Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/6l6TCWD9jpEgXE-NSMObPZ42EWk.roa
File:                     6l6TCWD9jpEgXE-NSMObPZ42EWk.roa (raw, json)
Hash identifier:          PLl/Di6uX9M3YYHLF4I5epyM5sWAUJBmuzt0WaqQ2Nw=
Subject key identifier:   EA:5E:93:09:60:FD:8E:91:20:5C:4F:8D:48:C3:9B:3D:9E:36:11:69
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       023A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/6l6TCWD9jpEgXE-NSMObPZ42EWk.roa
Signing time:             Fri 31 May 2024 01:33:16 +0000
ROA not before:           Fri 31 May 2024 01:33:16 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        210.159.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:33:16 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=EA5E930960FD8E91205C4F8D48C39B3D9E361169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:96:6d:83:6c:0e:b8:23:67:92:e9:36:f4:79:
                    22:4f:90:cf:23:39:7d:d0:2f:8f:d9:18:5f:8d:4b:
                    a9:c7:50:d4:fd:e1:2c:7d:77:ab:71:cd:8a:8b:7e:
                    aa:3a:d6:4c:89:12:1c:5d:fc:85:67:58:d4:5e:fd:
                    23:aa:76:27:ea:3b:68:08:4b:1e:6a:6d:0e:e7:49:
                    ad:1f:a2:8c:bc:88:8a:40:97:36:8f:36:a2:b6:83:
                    35:fc:9e:f2:ee:87:76:0c:8f:97:ff:2e:61:17:ef:
                    3d:c2:57:74:4b:fe:04:a6:33:1c:09:5c:d1:f0:7e:
                    b9:b9:83:4d:31:ae:1f:56:cb:1e:0d:07:06:e9:b3:
                    82:de:49:d9:b9:ce:fe:32:2c:66:fb:72:e2:3b:12:
                    d2:5d:15:77:c7:79:28:b6:a4:b7:0a:27:4d:cd:ff:
                    c2:22:d2:ea:f0:7a:6e:74:80:13:f7:eb:d8:da:ab:
                    1d:6a:ef:51:b7:54:1a:26:34:14:bc:49:55:ac:10:
                    9e:b0:38:4b:60:62:63:cd:0b:62:82:a3:1c:6f:99:
                    b7:3e:7e:16:59:66:1d:92:66:89:2d:28:17:6c:b6:
                    86:9b:4a:f5:8b:fa:8c:5d:5e:93:76:53:e5:b7:25:
                    d1:66:32:f1:c7:b9:96:48:7a:59:ce:b6:38:89:24:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5E:93:09:60:FD:8E:91:20:5C:4F:8D:48:C3:9B:3D:9E:36:11:69
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/6l6TCWD9jpEgXE-NSMObPZ42EWk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         36:e4:ce:11:7a:a3:bc:12:7a:a4:b2:ce:22:1f:f2:de:71:32:
         5c:7f:1e:08:ee:d7:f6:67:e2:2b:9f:96:ac:8b:f2:60:97:05:
         cb:43:ee:5a:a8:18:0e:e7:fd:bf:7d:fa:f0:34:6b:07:2a:fa:
         57:9f:43:6c:50:ed:d6:49:5b:95:48:b7:a6:13:9c:d0:de:1c:
         4b:7c:e3:28:52:f3:e5:b4:ea:43:d4:8f:03:79:5c:4b:e6:f8:
         ce:80:a4:52:65:10:18:b6:aa:69:55:60:32:ab:bb:67:5c:79:
         e7:8f:59:af:f0:a2:74:e3:eb:cf:2f:af:cc:d9:68:40:8e:38:
         30:3c:ac:5d:20:1b:6b:17:45:d5:95:3f:3e:1f:3f:0e:d5:6c:
         48:c6:56:8e:dd:7c:d3:cb:3b:5d:14:ee:b6:3c:ea:e8:b3:ad:
         66:86:82:c3:d7:2b:d0:5e:08:10:1f:ab:eb:f8:5e:8e:fd:ac:
         08:ee:14:fb:0e:6d:e2:6b:10:ba:fb:35:30:ec:47:ee:b9:6c:
         76:1b:2e:19:d2:ff:5b:df:51:5b:14:19:a8:5f:81:32:b8:01:
         2d:39:ce:91:80:ca:10:de:ef:77:ad:25:72:91:14:75:f3:f1:
         4a:50:a9:cd:a4:1b:c8:7b:8b:79:17:5e:2a:0d:16:0c:2e:9a:
         0d:e9:31:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org