Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20245/E2Uj4dwWXaVzb-mlpcuGfU2ieRA.roa
File:                     E2Uj4dwWXaVzb-mlpcuGfU2ieRA.roa (raw, json)
Hash identifier:          0gnDj0lymgKi3LfPFJFNlra1xvUmoXtf78fIZxGfmUM=
Subject key identifier:   13:65:23:E1:DC:16:5D:A5:73:6F:E9:A5:A5:CB:86:7D:4D:A2:79:10
Certificate issuer:       /CN=EC4B5C02A42E82DDAD39B6FAE6ECA0F33EF8CA6D
Certificate serial:       07
Authority key identifier: EC:4B:5C:02:A4:2E:82:DD:AD:39:B6:FA:E6:EC:A0:F3:3E:F8:CA:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7EtcAqQugt2tObb65uyg8z74ym0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/E2Uj4dwWXaVzb-mlpcuGfU2ieRA.roa
Signing time:             Tue 20 Feb 2024 22:46:05 +0000
ROA not before:           Tue 20 Feb 2024 22:46:05 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     151375
IP address blocks:        61.245.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7EtcAqQugt2tObb65uyg8z74ym0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC4B5C02A42E82DDAD39B6FAE6ECA0F33EF8CA6D
        Validity
            Not Before: Feb 20 22:46:05 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=136523E1DC165DA5736FE9A5A5CB867D4DA27910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e8:4c:d1:10:1a:b5:f1:48:0f:c4:17:00:43:
                    02:e5:4e:b8:e0:c0:48:6f:06:aa:4b:47:b4:1a:50:
                    92:c7:46:40:de:1f:f7:6f:0c:10:1d:b5:a8:8a:93:
                    e9:67:89:f4:8c:7e:49:45:c8:c4:79:df:09:ef:af:
                    90:53:62:1a:8f:99:3f:a1:a8:be:dc:3a:26:2c:f2:
                    7d:4e:fe:dc:3e:c5:8e:d0:b9:0f:21:cd:f9:14:a7:
                    73:2c:5d:f5:4d:59:24:a8:88:4a:3e:13:68:d7:0b:
                    90:dc:e3:64:34:0f:86:61:44:82:0a:68:33:c0:a1:
                    1f:d9:ae:27:65:43:e2:d3:a0:23:9f:b0:49:59:c4:
                    2d:7f:8d:05:ef:e7:67:c1:fc:4a:e7:b1:bf:85:63:
                    16:23:f2:d1:ae:6d:63:07:c3:9a:3c:e2:e2:67:e4:
                    21:30:af:5a:d3:e3:5e:b2:b8:98:df:d4:ef:54:fa:
                    a9:af:c0:c9:7d:a1:93:d4:37:7c:ec:1a:3e:c6:1a:
                    74:ef:6a:29:70:7b:44:95:6e:65:b9:c1:81:00:ce:
                    47:a6:cc:dc:c6:41:eb:90:6b:91:98:5f:68:23:6c:
                    50:e4:d6:df:71:cf:12:01:92:c5:2c:bb:ef:8b:e7:
                    7b:0c:6d:7c:7b:2b:2e:6a:cc:ad:ca:e7:15:e0:14:
                    c7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:65:23:E1:DC:16:5D:A5:73:6F:E9:A5:A5:CB:86:7D:4D:A2:79:10
            X509v3 Authority Key Identifier:
