Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/z2Tw5x_XQn62BLDieaOm8r1shRw.roa
File:                     z2Tw5x_XQn62BLDieaOm8r1shRw.roa (raw, json)
Hash identifier:          Of93xIN6R7vMGCsy3F5ZxSmuwwYk0GbIzi/Cde6aftI=
Subject key identifier:   CF:64:F0:E7:1F:D7:42:7E:B6:04:B0:E2:79:A3:A6:F2:BD:6C:85:1C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0296
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/z2Tw5x_XQn62BLDieaOm8r1shRw.roa
Signing time:             Fri 31 May 2024 01:39:45 +0000
ROA not before:           Fri 31 May 2024 01:39:45 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        202.75.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662 (0x296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:39:45 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=CF64F0E71FD7427EB604B0E279A3A6F2BD6C851C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b8:44:78:c9:cc:15:a7:ed:6a:d2:73:69:75:
                    af:ad:2d:53:b4:4a:da:53:46:ea:ef:d9:45:51:8c:
                    38:f7:69:0b:9f:0d:27:96:ea:1a:31:96:78:7f:8e:
                    45:c6:96:c0:58:96:93:d1:98:f7:de:1a:a5:d1:2b:
                    62:cd:3f:27:a5:8d:4d:55:1a:0d:8e:61:ec:a1:fd:
                    3f:d4:cd:ea:21:76:a0:35:c6:98:0b:99:d0:47:16:
                    77:84:f5:d6:bd:4f:6a:6c:fd:c4:59:ce:6c:0d:39:
                    23:a3:39:eb:59:13:73:53:5f:2a:9e:b5:2a:5d:d8:
                    de:af:8f:be:03:ef:16:07:66:d0:be:18:df:13:28:
                    1f:4b:52:8c:2e:35:3b:e6:7b:d9:ab:d4:f3:0a:08:
                    4b:4c:58:d9:19:a7:af:61:7b:b4:51:3a:c3:eb:ff:
                    f6:11:3d:4b:bd:e1:ba:ed:1e:78:9a:21:37:73:e5:
                    0c:60:32:2b:aa:3b:b9:13:f8:58:53:fc:7d:77:0b:
                    37:0e:6b:a6:a8:b4:71:17:55:3b:3e:00:77:fb:89:
                    c9:dc:69:4d:e8:36:79:04:5f:23:4a:82:32:d1:3f:
                    ff:c8:d4:f3:9c:84:f3:dd:5b:c8:27:c6:aa:1c:02:
                    e6:88:f0:83:65:05:e9:e6:c1:29:67:79:05:31:ab:
                    2f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:64:F0:E7:1F:D7:42:7E:B6:04:B0:E2:79:A3:A6:F2:BD:6C:85:1C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/z2Tw5x_XQn62BLDieaOm8r1shRw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.75.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:dd:7c:76:e7:6c:d4:c1:c3:89:d2:ab:b0:19:8a:7c:93:e8:
         f0:77:69:f6:d9:ea:7e:c7:58:42:38:68:2b:da:8c:8a:df:6c:
         a6:d0:4e:bc:a2:9d:9a:fc:b8:55:e2:d6:b8:52:0f:52:8c:de:
         29:40:13:a6:6f:26:94:b9:5a:15:ce:45:9b:31:db:ad:e2:d8:
         89:7c:72:53:8a:78:ca:30:9e:1b:60:4b:be:b1:e7:c7:78:e7:
         9d:76:7c:2a:67:38:dc:97:80:fb:ee:68:f6:65:39:0d:b5:e0:
         d1:ce:f0:1f:e5:2e:ab:2b:63:e5:ae:cf:9d:46:f6:10:03:a6:
         6e:f8:c2:89:59:07:86:74:84:4d:8a:ca:4e:35:4b:15:53:46:
         c7:61:b3:6e:4f:9d:5e:7b:f2:dc:14:f1:79:87:8c:43:62:4c:
         78:1e:6b:1c:f1:7f:0f:b4:f4:bb:b2:b8:24:b3:fd:68:57:c3:
         32:67:b6:8d:78:96:92:f0:36:32:3c:fb:48:94:fa:ce:46:a9:
         b5:82:83:8d:56:46:fd:2a:da:94:c0:69:14:cb:d0:57:5d:aa:
         00:01:73:0b:64:d3:88:b6:99:e6:73:b6:4a:cd:b1:26:f6:49:
         c6:d4:87:06:55:9c:67:97:3b:ce:5c:b0:0e:41:be:6a:bc:08:
         d6:e6:17:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:21 2024 by rpki-client on console-fra.rpki-client.org