Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/_yaO1PriIhUzBj5RLc5uiANT8UY.roa
File:                     _yaO1PriIhUzBj5RLc5uiANT8UY.roa (raw, json)
Hash identifier:          tEz405+HJdfFSvOvfjB2nJ2B3Sf2fv511pzk50UaddY=
Subject key identifier:   FF:26:8E:D4:FA:E2:22:15:33:06:3E:51:2D:CE:6E:88:03:53:F1:46
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0242
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_yaO1PriIhUzBj5RLc5uiANT8UY.roa
Signing time:             Fri 31 May 2024 01:35:30 +0000
ROA not before:           Fri 31 May 2024 01:35:30 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        61.205.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:35:30 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=FF268ED4FAE2221533063E512DCE6E880353F146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:11:82:fb:81:95:01:86:6c:1a:04:44:3f:
                    77:31:ea:45:e2:ea:f3:9c:0d:a1:01:0c:14:a8:fe:
                    be:16:93:75:f4:ad:66:66:87:60:5d:51:1f:15:88:
                    94:f9:0b:b0:e9:ec:69:4a:9b:bd:5e:9d:05:7e:b8:
                    9b:77:6a:97:9f:d8:bc:5e:e1:1b:29:fa:99:bf:68:
                    71:48:89:40:96:ad:d1:b6:7f:74:70:54:61:60:09:
                    3e:f9:e8:c5:a8:50:06:ac:c9:c5:4c:8d:7e:d5:c8:
                    30:30:15:89:e5:00:6e:7b:10:3a:95:62:2d:1d:41:
                    ed:78:a3:21:94:8f:a3:04:b0:48:73:df:0e:c4:b3:
                    37:e8:41:d3:96:79:c8:54:aa:d0:c6:50:0e:eb:40:
                    75:f5:cc:48:6f:65:a3:10:e8:1b:4f:2c:c4:27:09:
                    5b:92:79:54:d8:24:68:57:e5:bc:e1:6e:7e:d4:f7:
                    c5:fd:18:11:93:89:21:13:9a:e1:80:fe:76:e0:5d:
                    16:b5:d9:f6:14:0b:46:50:d5:9f:9d:47:03:0f:3b:
                    7c:69:9c:54:7f:2a:88:0f:61:4d:37:7e:84:fa:c7:
                    d0:49:8b:1b:ed:13:de:13:c4:b9:b2:7b:9b:e7:01:
                    55:a7:0b:a2:c3:d7:91:16:bd:2a:86:e4:e8:90:ae:
                    34:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:26:8E:D4:FA:E2:22:15:33:06:3E:51:2D:CE:6E:88:03:53:F1:46
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_yaO1PriIhUzBj5RLc5uiANT8UY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:5e:52:92:2e:53:5d:69:ee:1e:37:26:97:df:49:3c:29:8b:
         e9:15:c4:cb:79:7c:f0:2d:19:d4:7d:f7:6d:04:76:f1:63:ec:
         46:09:cd:36:3e:8e:50:ae:cf:9b:78:48:dc:9b:b8:3e:78:f2:
         1f:ee:ce:00:83:fa:78:89:5f:06:e1:dd:6b:11:07:42:67:0a:
         f5:36:cf:03:06:91:fb:bb:06:3a:d0:17:9b:f1:6b:ef:88:f8:
         ae:de:4a:3b:67:f0:1a:08:88:81:94:cf:c3:55:83:ac:ed:ad:
         da:43:d0:57:44:74:54:36:b5:2c:e3:be:1e:ca:bf:a6:20:b4:
         a7:74:0f:c3:4f:db:1b:a3:33:d2:36:87:ff:49:0d:d3:58:10:
         de:2f:ee:9b:f6:39:4b:98:7c:e5:51:e3:d9:37:bf:c7:ee:59:
         93:78:56:4c:bf:90:37:9e:88:cc:ac:7b:18:26:da:e1:38:9a:
         cd:f2:e3:16:67:2a:0f:fd:c3:ca:ed:2d:a8:26:5d:97:65:56:
         f6:f9:cb:91:82:cb:60:35:fb:bb:da:15:02:e1:bc:2b:34:63:
         3b:ce:3c:d7:d7:d7:82:4e:9d:1d:9a:84:6c:7a:df:b7:aa:a3:
         1b:5a:50:68:81:8b:1a:50:4d:eb:09:3b:44:26:05:e0:08:ed:
         b6:9a:41:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org