Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/nKv6M1KwVRyb29-FWuoShsRfxLA.roa
File:                     nKv6M1KwVRyb29-FWuoShsRfxLA.roa (raw, json)
Hash identifier:          cnt0NH0PrdkEI42vdlgCnSJgPVn3dK+n84Rlg0TOr3o=
Subject key identifier:   9C:AB:FA:33:52:B0:55:1C:9B:DB:DF:85:5A:EA:12:86:C4:5F:C4:B0
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0290
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/nKv6M1KwVRyb29-FWuoShsRfxLA.roa
Signing time:             Fri 31 May 2024 01:39:43 +0000
ROA not before:           Fri 31 May 2024 01:39:43 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        113.213.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:39:43 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=9CABFA3352B0551C9BDBDF855AEA1286C45FC4B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:df:f8:42:d9:06:ee:0a:0b:6c:be:85:4e:
                    86:13:3a:59:c7:82:2a:60:11:b0:4a:db:9a:be:94:
                    f2:8f:06:3e:df:2d:e2:81:6f:d9:0c:b8:15:e9:50:
                    f9:04:82:f0:70:f1:a2:be:82:60:15:b8:17:80:02:
                    9b:9c:79:17:64:65:0c:1f:8a:f7:fe:45:e6:96:73:
                    be:cd:a5:72:d1:f4:2a:dd:23:55:fd:61:48:13:36:
                    d7:a5:fd:2b:3a:e4:44:b8:80:cd:23:4b:ae:68:c3:
                    a1:46:3a:2b:a1:79:0d:df:ea:e6:3a:3a:b3:82:7d:
                    33:03:ad:8c:e8:9b:c6:6a:1b:07:05:10:32:4e:21:
                    e7:a5:35:ca:6d:d3:61:c5:af:a4:05:b3:f3:2f:43:
                    70:01:f5:f1:2e:9c:86:9f:31:90:da:c1:3e:4e:fb:
                    33:b7:b4:2b:6d:b6:34:fa:4b:4a:dc:f0:ac:bd:64:
                    7f:a3:f9:9d:25:56:94:7d:a2:a1:0b:38:45:46:45:
                    26:24:89:42:d5:78:8b:a0:05:f0:c4:32:0f:10:60:
                    5e:c2:05:3f:1f:b9:df:2b:02:24:ce:70:a9:3b:8d:
                    77:a8:6d:ff:62:49:49:17:3c:cb:8a:47:b8:1f:6a:
                    9f:98:7c:35:b5:41:96:3f:1b:6f:43:82:38:60:88:
                    4c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AB:FA:33:52:B0:55:1C:9B:DB:DF:85:5A:EA:12:86:C4:5F:C4:B0
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/nKv6M1KwVRyb29-FWuoShsRfxLA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.213.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:db:16:22:35:5f:81:b9:41:27:39:e3:69:ed:bc:64:53:35:
         92:7a:04:7b:1e:13:08:01:6b:59:6d:a5:eb:8c:76:22:c6:ba:
         30:3c:3c:0b:61:a1:44:ec:8d:7e:ff:76:f5:89:02:86:90:31:
         f5:20:5a:67:01:41:28:fd:3c:3a:5f:1a:77:11:7d:11:44:ba:
         aa:30:39:d5:04:02:53:bc:ff:67:7e:f0:30:de:ee:10:6a:79:
         7d:79:4d:7a:de:c8:c5:44:e5:7a:be:51:e5:61:fd:66:d2:cc:
         bb:02:ae:2b:66:18:d7:36:96:09:6b:16:37:8c:02:e7:58:4f:
         43:4c:e5:37:15:a3:9d:67:16:c2:fc:e5:c0:ab:48:53:d9:94:
         09:82:ce:1f:4e:2e:87:87:34:16:ef:c0:82:18:33:4f:ba:5f:
         d1:7a:2f:ca:7f:11:8a:a1:c1:d1:14:93:37:63:57:64:14:1c:
         05:c5:c4:e7:6e:b2:27:4a:f0:0c:d3:3e:f7:6a:91:31:f5:43:
         30:d2:f3:5a:f8:14:7c:5c:0c:6b:dc:be:47:04:98:34:29:6e:
         ec:e7:59:d9:8c:b0:76:45:7f:df:0d:66:80:2c:d4:44:f2:2f:
         16:ce:6f:25:4f:fa:a6:f0:e8:23:18:93:d8:fe:07:b6:3d:23:
         9e:65:7a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:44 2024 by rpki-client on console-ams.rpki-client.org