Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/kFiif5albgoHXyc-fVKn1QxQM-M.roa
File:                     kFiif5albgoHXyc-fVKn1QxQM-M.roa (raw, json)
Hash identifier:          mgKeEB/O1w0qnFVSN1N5PRIxKkVJKZ+M9FfJMfv2q2s=
Subject key identifier:   90:58:A2:7F:96:A5:6E:0A:07:5F:27:3E:7D:52:A7:D5:0C:50:33:E3
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02C3
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kFiif5albgoHXyc-fVKn1QxQM-M.roa
Signing time:             Fri 31 May 2024 01:43:34 +0000
ROA not before:           Fri 31 May 2024 01:43:34 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        210.159.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 707 (0x2c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:43:34 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=9058A27F96A56E0A075F273E7D52A7D50C5033E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:c3:66:a5:f6:2e:55:69:44:40:83:db:e0:
                    0b:49:c6:03:5f:95:93:eb:25:6e:2d:be:0b:16:cf:
                    0c:68:08:3f:34:75:03:48:09:7d:6c:07:3f:1e:25:
                    94:9f:9a:7c:e7:3e:a5:49:1d:32:8d:9b:ea:98:d0:
                    27:b8:8a:e5:b8:76:06:07:8a:54:4b:a6:40:32:95:
                    f9:8a:da:73:08:ac:96:e6:f4:9e:8c:be:c3:0e:10:
                    ef:54:51:34:26:ea:d6:76:c4:60:03:56:00:cf:e3:
                    5d:1e:78:98:2d:db:7b:0c:35:8f:d4:fe:2f:42:50:
                    4f:bf:c5:8e:e6:53:b5:19:65:5d:99:bc:cb:2e:e5:
                    65:c1:e9:83:86:c0:bf:3f:27:b4:de:9f:c5:1e:af:
                    8b:99:82:1b:2f:23:5e:68:aa:06:b3:82:f8:e1:38:
                    c2:45:e9:29:26:98:c6:8d:9b:e0:68:fe:f9:81:15:
                    d6:77:70:c6:58:c6:61:99:3f:ea:e7:f6:04:63:00:
                    15:6f:28:64:3b:1e:9d:4d:3d:e3:ae:00:4d:25:76:
                    0d:18:37:a1:c7:23:1e:23:d0:27:48:c8:3f:09:c7:
                    98:f4:d6:cc:80:0c:fb:c0:4e:d9:c0:87:d2:25:f9:
                    1c:38:7f:04:fe:61:c1:82:db:b1:02:ea:1a:ed:27:
                    0b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:58:A2:7F:96:A5:6E:0A:07:5F:27:3E:7D:52:A7:D5:0C:50:33:E3
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kFiif5albgoHXyc-fVKn1QxQM-M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:30:33:31:e7:81:3c:b9:64:c3:89:f8:0b:96:d9:48:75:87:
         99:08:18:7e:cd:94:dd:8e:35:78:98:55:a4:c4:55:4b:d9:5c:
         88:7d:fa:3f:bb:b1:45:5f:11:06:b3:35:5b:14:b8:13:1a:b2:
         45:5a:30:6a:db:0e:85:14:af:82:f7:63:eb:2c:d2:c5:f3:80:
         6f:f1:08:23:9a:6e:29:51:76:78:60:7b:18:9a:e8:62:78:46:
         c6:9e:6f:62:94:31:e9:9d:4f:91:26:b7:a3:1f:a0:d9:b8:70:
         b8:56:33:b5:b1:b9:6f:1a:6a:da:6a:b6:67:24:d9:a9:40:7e:
         a0:eb:f3:0f:7c:61:ca:3e:4e:46:87:fc:d5:3d:bc:fb:ec:f7:
         d3:d5:14:cf:53:2d:3b:f4:3f:c0:77:61:ca:01:2f:a1:c6:ac:
         0a:0c:88:68:75:59:7e:75:75:91:67:33:6b:e2:0c:76:43:af:
         fa:4c:64:02:ee:4c:4b:e9:df:e4:32:8d:9d:22:53:b8:98:59:
         60:f9:95:2e:f8:aa:a6:63:8f:c2:d7:d4:20:03:81:90:4f:15:
         eb:97:51:dd:97:64:b6:80:b7:69:92:41:64:11:5f:d0:ce:0c:
         db:33:7a:8d:15:82:3d:ba:8b:f6:4f:50:2c:bd:67:07:0e:73:
         75:bc:a3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:21 2024 by rpki-client on console-fra.rpki-client.org