Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/o1JiMMk3pfFQkP8YSOnp0ozpaxU.roa
File:                     o1JiMMk3pfFQkP8YSOnp0ozpaxU.roa (raw, json)
Hash identifier:          jsnmHOcOC9cYL5ph/rLPWzydRIKIjtjWJemCiqiVXzw=
Subject key identifier:   A3:52:62:30:C9:37:A5:F1:50:90:FF:18:48:E9:E9:D2:8C:E9:6B:15
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0265
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/o1JiMMk3pfFQkP8YSOnp0ozpaxU.roa
Signing time:             Fri 31 May 2024 01:37:38 +0000
ROA not before:           Fri 31 May 2024 01:37:38 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        61.203.168.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:37:38 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=A3526230C937A5F15090FF1848E9E9D28CE96B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d0:79:bb:de:94:ca:b3:43:e0:f2:5b:29:7a:
                    8f:6a:02:60:8b:bd:61:0d:38:e0:81:1e:fc:a7:07:
                    6b:2c:0d:00:4b:95:ab:39:9d:a8:1d:0c:34:91:d1:
                    bf:b9:b9:70:67:f4:72:38:2a:8f:1b:4e:2e:a0:7a:
                    2f:2a:51:0e:cd:df:f5:61:d0:8f:ab:47:c5:bc:3b:
                    29:a6:2f:e7:26:e8:49:5c:ab:a8:52:c9:56:ce:2c:
                    b4:dd:92:02:da:0d:00:fa:87:1c:75:0a:ad:e3:d0:
                    3f:9f:ab:9d:8c:01:3e:59:ff:a1:1e:ea:13:98:1e:
                    48:67:8b:ef:1f:a2:58:a7:c4:c2:b2:3f:15:0f:99:
                    93:b5:a8:c0:a2:5e:3c:0d:b0:84:b5:48:d1:fa:a1:
                    2c:38:db:32:71:fa:78:6a:ce:67:b4:b7:5c:72:0d:
                    94:d7:85:7a:41:85:5b:d9:fc:c8:80:64:3d:4b:79:
                    ff:b3:34:95:66:63:b9:85:b5:3a:c7:16:cc:cc:2c:
                    74:1a:60:62:2f:c7:8d:ba:a9:ea:87:85:52:57:9c:
                    63:1f:36:0c:a3:08:8a:21:d7:a3:bc:2f:ef:32:8e:
                    1e:3f:21:40:39:ff:66:3e:e6:6c:82:d1:ad:64:57:
                    33:79:68:e4:f3:73:dd:a8:77:de:f9:c6:af:0e:7e:
                    d8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:52:62:30:C9:37:A5:F1:50:90:FF:18:48:E9:E9:D2:8C:E9:6B:15
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/o1JiMMk3pfFQkP8YSOnp0ozpaxU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.203.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:dd:74:95:1d:e1:1c:c2:db:00:b7:69:9a:2a:a6:e0:e7:8c:
         ec:c0:1e:9a:84:95:97:8f:ce:59:66:b0:84:83:be:4b:76:76:
         aa:c1:76:ed:4d:6e:db:95:bb:fc:7f:9f:03:b3:54:9e:62:f3:
         5f:ca:7e:ac:3e:d5:4e:d0:dd:37:45:fb:61:d5:01:81:1c:6d:
         d6:d0:6d:07:e8:53:4e:92:0f:b1:da:26:66:b7:99:a9:a2:2c:
         d0:10:f4:1f:09:1b:79:bf:ff:5a:f8:5d:b5:f5:d9:0c:19:39:
         d8:14:90:2f:00:6d:72:bd:11:2b:b6:72:9e:95:ba:64:3a:8c:
         48:50:a0:c8:c6:e0:d9:8b:8a:58:28:a6:2f:49:99:09:b6:cc:
         8d:15:9a:86:de:25:fd:55:d1:ff:d4:6f:59:7d:b8:eb:fe:22:
         4d:13:10:77:79:31:05:a3:3f:9b:cf:07:56:ec:cd:e2:b7:ac:
         81:32:3d:a2:ff:a5:b4:d3:64:f4:41:89:dd:97:f6:af:27:b2:
         94:81:fa:8a:26:3a:bc:db:36:6b:40:2e:43:92:20:20:02:c0:
         2a:8c:19:d0:1c:75:1b:67:a5:cf:2e:86:ce:06:a9:8d:a7:c6:
         2e:41:de:72:5a:02:f1:a0:52:99:03:45:a4:93:5f:75:d1:5f:
         14:af:8e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org