Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/kA7nNR1wZnOepbMxacHsgiT9n2g.roa
File:                     kA7nNR1wZnOepbMxacHsgiT9n2g.roa (raw, json)
Hash identifier:          n9hiybYvzKsifHBZdMyfvfjQbMGgf+ZShoVIvdetdoU=
Subject key identifier:   90:0E:E7:35:1D:70:66:73:9E:A5:B3:31:69:C1:EC:82:24:FD:9F:68
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0268
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kA7nNR1wZnOepbMxacHsgiT9n2g.roa
Signing time:             Fri 31 May 2024 01:37:40 +0000
ROA not before:           Fri 31 May 2024 01:37:40 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        61.44.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:37:40 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=900EE7351D7066739EA5B33169C1EC8224FD9F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:67:02:85:d5:df:c6:3e:3b:ec:30:98:e5:1c:
                    c2:5b:27:ac:f9:f3:65:a0:0f:87:8a:bb:be:63:60:
                    53:43:b7:09:a1:30:57:60:7f:82:8b:59:de:4c:c2:
                    31:74:2c:7b:24:26:33:42:92:b7:25:fe:64:36:9b:
                    e8:64:b5:fa:b7:23:7e:9a:22:a1:24:07:aa:fd:b6:
                    0b:b2:ba:1c:cf:44:74:c1:37:8c:29:6e:b1:98:aa:
                    b4:22:aa:d1:68:7a:50:71:14:fe:ff:53:a2:d5:2f:
                    15:3d:73:f2:e6:a7:39:64:1a:36:a4:b5:af:f8:cc:
                    fe:1b:5d:42:bf:cc:99:25:6e:8e:1a:c1:fd:dc:6d:
                    f1:d4:12:50:50:c8:89:b7:ed:67:23:52:9d:d6:d8:
                    85:de:d3:46:b3:21:a7:d2:b3:29:2e:0f:15:7d:1d:
                    63:0e:d2:f2:9e:26:c2:24:37:d9:39:ba:ba:2f:82:
                    5e:92:75:8e:9e:d7:05:4e:2c:c9:68:06:71:f8:12:
                    c1:34:62:ad:22:74:4d:0e:01:b7:a4:14:4d:91:31:
                    15:4b:08:3b:b6:2a:50:fc:c0:7e:bd:98:5a:ab:3e:
                    19:ff:94:17:17:b6:c4:8e:bd:b8:1d:18:90:bf:da:
                    3a:c9:c2:e3:d4:2a:fc:8e:3c:d8:78:16:a2:4b:e5:
                    7e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0E:E7:35:1D:70:66:73:9E:A5:B3:31:69:C1:EC:82:24:FD:9F:68
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kA7nNR1wZnOepbMxacHsgiT9n2g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.44.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:0a:3a:64:32:c8:45:a1:46:4e:bd:47:a2:93:28:f4:4c:e1:
         85:c2:87:81:6c:9b:aa:5f:74:21:52:fd:de:39:33:d1:01:31:
         39:07:d7:a7:97:99:e4:49:2c:f5:33:cf:2d:17:b0:fd:31:39:
         f6:9b:2a:bc:bb:30:5e:bf:f3:84:6f:e5:b2:c8:46:de:e6:fd:
         8e:cb:46:02:35:41:9f:75:9e:65:a7:97:4c:c6:1c:54:b8:e9:
         58:b5:a5:45:db:71:16:74:c2:ec:71:76:6c:08:2d:5e:2c:98:
         45:19:74:5f:71:0e:65:1a:8e:5b:7f:32:76:55:17:3b:00:77:
         17:80:52:35:a9:c7:b1:93:19:04:39:90:07:2d:11:16:de:49:
         e2:69:ba:a8:dd:ed:36:24:bf:6c:e9:5a:59:cb:3e:49:31:7f:
         8a:67:a2:07:99:77:a8:85:6f:05:9c:90:51:9c:aa:3c:c4:a0:
         bb:1a:dd:86:ea:47:05:1c:d1:db:50:d6:75:70:2e:09:64:3b:
         e2:e8:d9:8c:af:7a:41:d0:fa:de:1a:84:8f:da:db:c5:a6:6e:
         81:a2:16:29:c1:d6:5e:74:b9:0a:33:00:af:a4:c3:df:3e:43:
         35:08:cc:ac:9f:22:95:70:db:c1:55:43:eb:a5:ee:07:b2:84:
         57:74:72:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org