Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/c0NhJdD9lY8YRrdoNuW6l_m8Z3Q.roa
File:                     c0NhJdD9lY8YRrdoNuW6l_m8Z3Q.roa (raw, json)
Hash identifier:          5pIfWROIpoeNT+vYlnenN3sb7nL1gQDAjXGX8W3oQsk=
Subject key identifier:   73:43:61:25:D0:FD:95:8F:18:46:B7:68:36:E5:BA:97:F9:BC:67:74
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       031C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/c0NhJdD9lY8YRrdoNuW6l_m8Z3Q.roa
Signing time:             Thu 24 Oct 2024 01:24:03 +0000
ROA not before:           Thu 24 Oct 2024 01:24:03 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     10013
IP address blocks:        183.181.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796 (0x31c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 24 01:24:03 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=73436125D0FD958F1846B76836E5BA97F9BC6774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c3:e5:0c:1c:ea:7a:8a:ce:a7:c6:3c:f8:22:
                    a0:2a:49:e4:0d:d2:92:38:4e:84:cd:a5:41:eb:49:
                    14:fd:24:8a:e9:bc:49:7a:53:28:7b:d1:7c:76:05:
                    9f:22:f8:8d:0e:19:40:dc:89:62:00:b1:49:d7:17:
                    8f:bb:96:1b:d4:36:68:6b:4f:b5:2c:c9:f3:93:7c:
                    73:59:53:e5:8a:74:6c:1f:93:e3:f5:b1:e2:a5:3f:
                    a0:97:20:78:aa:a7:e0:f9:c0:fa:84:44:09:e9:af:
                    fa:01:d9:55:32:56:de:b9:ca:7f:51:96:ea:bc:96:
                    7d:69:51:ee:1b:e9:ef:34:a4:7b:b2:3b:f6:e7:95:
                    ed:91:10:37:94:25:d6:fc:c9:10:8d:30:01:d4:d6:
                    b6:e4:e0:95:fc:c5:09:2c:19:03:c9:ce:32:23:63:
                    80:de:9e:54:87:85:71:dc:a9:9e:ff:39:ce:2c:25:
                    4f:58:09:20:f1:73:c5:35:50:7a:5d:83:42:bf:b8:
                    ab:8f:ef:2d:d5:c7:bb:8a:54:8f:3b:ed:f6:f0:b3:
                    a2:38:56:11:0f:0d:7b:e5:e5:89:db:79:af:2e:11:
                    bf:95:c5:83:ab:72:6c:e7:20:97:27:8e:de:d6:e4:
                    ec:ba:85:97:66:a1:15:33:fa:42:8c:d7:12:62:97:
                    7b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:43:61:25:D0:FD:95:8F:18:46:B7:68:36:E5:BA:97:F9:BC:67:74
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/c0NhJdD9lY8YRrdoNuW6l_m8Z3Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:91:2f:a7:c3:a0:e5:03:0b:01:c3:2b:a6:98:3c:db:d5:c3:
         6c:43:4d:03:f0:4d:33:2f:21:e6:45:da:aa:10:84:8a:7e:d7:
         88:19:22:29:61:56:93:b5:91:95:32:70:8b:f0:7a:c8:a2:e5:
         e3:95:b5:07:48:02:e7:33:d3:87:9a:40:19:27:47:12:db:ce:
         84:20:e7:fd:5b:a8:27:e5:de:b4:e7:fc:21:9f:bb:79:a0:0e:
         db:8a:b6:e6:82:73:7a:b5:78:02:d9:28:09:b1:fd:99:66:38:
         be:c5:ed:f2:5e:a2:c3:62:c5:3f:f2:0a:94:e2:55:32:d4:55:
         17:a1:9b:73:62:05:0d:44:40:4c:fb:34:7c:4a:68:c9:d4:03:
         d8:6d:c7:d4:06:94:16:ef:41:bc:85:cd:8e:56:0e:83:10:04:
         1d:21:5f:57:48:ef:8c:52:42:47:cf:43:67:0e:a5:3e:30:ad:
         d8:ad:e5:7c:8f:42:1f:90:d8:83:b8:7c:23:9e:f5:f1:76:0a:
         2e:03:a2:53:c9:b8:74:ca:66:f2:2b:e7:ed:25:8e:67:cb:c7:
         fc:6e:50:ad:0d:79:9e:66:32:b0:4d:2d:63:95:4d:2a:0a:77:
         02:95:bf:1e:b6:d5:7a:d1:0e:f0:13:55:a7:39:80:d6:ab:f0:
         2f:85:01:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org