Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/eSLXWdxcWW4c4Hw8PjJO9vl4uX0.roa
File:                     eSLXWdxcWW4c4Hw8PjJO9vl4uX0.roa (raw, json)
Hash identifier:          gmihFAxj/py1GZcTCMXbo3aCq89iGo16u1/fwOLDXfQ=
Subject key identifier:   79:22:D7:59:DC:5C:59:6E:1C:E0:7C:3C:3E:32:4E:F6:F9:78:B9:7D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       026E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/eSLXWdxcWW4c4Hw8PjJO9vl4uX0.roa
Signing time:             Fri 31 May 2024 01:37:43 +0000
ROA not before:           Fri 31 May 2024 01:37:43 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        61.5.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:37:43 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=7922D759DC5C596E1CE07C3C3E324EF6F978B97D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b8:06:4f:6e:3f:c3:4f:e7:93:5f:c3:db:ec:
                    f2:7b:1c:8f:7d:13:ff:ba:37:63:de:33:bd:49:fe:
                    e5:f1:81:23:5e:83:46:21:48:ee:99:5c:d7:b4:37:
                    04:4d:c4:ff:a8:04:4a:e2:87:b7:ce:10:36:f7:b7:
                    cb:61:9a:9b:27:f9:ce:ca:fa:c7:88:8e:5f:31:70:
                    ed:f8:50:47:9c:dc:75:0f:d1:c2:3b:ea:30:fe:5c:
                    e1:c0:ff:b5:f1:a0:51:ed:fc:68:90:0f:cd:84:51:
                    e9:3c:87:e1:ed:e3:ff:71:56:60:de:28:07:ca:18:
                    d3:21:a7:94:df:90:33:68:8a:d6:9e:e1:b2:94:28:
                    c0:03:4b:93:6e:b3:0e:0e:c7:ce:a2:13:41:9a:8b:
                    03:f1:55:b8:93:57:89:1b:e5:64:bd:c6:b5:53:2c:
                    cf:c1:13:97:b8:e2:b0:ff:50:f7:8a:b6:b8:be:d3:
                    04:8b:b1:aa:9c:05:dc:8a:03:d9:43:ef:26:d2:5d:
                    41:80:60:cf:80:aa:f8:d1:77:52:74:7f:12:85:85:
                    71:aa:23:7a:42:c9:ed:d0:a3:32:c4:db:ce:66:19:
                    eb:c7:63:6d:aa:ab:35:2c:e2:e2:6c:49:88:6a:2a:
                    65:43:b4:9b:69:73:17:cf:7a:c3:63:07:21:2e:97:
                    b8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:22:D7:59:DC:5C:59:6E:1C:E0:7C:3C:3E:32:4E:F6:F9:78:B9:7D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/eSLXWdxcWW4c4Hw8PjJO9vl4uX0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.5.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:0d:31:25:1a:7c:96:43:9b:9f:0c:fd:29:6e:a5:9a:08:4c:
         66:b5:74:eb:1d:c0:6d:ba:c1:3c:da:2b:57:bd:0a:b1:77:87:
         cd:d6:d0:ab:9f:cc:62:a2:cb:19:83:2a:aa:94:7e:2b:9a:b5:
         44:60:3b:9d:56:04:45:bf:63:f0:b0:23:e9:d4:d2:fa:42:01:
         8d:b0:65:13:0a:50:01:0a:24:01:b5:6c:5e:70:7f:ec:e1:4a:
         c7:e5:30:10:9f:2b:80:32:af:3d:1c:3b:08:ee:24:5c:47:44:
         f4:72:af:e1:25:98:e0:d9:af:81:77:11:92:11:a3:68:42:04:
         6b:a9:8c:f2:3a:d1:fd:f0:67:32:75:5d:90:56:e9:d6:c4:fb:
         f7:80:85:3e:75:f1:34:dc:34:8b:9e:a0:55:40:47:59:1a:6b:
         fb:19:7e:ee:f6:0a:9c:c2:d6:29:88:49:1b:65:04:d0:43:bf:
         4b:78:61:e0:64:73:41:ad:67:c5:50:ad:fd:f8:14:a6:5b:68:
         5e:87:10:7d:ef:23:3f:6d:87:f6:41:be:5d:bb:53:ed:05:fb:
         1c:52:5d:df:38:95:2b:32:af:fb:29:85:92:f5:4e:c5:04:8f:
         05:03:5b:94:b8:ac:b7:f1:67:cb:5e:b8:b4:14:60:84:95:47:
         d7:e6:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org