Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/u51tTa3Qb3MUeaAl6WHLtwZGH1w.roa
File:                     u51tTa3Qb3MUeaAl6WHLtwZGH1w.roa (raw, json)
Hash identifier:          qPmGtL4TwMvTfF24L8gBLlgJ63eWAm+aEWrlX6E14oY=
Subject key identifier:   BB:9D:6D:4D:AD:D0:6F:73:14:79:A0:25:E9:61:CB:B7:06:46:1F:5C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       021D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/u51tTa3Qb3MUeaAl6WHLtwZGH1w.roa
Signing time:             Fri 31 May 2024 01:29:20 +0000
ROA not before:           Fri 31 May 2024 01:29:20 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        36.52.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:29:20 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=BB9D6D4DADD06F731479A025E961CBB706461F5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:b9:e6:8d:5a:04:67:22:7f:8e:7f:24:51:
                    9e:45:3a:7c:98:0c:47:50:22:b4:6a:71:07:6e:95:
                    97:21:8d:3b:78:eb:1a:87:da:8f:51:60:7d:81:3c:
                    5d:38:7a:58:67:d0:be:77:e4:07:1e:bf:86:d3:97:
                    c0:bd:07:c8:ed:5f:b1:5c:09:d1:43:3d:d2:d3:7d:
                    94:79:e8:a2:f7:49:53:26:08:99:73:e0:54:c1:f8:
                    d0:e8:44:6a:f9:fe:8f:20:dd:d2:5a:f4:27:30:9b:
                    ec:b3:d8:95:3c:63:79:78:81:65:6a:ac:cc:96:56:
                    e1:1e:84:f9:b7:96:a8:4f:62:72:29:b0:ab:af:37:
                    c5:87:3d:1d:6a:a7:00:41:08:0d:60:69:ba:f5:0d:
                    f3:fb:a6:c2:09:c1:1f:9a:9b:91:39:c4:22:19:27:
                    55:6a:31:b8:ec:6c:dd:06:62:62:29:33:75:70:6c:
                    92:7d:86:26:bd:84:3a:e8:7e:85:9f:b2:15:e5:44:
                    79:fa:cf:99:7f:27:97:5c:87:14:a9:77:a3:65:fc:
                    db:5f:bc:ee:d7:cd:b7:27:1d:23:26:62:b8:1e:e9:
                    bd:e6:03:2d:8d:06:b0:c6:2b:a6:9c:66:ec:78:d4:
                    20:6f:d4:81:76:92:06:3d:7f:87:91:d7:81:e5:7f:
                    3b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9D:6D:4D:AD:D0:6F:73:14:79:A0:25:E9:61:CB:B7:06:46:1F:5C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/u51tTa3Qb3MUeaAl6WHLtwZGH1w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:a6:95:60:80:a0:5d:b8:7b:d5:f6:ee:0b:b3:3b:f5:75:07:
         6c:29:43:07:a2:ef:f9:32:1f:62:44:fb:9e:46:ef:be:15:89:
         98:11:b9:1d:46:8b:35:15:e6:dd:e3:94:9d:12:15:3c:13:91:
         2a:bd:80:4c:e1:b0:b1:67:f6:46:ab:61:a5:6c:bf:d1:a7:83:
         ba:d5:21:69:74:a1:05:ba:d6:05:71:d6:00:2f:4b:e4:a6:34:
         e4:35:2b:85:78:b5:ce:48:f3:01:20:5b:71:8f:a3:bc:78:bb:
         0c:6e:ca:66:8a:fb:c1:6f:90:cf:6e:60:bf:85:f8:25:56:be:
         86:e9:b6:9b:c1:bd:ad:2e:6d:e3:06:cc:48:48:68:bb:4b:de:
         71:b4:cb:dc:73:fe:99:b7:dd:f7:a8:9f:19:24:39:20:11:59:
         8f:13:ea:d6:4a:2b:91:f2:dc:cb:8f:dc:53:7a:b3:60:19:c5:
         9e:dd:15:23:59:29:cd:1b:d0:75:8b:d6:57:6e:c4:e1:b0:8c:
         a6:e0:cc:65:37:78:5f:a7:93:7c:9f:a3:f8:23:f0:ea:80:0b:
         0a:81:92:c2:7e:87:4f:6c:ae:19:59:60:e5:b1:3c:09:2b:c7:
         52:d3:9c:bf:7e:ee:f6:e7:cd:18:56:bf:d5:20:61:ce:62:79:
         7d:8c:e0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:21 2024 by rpki-client on console-fra.rpki-client.org