Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/gG9S-R6m6l8O0-cuvfa7WwlMF-o.roa
File:                     gG9S-R6m6l8O0-cuvfa7WwlMF-o.roa (raw, json)
Hash identifier:          PqWaJF9T0wKuBuWbOrmvcBgsUSlfrDKmYui/GDRCSFw=
Subject key identifier:   80:6F:52:F9:1E:A6:EA:5F:0E:D3:E7:2E:BD:F6:BB:5B:09:4C:17:EA
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0271
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gG9S-R6m6l8O0-cuvfa7WwlMF-o.roa
Signing time:             Fri 31 May 2024 01:37:44 +0000
ROA not before:           Fri 31 May 2024 01:37:44 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        61.5.248.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:37:44 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=806F52F91EA6EA5F0ED3E72EBDF6BB5B094C17EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6b:47:55:79:7d:1b:bb:6e:6a:09:69:4e:08:
                    c1:a4:6e:6e:e5:3b:c5:1a:e5:fc:bd:26:7a:e5:54:
                    03:95:9b:b2:a3:a5:21:19:d6:f5:ae:ff:a5:f8:a3:
                    59:14:33:de:b6:3d:af:35:25:0b:47:9f:16:9b:93:
                    0c:93:7d:8d:0d:71:d8:31:27:eb:a8:09:bf:14:e1:
                    75:5c:a0:6b:31:38:ae:f8:34:99:6e:57:f4:ed:aa:
                    67:3e:7d:dd:a7:c5:f4:c2:b5:1d:30:0d:27:7a:3d:
                    32:fc:cb:5d:61:72:6a:01:93:c7:cf:e3:61:4f:37:
                    f5:24:26:76:f9:62:fd:18:c5:41:ce:ca:9f:ae:e6:
                    91:67:27:7e:51:8a:f0:12:5d:9c:57:0d:2c:8f:65:
                    c9:10:83:d8:6d:81:b5:17:ec:63:66:e2:e6:5e:68:
                    e3:cc:cb:df:70:c9:36:a8:13:82:a0:18:d5:33:7e:
                    72:96:12:52:18:96:ee:d1:73:05:db:71:a7:13:e1:
                    9a:cf:51:04:b6:8e:ce:7f:2d:56:57:ba:8a:fd:f9:
                    86:bb:34:cc:d0:e6:80:a9:91:f1:cd:85:68:99:e8:
                    1b:69:e3:ba:2f:fc:42:c6:92:e4:ed:3a:92:29:1b:
                    52:c7:b9:e4:6d:c6:17:c7:7f:ca:d4:c6:c5:b5:21:
                    55:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6F:52:F9:1E:A6:EA:5F:0E:D3:E7:2E:BD:F6:BB:5B:09:4C:17:EA
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gG9S-R6m6l8O0-cuvfa7WwlMF-o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.5.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:c1:bd:26:36:68:6a:91:2c:ba:67:83:1d:2f:af:dd:58:c5:
         22:95:f6:ff:a0:e6:4a:f9:17:0e:94:1a:81:e4:88:86:72:30:
         fe:f0:1a:9d:2f:5b:8c:47:37:71:89:3f:2d:ad:37:c1:45:b8:
         a9:47:2c:b1:da:0b:d3:28:b8:de:73:cd:be:6b:44:8f:37:64:
         6f:15:8b:e5:71:c1:84:e6:36:6e:17:33:09:49:6f:2d:55:51:
         57:8e:58:9a:87:1c:0b:d4:6c:99:96:18:06:99:b6:b7:76:1b:
         45:ba:2a:8a:48:e4:d1:7d:24:f0:45:24:e9:d0:74:de:9f:9c:
         a4:50:20:1e:79:89:cb:79:42:05:5c:32:48:1a:bf:f9:41:f9:
         6d:7a:5f:a3:27:54:c0:a5:57:93:1c:0d:2f:7d:20:85:b9:cc:
         5e:01:8a:77:2e:6f:5d:a3:4e:af:c1:07:2d:a6:17:e8:f5:6b:
         86:91:e1:fc:4b:b4:83:bd:be:9d:af:44:e4:91:48:f7:e0:b5:
         ae:af:aa:12:90:fa:f4:c4:35:32:31:89:cd:32:b3:e5:f5:a9:
         35:ae:44:77:59:ea:44:cb:e5:b6:58:74:c5:bb:64:d8:75:61:
         f5:71:f1:94:9c:dc:df:6b:2c:00:21:45:6a:c1:d6:7c:e0:c1:
         58:9f:61:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org