Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/l8NTJnNvkUy-czBfGHPbf7jZPS0.roa
File:                     l8NTJnNvkUy-czBfGHPbf7jZPS0.roa (raw, json)
Hash identifier:          x2W1DVlIXhTJs0wfH3RUXWRrVek6HxN8yggfYJNy/8M=
Subject key identifier:   97:C3:53:26:73:6F:91:4C:BE:73:30:5F:18:73:DB:7F:B8:D9:3D:2D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0324
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/l8NTJnNvkUy-czBfGHPbf7jZPS0.roa
Signing time:             Thu 24 Oct 2024 01:27:59 +0000
ROA not before:           Thu 24 Oct 2024 01:27:59 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     10013
IP address blocks:        220.150.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 804 (0x324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 24 01:27:59 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=97C35326736F914CBE73305F1873DB7FB8D93D2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:18:e0:de:ce:dc:cf:a7:fe:c7:21:b8:13:
                    f8:19:bc:8d:30:a5:9f:90:cf:8b:54:46:1a:2b:d5:
                    64:11:a1:07:a8:1a:c7:2a:3d:f1:8b:d1:f5:00:25:
                    23:c6:dc:f1:37:0c:30:9c:21:b8:7b:ea:69:99:61:
                    6d:04:80:e1:cc:1c:99:44:08:f1:27:eb:4c:39:52:
                    11:59:72:96:9c:61:ad:9b:92:44:2e:32:bf:1f:b7:
                    f8:5c:a3:54:ac:5c:6d:82:43:90:66:51:c7:d6:ff:
                    96:81:db:39:0d:07:cb:e2:4f:db:f0:fe:4d:88:1c:
                    6a:1d:e7:dd:7b:d9:66:38:96:90:12:0f:4f:7d:fc:
                    f6:0c:c7:69:db:c5:65:82:a3:39:d7:b3:1f:82:bc:
                    b8:a7:ad:28:a0:02:af:83:49:fc:c0:a2:b9:78:31:
                    d6:4b:2e:9f:64:ed:f4:56:05:8f:a2:1d:68:c3:00:
                    89:bb:3c:31:db:f4:81:44:4c:87:63:74:d4:a8:90:
                    f5:ec:49:ff:31:64:29:ba:86:ec:3a:05:f0:be:53:
                    ce:d2:8d:0d:a2:c2:ca:f4:00:80:0e:28:2f:b2:eb:
                    ba:a0:40:7b:fa:d6:ec:04:c4:b9:68:03:28:86:49:
                    bc:fe:d8:3a:e6:b5:cd:5e:38:c1:09:56:2e:60:03:
                    65:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C3:53:26:73:6F:91:4C:BE:73:30:5F:18:73:DB:7F:B8:D9:3D:2D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/l8NTJnNvkUy-czBfGHPbf7jZPS0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:fe:1c:a7:25:b6:7b:17:d2:8c:e0:7b:48:e6:1a:91:a8:42:
         64:32:b1:04:49:2e:31:02:94:c4:47:d5:ff:d4:81:22:ee:d9:
         8e:50:79:cf:db:b3:5a:96:ad:23:94:bd:8a:ab:f9:1f:0b:91:
         72:f2:34:8b:2d:b4:04:f8:7f:dc:fe:db:5d:f8:41:a6:36:23:
         64:bf:de:ea:75:b1:39:c2:30:94:64:00:17:4f:62:a5:35:e0:
         b7:56:85:51:7d:95:83:fa:e9:7a:9a:6a:81:09:f5:7f:f3:fb:
         36:60:14:16:56:e8:df:5a:da:78:fa:35:e7:6b:82:6c:78:cf:
         8c:ba:42:41:14:a8:f3:83:b5:6a:16:0a:13:ed:53:c2:1d:6c:
         ba:fa:27:3e:2b:7e:63:aa:b9:0f:17:34:52:58:6e:39:fd:e5:
         ed:9d:ed:e7:69:ae:44:46:4c:34:4f:97:7f:e5:06:d4:6d:c9:
         1f:ff:20:0b:fe:ac:a8:8e:3d:fa:5e:50:0d:b0:8a:9d:74:56:
         f2:2e:f8:53:8c:e8:69:66:fd:84:94:c9:6f:75:4b:6f:08:31:
         03:b6:ce:e1:f1:ac:d0:63:f4:b7:80:5d:1f:6d:1e:6c:d2:b7:
         10:75:77:8c:d8:4f:78:ba:5a:24:ac:fa:eb:35:f3:c2:f7:c2:
         bb:47:6e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:21 2024 by rpki-client on console-fra.rpki-client.org