Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZUxw36bSFS2fLbJTc0s3FIchg1Y.roa
File:                     ZUxw36bSFS2fLbJTc0s3FIchg1Y.roa (raw, json)
Hash identifier:          GeRDABqMSmwo6o3bPR/rBFjxPIQSNolVsBHiFahd5xo=
Subject key identifier:   65:4C:70:DF:A6:D2:15:2D:9F:2D:B2:53:73:4B:37:14:87:21:83:56
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0245
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZUxw36bSFS2fLbJTc0s3FIchg1Y.roa
Signing time:             Fri 31 May 2024 01:35:31 +0000
ROA not before:           Fri 31 May 2024 01:35:31 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        210.170.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:35:31 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=654C70DFA6D2152D9F2DB253734B371487218356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:1f:01:80:9a:41:24:04:4d:81:b8:bb:5a:
                    30:53:02:73:fa:a6:de:e1:06:f6:e1:24:96:60:04:
                    62:18:d9:e7:46:0f:70:c9:58:08:37:8a:7b:e1:68:
                    80:4a:d6:59:81:0b:a2:84:7c:46:d1:07:af:10:c6:
                    52:c1:33:81:ec:cb:c2:33:e7:05:12:00:e3:77:58:
                    28:17:15:ca:87:9f:3b:f4:13:a5:f2:f5:98:9d:ff:
                    d1:a0:f6:7a:79:d4:da:f2:b4:f5:b3:19:b8:89:68:
                    dd:4d:78:db:0f:38:5b:99:2c:30:3e:5b:ae:7f:98:
                    4a:4b:a3:81:7a:f7:f6:cf:02:83:8c:c1:83:ee:c6:
                    23:10:ca:af:7a:6e:dd:63:b0:94:81:50:a1:2a:61:
                    29:68:7c:95:00:96:44:ee:ec:93:d5:76:b4:aa:c8:
                    87:bb:d4:0d:fd:1c:3e:08:12:cc:5f:f6:35:2a:37:
                    95:0f:c4:f1:18:06:cb:db:33:13:0b:68:de:6f:cd:
                    14:95:6a:78:53:14:96:09:99:36:93:60:0c:9f:6b:
                    87:dd:db:30:73:13:21:a4:28:fb:f1:b4:84:c1:49:
                    ba:dd:98:cb:8b:33:df:36:9c:63:c0:e7:9d:2d:69:
                    a0:e7:eb:c8:e8:f3:66:7d:5a:21:8b:c8:6e:87:39:
                    b1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4C:70:DF:A6:D2:15:2D:9F:2D:B2:53:73:4B:37:14:87:21:83:56
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZUxw36bSFS2fLbJTc0s3FIchg1Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.170.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         59:e4:d7:0d:94:92:69:ca:e6:60:ef:3a:5d:d7:8e:b7:da:14:
         b9:bd:32:a6:30:55:a7:a0:7f:a3:e4:e3:f2:ec:ae:c3:ad:9d:
         38:1a:d2:47:cb:b1:5b:81:03:ab:62:a6:fa:ef:85:32:08:29:
         01:f9:2d:0d:13:a4:d5:22:f4:f0:3f:5f:d2:e3:f8:4f:94:22:
         5c:b0:e9:2c:1c:a7:88:68:d0:f7:45:08:df:7b:66:9d:7b:68:
         13:16:6c:85:0d:6a:92:85:65:98:67:8e:aa:e9:0c:a1:71:22:
         2d:82:29:f5:b3:c5:2e:a3:36:eb:74:b8:07:8d:5c:ae:2f:5a:
         f6:0c:9c:d0:3b:6d:a2:ef:13:a3:4e:dd:a0:ac:53:2c:91:e7:
         c0:aa:09:d1:cc:2e:a6:c5:9c:cf:c2:5a:37:07:2a:a9:f1:3e:
         dd:b2:52:d5:f9:d8:fb:3d:0f:5b:51:77:41:2e:11:eb:74:0f:
         1a:79:1c:b3:3f:db:ad:12:2c:e0:41:98:84:fb:f1:cd:74:d6:
         f1:0b:3f:f8:bc:c4:6f:37:22:e7:19:40:39:d4:eb:b7:6d:1e:
         85:33:86:a6:b6:40:50:da:b2:8c:38:d5:7b:26:86:b3:89:2c:
         e6:2d:94:8c:1e:80:52:5c:f5:b4:bc:63:5b:6d:18:19:2f:9f:
         97:a1:46:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:44 2024 by rpki-client on console-ams.rpki-client.org