Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/DrsXuBBd0Na04OCsLarVq6EFCzE.roa
File:                     DrsXuBBd0Na04OCsLarVq6EFCzE.roa (raw, json)
Hash identifier:          IzqbpCUCReDNqqG+rNUubGgEyqmPPv7vGdBDGPHOm5w=
Subject key identifier:   0E:BB:17:B8:10:5D:D0:D6:B4:E0:E0:AC:2D:AA:D5:AB:A1:05:0B:31
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       20
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/DrsXuBBd0Na04OCsLarVq6EFCzE.roa
Signing time:             Fri 02 Feb 2024 07:36:59 +0000
ROA not before:           Fri 02 Feb 2024 07:36:59 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     9619
IP address blocks:        211.125.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Feb  2 07:36:59 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=0EBB17B8105DD0D6B4E0E0AC2DAAD5ABA1050B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:37:1d:f4:af:65:51:a1:48:64:81:cb:7b:
                    fd:c3:5f:cb:ef:29:b0:fa:e4:62:7f:3e:18:2b:61:
                    2f:92:9b:2f:4f:df:46:4c:7f:fa:b3:ad:9b:94:f7:
                    c8:b2:07:a6:4d:ac:88:96:4f:55:42:04:17:9b:61:
                    73:27:07:6b:9e:83:32:43:18:3a:a7:45:28:74:09:
                    ad:f1:75:4b:56:08:01:c5:e4:b5:2d:e8:00:67:76:
                    c7:c9:9c:01:ab:7a:68:f0:e9:10:56:b7:aa:16:26:
                    73:aa:c5:56:2a:4a:7e:30:fd:64:8e:59:d5:6d:18:
                    05:44:34:cb:6e:ad:c4:80:92:7b:cf:31:39:0a:40:
                    37:33:13:4f:73:6d:6d:5c:d0:fe:35:c1:c8:6a:8c:
                    ca:96:db:41:2e:d6:82:97:ad:b9:ce:8a:a3:d8:15:
                    12:5e:ca:f8:ea:ee:6b:f5:5b:58:9d:28:5b:30:1b:
                    99:1e:c3:12:58:3a:e0:93:89:b6:45:15:78:04:c3:
                    d8:92:c7:d6:38:63:90:0c:32:b3:31:99:44:6a:c1:
                    02:88:9a:ae:dd:8b:fe:cc:f4:25:c9:d2:52:ef:bd:
                    f9:9c:4b:34:e8:c1:4a:c9:74:49:07:50:12:20:ab:
                    07:97:3f:bf:6b:83:ad:11:b7:c8:da:7d:d6:d8:cd:
                    57:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BB:17:B8:10:5D:D0:D6:B4:E0:E0:AC:2D:AA:D5:AB:A1:05:0B:31
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/DrsXuBBd0Na04OCsLarVq6EFCzE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:84:5b:88:1b:dc:83:41:73:9e:72:01:3a:42:48:64:ac:e5:
         15:dc:cd:64:ff:3e:56:43:0e:4c:17:9d:ba:ca:ed:7f:5e:09:
         4b:02:70:ec:6e:cd:70:af:5b:29:2e:e1:e5:6f:86:3d:a2:c2:
         ad:0c:d0:f0:19:07:9a:61:21:38:4d:53:86:50:1b:64:d4:5d:
         bc:57:2b:a0:9a:14:b1:0c:aa:01:ff:39:0a:a9:51:89:08:ad:
         ac:52:3a:49:6c:b1:21:11:31:af:39:2d:d8:0e:9d:d6:14:3d:
         1d:ff:00:87:5b:34:b3:99:e8:88:1c:c1:ab:4a:fe:bb:24:c8:
         f4:9b:1e:fc:98:c1:11:31:88:e4:2a:92:7d:46:f5:5f:f0:3f:
         89:c5:63:a7:93:d9:d8:60:60:9c:6d:72:b0:8c:36:4d:c1:8c:
         f9:16:9a:b5:0a:fb:0a:95:52:34:d0:e7:e4:e5:be:f4:bb:04:
         b6:6f:ca:79:49:a0:4c:9b:e2:40:48:17:7c:0d:0f:be:cd:5d:
         3d:de:ea:98:f9:a2:7d:6b:43:30:93:b8:3b:a6:37:19:c4:61:
         16:8f:07:99:e9:90:a1:7a:4c:80:dd:36:06:52:9d:49:72:8c:
         54:43:07:d9:0a:06:d1:eb:1c:dd:56:cf:3e:6a:e2:16:20:98:
         d5:af:dd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:46 2024 by rpki-client on console-ams.rpki-client.org