                keyid:EC:4B:5C:02:A4:2E:82:DD:AD:39:B6:FA:E6:EC:A0:F3:3E:F8:CA:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7EtcAqQugt2tObb65uyg8z74ym0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/E2Uj4dwWXaVzb-mlpcuGfU2ieRA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.245.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cb:d8:49:a9:79:a1:c9:b7:76:58:65:c6:5d:ad:19:cd:01:62:
         2a:38:57:8d:2e:93:00:e0:22:86:c9:35:17:be:0b:38:f1:eb:
         1c:49:56:97:79:ad:d2:31:81:0b:8d:91:77:2c:4d:91:d0:9e:
         db:1f:50:b0:02:6a:a5:d5:ce:04:35:ba:81:41:0a:98:bc:88:
         3c:da:fe:c6:37:6e:3a:89:a2:cb:52:ae:1a:16:04:6f:ab:9e:
         db:5d:43:2c:0d:fe:96:9b:46:4d:24:f2:39:1c:97:00:a0:7a:
         6b:3e:e6:47:8c:fa:4a:e8:90:da:f8:c2:a0:51:8d:ba:8c:ef:
         87:27:a2:03:04:d7:5c:5a:ba:6e:8f:4b:74:f1:b6:5b:e8:13:
         b4:92:e1:2c:18:75:be:53:2d:fc:c4:3b:bc:5c:08:01:c6:63:
         bb:2f:3f:dd:24:76:2f:ba:1d:9b:96:94:ea:64:9f:ad:21:27:
         03:f9:ca:2a:46:ab:42:df:d0:e3:87:38:85:f2:b9:a1:28:e7:
         c0:bb:b4:33:a4:d4:67:b0:b6:f1:1f:b5:3b:bc:60:0f:bf:e6:
         3c:34:fe:92:d5:a6:76:0c:dc:de:9d:82:17:d0:77:1d:50:31:
         b4:e0:2b:09:c6:f5:b1:99:36:d8:54:1b:e8:f3:28:af:02:9e:
         c2:19:db:13
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFQzRC
NUMwMkE0MkU4MkREQUQzOUI2RkFFNkVDQTBGMzNFRjhDQTZEMB4XDTI0MDIyMDIy
NDYwNVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoMTM2NTIzRTFEQzE2NURB
NTczNkZFOUE1QTVDQjg2N0Q0REEyNzkxMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM7oTNEQGrXxSA/EFwBDAuVOuODASG8GqktHtBpQksdGQN4f928M
EB21qIqT6WeJ9Ix+SUXIxHnfCe+vkFNiGo+ZP6Govtw6JizyfU7+3D7FjtC5DyHN
+RSncyxd9U1ZJKiISj4TaNcLkNzjZDQPhmFEggpoM8ChH9muJ2VD4tOgI5+wSVnE
LX+NBe/nZ8H8Suexv4VjFiPy0a5tYwfDmjzi4mfkITCvWtPjXrK4mN/U71T6qa/A
yX2hk9Q3fOwaPsYadO9qKXB7RJVuZbnBgQDOR6bM3MZB65BrkZhfaCNsUOTW33HP
EgGSxSy774vnewxtfHsrLmrMrcrnFeAUx9UCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQTZSPh3BZdpXNv6aWly4Z9TaJ5EDAfBgNVHSMEGDAWgBTsS1wCpC6C3a05tvrm
7KDzPvjKbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyNDUvN0V0Y0FxUXVndDJ0T2JiNjV1eWc4ejc0eW0wLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvN0V0Y0FxUXVndDJ0T2JiNjV1eWc4
ejc0eW0wLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMjQ1L0UyVWo0ZHdXWGFWemItbWxwY3VHZlUyaWVSQS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAU99UAwDQYJKoZIhvcNAQELBQADggEBAMvYSal5ocm3dlhlxl2tGc0B
Yio4V40ukwDgIobJNRe+Czjx6xxJVpd5rdIxgQuNkXcsTZHQntsfULACaqXVzgQ1
uoFBCpi8iDza/sY3bjqJostSrhoWBG+rnttdQywN/pabRk0k8jkclwCgems+5keM
+krokNr4wqBRjbqM74cnogME11xaum6PS3TxtlvoE7SS4SwYdb5TLfzEO7xcCAHG
Y7svP90kdi+6HZuWlOpkn60hJwP5yipGq0Lf0OOHOIXyuaEo58C7tDOk1GewtvEf
tTu8YA+/5jw0/pLVpnYM3N6dghfQdx1QMbTgKwnG9bGZNthUG+jzKK8CnsIZ2xM=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:05 2024 by rpki-client on console-fra.rpki-client.org