Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/opolTy7f73OgB6AcwTgCkuK4TY0.roa
File:                     opolTy7f73OgB6AcwTgCkuK4TY0.roa (raw, json)
Hash identifier:          XpSe3HRt83hp7mPwMAtPeWbHXXilSBLFLWs+HrIuVUw=
Subject key identifier:   A2:9A:25:4F:2E:DF:EF:73:A0:07:A0:1C:C1:38:02:92:E2:B8:4D:8D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       022E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/opolTy7f73OgB6AcwTgCkuK4TY0.roa
Signing time:             Fri 31 May 2024 01:33:10 +0000
ROA not before:           Fri 31 May 2024 01:33:10 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        27.135.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:33:10 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=A29A254F2EDFEF73A007A01CC1380292E2B84D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ec:36:0b:87:31:07:fd:16:27:94:35:89:78:
                    b9:16:cf:43:04:9b:50:4c:3a:4e:d4:7d:05:e7:46:
                    29:83:53:74:2e:25:e5:28:ea:51:a9:b8:4f:6a:3f:
                    26:f5:0e:d7:05:b8:9d:5a:96:e1:c2:c4:6b:51:8a:
                    49:08:03:ba:c3:29:db:99:32:6c:48:d4:30:cb:75:
                    d7:73:cf:07:a2:a2:fd:49:37:56:47:4e:10:b5:73:
                    f0:d8:70:73:ce:a2:fd:79:30:9f:42:2d:8c:f3:02:
                    16:b3:f7:44:15:2e:c6:ff:dc:4d:4b:c8:51:ce:3e:
                    36:97:28:6b:3b:a4:56:70:0f:6e:b1:bf:2a:4f:45:
                    5b:24:24:b8:93:a5:ce:81:aa:c0:47:6b:0f:2a:eb:
                    36:3a:df:34:42:a4:f2:bf:1b:5e:d0:94:b2:87:41:
                    04:ab:3e:c0:a4:9a:aa:f8:35:55:d7:dd:28:03:17:
                    42:76:f8:71:31:8f:1c:06:d2:74:c3:cc:27:11:00:
                    18:09:47:fe:03:e5:4a:3b:25:03:d3:f1:b4:e2:5c:
                    47:32:f0:0d:cf:96:0a:d3:d1:83:aa:9f:c1:3e:9d:
                    0b:5a:f3:6a:85:0e:9f:63:99:4c:bc:15:4a:b2:ec:
                    61:9d:79:67:16:bb:a8:a1:8f:21:d0:45:37:67:61:
                    0a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9A:25:4F:2E:DF:EF:73:A0:07:A0:1C:C1:38:02:92:E2:B8:4D:8D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/opolTy7f73OgB6AcwTgCkuK4TY0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.135.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:31:49:75:e0:25:ef:16:3e:24:d1:f7:60:49:0b:af:32:5f:
         fa:f8:97:11:a3:f1:6d:14:5d:cc:97:18:9f:82:ec:97:8f:28:
         a2:b9:f0:58:6f:a2:ee:1a:f8:81:15:d8:4c:11:6b:cb:fc:4f:
         ab:4a:5e:6c:06:a2:53:b4:8b:1f:7c:3e:09:d7:ed:74:70:c6:
         55:d1:ea:85:86:e6:82:69:61:52:ad:44:46:d2:4d:2e:35:ff:
         e6:36:6a:9f:cb:76:b9:24:f9:f0:f3:b9:de:80:a6:11:e5:e7:
         f1:d2:a2:be:73:78:18:b2:0d:cf:d3:d2:8d:97:e5:5e:31:d6:
         79:d5:51:16:4b:07:32:06:75:2e:b2:4d:88:9d:99:34:05:42:
         f9:30:c1:cc:8d:3d:8f:32:93:b4:c7:13:c4:6e:42:d0:aa:f8:
         7f:65:8e:ee:26:28:f7:41:81:43:be:4d:4d:2b:30:26:96:81:
         52:9d:63:0c:fa:c6:dc:26:fd:53:b2:39:dd:7d:bd:b4:5f:d4:
         ea:13:c5:a8:c4:2f:74:f5:e0:c3:65:0b:97:e5:2f:61:4c:30:
         72:14:07:3d:ca:43:ad:6b:18:66:73:22:bc:3d:01:50:b4:32:
         80:17:1d:87:4f:e9:92:ec:bb:8b:a6:7a:af:14:12:a8:ee:f4:
         e6:eb:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:21 2024 by rpki-client on console-fra.rpki-client.org