Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/TcEbg7IYynd13ATaPENysYT-HO8.roa
File:                     TcEbg7IYynd13ATaPENysYT-HO8.roa (raw, json)
Hash identifier:          ZY1xyBY8xh/OYyXMjpgtJ3GTMfCnF+3+qN8aDYlXCPk=
Subject key identifier:   4D:C1:1B:83:B2:18:CA:77:75:DC:04:DA:3C:43:72:B1:84:FE:1C:EF
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02EB
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TcEbg7IYynd13ATaPENysYT-HO8.roa
Signing time:             Fri 11 Oct 2024 01:16:46 +0000
ROA not before:           Fri 11 Oct 2024 01:16:46 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        36.52.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 747 (0x2eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 11 01:16:46 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=4DC11B83B218CA7775DC04DA3C4372B184FE1CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:95:1f:a7:07:02:2a:62:2f:67:ee:a0:81:
                    3b:aa:0d:13:d1:2d:f0:dd:0d:74:58:c3:20:23:1a:
                    e5:a3:6f:e6:e2:9a:17:e4:d0:b9:86:57:19:64:48:
                    c5:50:2e:aa:cc:12:79:ec:5d:20:e3:91:05:58:96:
                    f3:87:e1:e7:73:5d:92:ca:38:fe:54:66:c5:1d:46:
                    6c:70:a7:bb:95:2c:27:55:9a:b6:e3:39:91:9d:83:
                    62:d4:7e:62:b8:cc:19:e5:19:02:a3:63:7f:07:16:
                    da:a0:d2:a0:f0:13:d8:57:b6:8b:5d:9c:b5:72:a0:
                    b3:0e:08:9e:03:4a:df:fc:cb:5e:03:63:ad:e7:d1:
                    5c:10:71:2e:ff:70:cb:c8:af:68:7b:2f:7d:89:57:
                    a3:21:1f:12:e1:2b:d4:ff:27:60:e9:c4:be:18:c8:
                    7a:d9:a7:46:ba:24:d5:47:d7:97:bb:90:8c:32:64:
                    6f:a4:3b:be:af:c4:05:1f:7b:b2:eb:b9:bd:1d:ad:
                    92:de:fc:70:7d:1e:d6:2a:48:ac:aa:80:ea:04:d5:
                    9b:7d:d1:43:b2:dd:64:93:cf:99:b0:0c:d3:f9:81:
                    80:c6:b1:4d:c5:65:85:54:ac:bb:7f:4f:0b:52:af:
                    eb:b4:af:f9:0c:58:29:f5:ed:d7:c3:06:ff:53:fa:
                    da:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C1:1B:83:B2:18:CA:77:75:DC:04:DA:3C:43:72:B1:84:FE:1C:EF
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TcEbg7IYynd13ATaPENysYT-HO8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:fa:c2:82:46:70:cc:5c:d6:bb:be:48:e6:e6:af:2c:3c:0c:
         fe:dc:7d:8e:29:25:b7:3a:97:5f:b6:77:8d:a2:37:7f:2d:48:
         8e:9a:f7:26:c2:6a:cf:af:2e:a0:ab:e6:49:dd:50:c6:69:28:
         2a:b3:b4:24:f5:7e:ba:e1:eb:90:e2:6c:ad:fa:66:82:20:2f:
         fd:d6:83:02:76:96:8b:32:fb:a1:a3:8f:66:64:2e:1e:3d:ed:
         d0:e3:cc:88:bb:ef:93:f9:72:b2:0a:80:89:79:6d:49:a7:84:
         95:8a:a2:b7:d7:a1:94:69:d4:f6:d2:3d:7a:e3:ea:ad:f7:9b:
         7f:d1:6f:04:b0:c7:6a:43:a6:e3:80:86:c8:3b:6e:8e:21:12:
         9b:3a:65:12:6e:8f:ec:e5:c4:90:c4:bf:ec:19:cd:75:c1:30:
         08:d7:3d:65:6c:b4:d0:21:e4:be:11:57:76:74:2a:1c:10:bc:
         f8:45:7d:9d:33:0f:1b:10:99:a1:fe:15:63:64:2d:84:58:f1:
         70:58:2f:98:e6:e2:58:06:7c:9c:1f:05:87:0f:0d:be:5f:3c:
         83:58:c3:bb:b7:93:4f:34:41:99:10:19:e2:31:8c:78:6c:a2:
         a9:fe:f4:69:3b:f8:1c:50:f9:ea:5e:03:7e:22:8f:b5:3f:e1:
         79:d4:9d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org