Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/zjaPvja9_VZrfpG8_XopvhT_XlM.roa
File:                     zjaPvja9_VZrfpG8_XopvhT_XlM.roa (raw, json)
Hash identifier:          CL2PyrvBYTc5bws2v6/S3K/O8OiVtbTvevo/dXILaw8=
Subject key identifier:   CE:36:8F:BE:36:BD:FD:56:6B:7E:91:BC:FD:7A:29:BE:14:FF:5E:53
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0301
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/zjaPvja9_VZrfpG8_XopvhT_XlM.roa
Signing time:             Thu 17 Oct 2024 01:41:01 +0000
ROA not before:           Thu 17 Oct 2024 01:41:01 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     10013
IP address blocks:        111.234.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 769 (0x301)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 17 01:41:01 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=CE368FBE36BDFD566B7E91BCFD7A29BE14FF5E53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ff:52:0f:3e:a9:ac:e6:db:e6:be:7f:94:be:
                    7b:75:69:ce:28:b6:5c:6b:30:e9:e5:fb:2d:41:e5:
                    9d:fc:3f:e9:55:9d:1e:d4:42:f7:c1:4e:00:d3:dd:
                    ae:7b:bd:00:5c:0a:86:ba:e4:cf:76:46:55:c4:76:
                    02:4e:a4:1f:20:a4:b5:62:b4:10:9e:39:5d:73:50:
                    64:25:1c:c4:f4:46:93:af:be:76:7c:21:fb:f8:09:
                    cf:e8:44:a2:8a:04:ba:e8:8e:94:62:9f:9b:36:27:
                    61:d2:a4:3c:81:00:87:45:f3:21:ce:db:ad:c2:c3:
                    62:06:08:8a:28:27:fe:2c:95:19:d8:d9:13:d9:f2:
                    71:ab:12:bf:68:63:75:bf:25:85:9a:26:bf:8b:93:
                    32:83:5b:2a:f4:3e:04:28:97:9b:a6:2f:c8:6f:cf:
                    44:af:32:cc:08:5c:47:b9:c1:ed:9e:85:6a:a2:dc:
                    e5:9e:d6:50:e6:a8:50:16:b5:75:d3:9f:bc:b5:b9:
                    8b:3a:3c:b9:62:8f:d9:8e:bf:24:5b:1a:6f:31:13:
                    80:33:a4:0b:b2:11:48:15:a7:ce:e4:ed:14:52:0b:
                    5d:d7:e3:2d:17:cf:4d:e3:e3:4b:4e:18:b0:43:4e:
                    cf:e9:d6:81:89:38:2d:04:71:ed:ea:be:ed:63:5b:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:36:8F:BE:36:BD:FD:56:6B:7E:91:BC:FD:7A:29:BE:14:FF:5E:53
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/zjaPvja9_VZrfpG8_XopvhT_XlM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:d8:78:2c:04:1f:70:7c:8f:ef:39:b1:53:de:13:0f:82:b4:
         d0:36:4e:e1:bd:65:0b:d7:e0:ae:b4:63:9d:7d:30:ca:93:32:
         e5:aa:6f:03:d1:5c:ea:94:b7:86:de:d4:86:33:75:6e:94:39:
         fe:19:7a:8f:87:82:8d:ca:e6:b4:10:72:fe:11:0c:a9:88:f2:
         4d:33:2b:15:70:89:7b:6b:ec:8c:5b:e6:d3:51:da:9f:ca:12:
         bc:19:3d:3a:c5:a5:59:93:c7:88:d7:31:55:25:31:2c:19:fd:
         db:41:43:46:8f:06:4d:34:8d:22:25:88:2d:97:a3:cb:df:d8:
         0b:0f:17:73:b9:ab:12:dc:9a:5c:f4:a5:14:2e:3b:b7:68:65:
         34:d2:d1:91:1d:3a:0a:3c:04:c9:7c:d4:ea:13:57:06:7a:79:
         d5:fa:a8:a2:a4:12:49:6d:7c:de:ac:6b:2e:79:f7:55:da:b5:
         c9:93:0e:1d:ea:47:ba:3f:1d:9a:78:a4:16:2a:2d:ec:98:18:
         99:2b:41:ed:32:7a:14:ed:69:40:b0:3e:5c:1d:71:f4:a3:0c:
         a5:bc:f2:a0:fd:ee:0d:a5:f3:c2:89:a1:ef:cc:c7:e8:e9:ee:
         4a:65:a1:5a:7e:4e:1e:99:65:f9:a4:73:c9:6a:88:00:9b:4f:
         5f:ba:7e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:44 2024 by rpki-client on console-ams.rpki-client.org