Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/dEuavb7I5mefUCOerDMS7ouZQ-I.roa
File:                     dEuavb7I5mefUCOerDMS7ouZQ-I.roa (raw, json)
Hash identifier:          +5X8/2CYHhn7hfcrvh53PwuVy8Rxh1PjkaZ290fLbto=
Subject key identifier:   74:4B:9A:BD:BE:C8:E6:67:9F:50:23:9E:AC:33:12:EE:8B:99:43:E2
Certificate issuer:       /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial:       3F
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/dEuavb7I5mefUCOerDMS7ouZQ-I.roa
Signing time:             Sat 31 Aug 2024 01:30:15 +0000
ROA not before:           Sat 31 Aug 2024 01:30:15 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     7670
IP address blocks:        61.213.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
        Validity
            Not Before: Aug 31 01:30:15 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=744B9ABDBEC8E6679F50239EAC3312EE8B9943E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:b9:cf:93:00:d6:5e:18:fa:50:93:1a:81:
                    a2:44:dc:eb:59:cc:13:3c:86:ad:b2:dd:1a:45:45:
                    71:82:64:b4:30:e8:8c:47:04:9e:a0:8a:9b:27:11:
                    34:3e:b5:0f:b0:f5:c1:30:49:5d:24:e6:9b:c4:04:
                    81:ec:f8:a8:62:40:4e:9f:e2:dd:3f:ab:b5:c5:58:
                    a2:07:57:32:b8:2e:4d:f4:fd:d9:dc:82:54:6f:21:
                    86:11:ae:2d:02:b2:d5:40:62:f4:82:e7:86:7a:a6:
                    06:8e:e7:87:04:56:2d:40:22:07:6d:94:82:36:73:
                    4e:c6:da:ed:f7:af:91:d9:2e:26:27:48:10:fd:2a:
                    74:0f:ab:61:68:0d:9b:b5:b0:4b:51:de:b1:d2:56:
                    3a:43:e3:e8:85:91:5e:75:ec:01:9a:35:3a:99:42:
                    dd:e5:1f:8d:83:2d:c1:49:19:70:5e:32:9f:6e:39:
                    40:10:fd:a6:69:eb:2f:ab:1f:50:61:82:6b:ac:b2:
                    80:cb:a7:8c:64:96:c3:41:0f:d4:7c:39:09:5e:7d:
                    0b:0a:da:06:91:6e:62:bb:c3:c4:46:d9:70:62:ee:
                    8a:2d:78:f6:9a:ba:58:78:8e:c0:52:ff:cd:92:d4:
                    48:64:d9:6b:25:82:44:2c:39:78:0b:9d:2d:6d:8b:
                    35:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4B:9A:BD:BE:C8:E6:67:9F:50:23:9E:AC:33:12:EE:8B:99:43:E2
            X509v3 Authority Key Identifier:
                keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/dEuavb7I5mefUCOerDMS7ouZQ-I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:e6:f1:2e:35:d2:42:59:5b:69:b7:e7:72:92:ec:32:1e:fe:
         40:65:44:48:75:02:ee:d4:1b:cf:e1:ab:09:0b:5e:af:dc:d5:
         59:66:09:92:f8:31:8c:55:0b:11:c4:97:e9:8a:b8:61:d5:e5:
         f6:99:46:e8:e9:ae:95:81:f3:2f:dc:c9:62:aa:83:a0:b8:18:
         97:c0:8a:68:33:d8:e7:ff:ad:56:34:fb:d4:68:35:d6:ff:70:
         89:7f:34:18:df:8c:b8:16:46:c5:62:4c:eb:29:53:12:e3:13:
         f3:2b:cb:d0:6d:d1:0c:bb:10:8b:f4:d9:e5:78:41:10:ae:eb:
         f6:c9:84:62:a9:54:83:ce:1b:33:34:41:b0:ad:a0:30:67:98:
         60:a5:7b:ce:f5:7b:b1:83:cb:c8:08:44:71:d7:a5:f5:0b:40:
         a3:63:fd:66:fe:4a:f7:6f:fa:ea:f4:9f:f6:fc:7f:13:ed:2d:
         46:66:4b:05:15:f0:7a:e3:8b:26:60:7b:ce:39:74:6f:7e:8f:
         f8:ca:50:e3:28:b4:95:b0:4d:79:99:ee:c6:c9:20:0f:8c:1e:
         b6:8b:26:91:93:fd:ad:71:a5:d1:98:14:a7:f8:a8:78:a1:15:
         ca:bd:b0:44:2d:73:f1:32:1e:de:91:af:21:89:c0:8c:98:73:
         43:ff:ae:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:28 2024 by rpki-client on console-ams.rpki-client.org