb:9a:d1:03:e3:ab:2e:de:64:
                    d4:45:54:11:7b:06:c6:ee:8e:87:a7:49:7b:0c:df:
                    83:31:4f:07:4d:61:bd:28:98:9d:c8:56:06:01:5f:
                    f3:0b:32:55:02:27:3a:70:f8:88:c0:07:f7:d1:92:
                    a3:3c:33:1e:0b:85:d4:18:ae:b4:5e:8a:8a:d4:00:
                    0b:d0:af:18:5f:10:3a:43:48:f6:1f:52:7e:27:b5:
                    1f:26:70:03:75:2c:03:eb:09:e5:a6:6a:15:33:aa:
                    30:47:42:37:23:08:ae:18:95:11:0e:cb:13:5b:51:
                    33:74:d3:a2:ee:53:8a:f3:59:80:c8:72:a3:18:eb:
                    07:63:88:d8:cc:ad:86:b4:f0:f6:2e:56:14:3f:53:
                    39:3f:7e:be:26:06:90:81:e0:68:8e:67:00:24:d6:
                    c1:dc:cc:60:b9:5c:af:45:ae:4b:4d:34:e6:a7:3e:
                    d4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BC:50:80:B5:64:E9:15:30:BD:D8:D1:FE:EE:CF:3D:92:F9:76:7F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RbxQgLVk6RUwvdjR_u7PPZL5dn8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:e2:23:33:e6:6f:23:eb:74:0b:8a:d6:d6:c2:44:c1:1b:31:
         d3:61:66:0d:74:98:39:07:96:f5:5a:41:5d:a7:a8:62:5a:a0:
         b6:e2:e8:b9:76:63:ad:a1:6b:fd:21:05:ca:cf:ba:6b:d7:56:
         ad:0e:03:7f:d6:29:b9:20:63:98:80:96:69:de:a2:56:ad:44:
         dc:e9:a1:62:b5:fe:17:86:68:09:62:2a:e6:b4:ac:e1:5e:34:
         53:de:d1:7f:90:a9:75:28:70:6e:1b:e5:52:13:9c:5c:b7:e9:
         1e:f2:01:c0:88:65:d0:ef:d5:f2:ee:86:39:b2:d8:a6:c7:af:
         57:4d:6a:d1:dc:6a:3d:2d:a3:ac:18:01:be:3a:b8:ec:11:47:
         1a:34:a8:96:e0:09:5a:d9:b1:36:8f:d0:b8:37:55:95:c4:16:
         bb:3c:ef:25:71:2f:0d:17:12:ec:39:80:20:ad:f6:20:8a:28:
         3d:d6:7d:61:ba:c9:dc:de:68:c0:9f:6f:7a:be:00:f9:55:f4:
         2a:6c:42:2f:6f:19:fa:03:54:5b:5f:13:ef:c2:1d:71:ab:f3:
         5d:0f:f2:db:34:09:1c:c8:f0:66:14:ff:a4:40:f5:40:82:e8:
         75:e0:b3:9c:2a:f6:9d:1b:06:07:9c:79:6e:b4:d8:a9:65:5a:
         1e:fe:17:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org