Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/_DqnotwWImmft7OlL7V7QMYZY1E.roa
File:                     _DqnotwWImmft7OlL7V7QMYZY1E.roa (raw, json)
Hash identifier:          uErLeenS4YYc+hGE6FqXf2h8Hyd6Nd9pTeGCdx9V2Hw=
Subject key identifier:   FC:3A:A7:A2:DC:16:22:69:9F:B7:B3:A5:2F:B5:7B:40:C6:19:63:51
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0216
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_DqnotwWImmft7OlL7V7QMYZY1E.roa
Signing time:             Fri 31 May 2024 01:29:17 +0000
ROA not before:           Fri 31 May 2024 01:29:17 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        175.104.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:29:17 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=FC3AA7A2DC1622699FB7B3A52FB57B40C6196351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4c:c4:8e:9b:f1:56:c1:79:78:a5:04:a1:6d:
                    db:13:21:8b:5b:0c:19:3c:0e:5d:8d:4d:76:d2:92:
                    1a:8c:4f:08:a6:93:86:a8:45:5e:a0:15:15:a9:8a:
                    0c:22:cc:56:5e:cf:56:c3:8e:ea:32:84:5b:0d:71:
                    b5:ea:c8:1e:2a:fb:92:f3:4d:ac:ea:9b:10:74:74:
                    c9:df:81:e4:4f:37:54:ea:82:8c:1e:b2:cb:2b:ed:
                    ea:0f:e0:88:b5:4c:87:01:c7:f4:e7:86:8e:6d:1d:
                    84:e5:c2:e3:52:68:ea:25:55:5c:c5:2b:04:27:85:
                    f4:43:09:bd:c4:9e:6c:23:45:1f:af:7b:f7:70:b4:
                    53:0d:c9:bd:08:84:21:45:d3:f3:76:97:27:c2:32:
                    6a:40:41:7c:ec:ba:7c:55:2f:12:67:cf:b7:37:0a:
                    fe:aa:b4:f1:52:cf:fe:e8:75:0e:9c:fd:cb:26:25:
                    3d:1b:f2:98:5b:7c:d3:09:d0:a9:f5:78:dc:5b:72:
                    73:f3:6e:bb:23:6e:d4:ec:0a:7c:fa:70:de:11:cf:
                    e5:97:0b:ee:2d:eb:bb:2b:cc:e3:a5:56:29:15:88:
                    01:f8:40:a8:ea:27:7b:1e:4c:fe:6f:23:19:f8:dd:
                    c0:85:e6:bb:f0:3c:4b:48:c0:02:50:64:c4:de:0c:
                    77:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3A:A7:A2:DC:16:22:69:9F:B7:B3:A5:2F:B5:7B:40:C6:19:63:51
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_DqnotwWImmft7OlL7V7QMYZY1E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.104.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         07:55:66:05:26:c5:c7:91:a9:3d:3c:b5:e4:69:a0:02:5e:02:
         ed:43:23:e8:3c:b4:63:f6:6b:da:17:6b:49:14:5d:34:df:d5:
         c0:74:17:38:38:60:22:1d:c2:c1:fd:48:a7:54:72:37:62:15:
         0b:6f:8c:83:8c:aa:bb:43:91:57:d0:21:dc:2c:dd:8a:c9:57:
         1a:c9:13:4d:dd:ca:cd:b3:db:68:ed:e4:02:c5:ce:4b:20:58:
         81:1e:70:64:21:bc:8a:9b:80:d9:63:e6:73:3c:29:f7:95:d1:
         d8:70:0b:00:2b:a8:fd:38:dd:de:67:82:6a:7d:69:d8:d0:85:
         44:25:8e:88:9f:c5:30:1d:46:7d:6c:95:93:22:10:dd:35:ac:
         87:8c:f4:20:93:2e:22:52:99:8a:6d:f2:e5:63:5e:1b:e4:ad:
         66:19:6c:cf:f0:a6:b7:9e:5e:3e:fe:93:1d:26:24:9c:27:72:
         7f:b7:16:4f:e1:f3:25:4b:fe:ac:47:bd:34:76:07:75:23:b3:
         d8:65:fe:fa:d0:2a:9d:6a:e1:f1:c8:df:9f:e5:a4:a9:dc:69:
         63:21:08:eb:a7:77:d1:e4:03:f3:d6:98:02:1d:e7:1b:72:30:
         86:45:92:f5:8e:6c:c4:9f:ff:ba:59:52:e1:65:23:86:77:8d:
         ee:3f:14:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:21 2024 by rpki-client on console-fra.rpki-client.org