Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/fBV_X9MmkTKCQuEmtMnQHfvIw4M.roa
File:                     fBV_X9MmkTKCQuEmtMnQHfvIw4M.roa (raw, json)
Hash identifier:          ETLu92/In+mAlQQaE33A2nKQ+4Ybd1F+mFPRcONnpao=
Subject key identifier:   7C:15:7F:5F:D3:26:91:32:82:42:E1:26:B4:C9:D0:1D:FB:C8:C3:83
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02A6
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/fBV_X9MmkTKCQuEmtMnQHfvIw4M.roa
Signing time:             Fri 31 May 2024 01:41:34 +0000
ROA not before:           Fri 31 May 2024 01:41:34 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        122.145.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 678 (0x2a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:41:34 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=7C157F5FD32691328242E126B4C9D01DFBC8C383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:38:e7:02:f1:65:ed:63:78:cd:4c:d9:e8:57:
                    76:95:69:ae:42:ab:8d:f5:db:a9:d3:40:e4:55:b9:
                    1c:f6:74:32:7f:65:67:78:b2:37:ce:e3:48:fc:7d:
                    60:b1:1f:24:f4:2b:e1:19:d7:a8:de:49:af:76:e6:
                    ef:c1:5e:9b:a4:c5:d3:4d:d8:28:1b:a6:23:e0:ed:
                    56:9c:1d:40:c1:32:e1:65:e2:52:bb:34:9c:19:e3:
                    39:73:be:d3:95:e9:1f:0d:42:d0:6c:eb:8e:ea:33:
                    a9:f4:bb:f6:97:17:ff:00:68:2d:f9:b8:71:2c:94:
                    70:7f:64:41:2b:3d:40:1e:55:49:b7:2d:e7:6d:2e:
                    c9:cc:65:ce:c4:ec:ef:ff:79:99:b7:ac:be:21:33:
                    73:04:ae:f2:b6:ed:53:0b:e4:14:b6:33:a2:da:fd:
                    b0:53:6b:33:7d:ba:02:21:33:60:3e:f8:1a:1f:70:
                    b6:33:e8:ef:33:80:7b:49:d2:7b:d7:77:16:fe:f8:
                    f5:58:3a:63:59:ed:ce:72:83:e5:9f:a7:4c:a1:f5:
                    65:74:40:4b:8a:88:6f:ad:02:a0:e4:64:b0:0d:f2:
                    c1:4e:c6:94:53:bd:5f:ff:a6:fa:4e:79:eb:76:36:
                    f9:83:6d:b9:fb:fa:d2:0b:9d:c6:5b:e5:94:b6:b1:
                    c6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:15:7F:5F:D3:26:91:32:82:42:E1:26:B4:C9:D0:1D:FB:C8:C3:83
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/fBV_X9MmkTKCQuEmtMnQHfvIw4M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:3f:6b:58:b5:c2:18:1b:77:0e:f0:b1:45:82:88:c6:5d:6a:
         2b:cd:09:aa:4a:a0:1c:db:91:7a:d3:3c:ec:dc:2e:b5:80:39:
         6f:7c:f2:e0:8c:c5:f8:4c:96:5d:b8:4c:6e:3a:c6:1d:8a:0d:
         83:87:5a:a0:ec:cb:be:f8:4f:41:aa:65:2f:0a:df:07:ba:a1:
         e2:09:8e:74:00:58:53:85:53:ae:a4:d5:1b:e7:e0:99:44:39:
         58:19:bb:75:2b:73:a5:83:b3:34:8a:a6:7f:89:66:0e:d0:2d:
         eb:1a:97:0c:0d:82:12:16:fc:0a:4e:30:a1:1e:c4:2d:f3:d2:
         3c:68:82:9c:e2:1f:e8:94:d5:e1:a2:7b:92:1e:a2:48:19:43:
         eb:4b:eb:0c:3d:9f:1c:e4:e2:5b:1b:c7:31:f0:c7:45:16:34:
         41:67:1b:1c:76:b7:37:59:a0:55:06:f5:c1:41:57:d2:cd:06:
         f2:92:01:4f:c1:8e:e6:95:b7:e9:4c:8e:11:d0:c1:18:ad:80:
         ff:f4:4a:12:ce:5f:d1:ed:20:d4:a9:b0:67:f6:d9:24:6d:1a:
         27:b6:44:59:0e:46:39:57:21:35:6a:3e:c1:93:b3:99:06:09:
         1c:39:29:9c:46:1e:02:ad:0d:87:2d:84:79:ca:8d:df:c7:f3:
         fb:09:62:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:21 2024 by rpki-client on console-fra.rpki-client.org