Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/1Jril0ED1Qooz5ueijN-pF2lChI.roa
File:                     1Jril0ED1Qooz5ueijN-pF2lChI.roa (raw, json)
Hash identifier:          3n4hKORqxIpydqQSz0Q+4iWzRCrXcfwjIq7Ldgnun10=
Subject key identifier:   D4:9A:E2:97:41:03:D5:0A:28:CF:9B:9E:8A:33:7E:A4:5D:A5:0A:12
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       18
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/1Jril0ED1Qooz5ueijN-pF2lChI.roa
Signing time:             Wed 06 Dec 2023 01:40:36 +0000
ROA not before:           Wed 06 Dec 2023 01:40:36 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        61.194.0.0/16 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Dec  6 01:40:36 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=D49AE2974103D50A28CF9B9E8A337EA45DA50A12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:df:ef:01:dc:f5:15:ac:26:e2:33:a1:57:c4:
                    cb:f8:b3:23:a8:82:67:06:c2:71:56:10:4a:15:23:
                    a4:f1:3c:8a:be:76:f9:52:8c:6a:52:cd:b8:d8:76:
                    2e:ab:f0:22:c0:ab:25:ee:5a:57:cb:fd:b2:c5:e9:
                    e6:43:63:9f:af:ae:f8:00:b3:47:a2:6a:96:af:35:
                    96:a6:ba:91:8d:59:f6:c2:c1:d8:17:e0:cb:c1:c5:
                    dd:ff:2f:b2:1d:d6:78:06:db:7d:e2:e8:cc:a0:7d:
                    cc:9f:aa:27:c9:96:7e:00:8e:66:07:cb:24:2e:e2:
                    aa:72:d4:3e:0d:56:5a:7b:7d:5f:58:47:06:52:a7:
                    94:1c:ce:e0:9c:bf:8b:c9:89:55:0c:be:ba:2a:cb:
                    f9:3c:55:68:69:fc:70:9c:eb:b4:4a:58:60:02:f3:
                    12:25:95:2e:9f:9e:9a:72:bc:9b:a9:54:6a:52:5f:
                    b8:91:26:1e:38:56:fe:e7:6a:cd:70:82:10:90:5b:
                    ad:1d:be:6d:22:fe:f3:a6:fc:ba:b8:34:d4:bb:91:
                    9c:24:4e:a5:fb:da:b1:77:f7:42:97:39:09:7f:4e:
                    ee:12:16:e2:61:0c:71:6e:eb:70:1a:83:d4:77:73:
                    5d:93:eb:df:a9:e2:b1:c8:e1:45:30:8c:13:d0:5b:
                    5c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9A:E2:97:41:03:D5:0A:28:CF:9B:9E:8A:33:7E:A4:5D:A5:0A:12
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/1Jril0ED1Qooz5ueijN-pF2lChI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.194.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:fa:fc:48:00:84:6c:61:06:c1:c3:38:19:9a:59:35:4c:b2:
         68:98:b9:c8:ae:a3:5e:98:af:68:24:ad:18:b5:ed:13:e4:0a:
         e6:bf:72:58:57:5a:19:2c:77:25:e3:d0:84:e0:40:0b:0c:e0:
         ca:37:e1:dc:eb:57:71:c6:b7:ce:5f:c3:1e:d5:da:e5:eb:c1:
         30:66:35:39:52:ca:ec:f1:db:3d:0b:6f:7a:16:0a:d1:6c:6a:
         60:85:a2:e1:73:18:90:23:ae:79:76:0b:bc:54:78:c0:9a:44:
         82:72:78:a5:45:ed:d5:aa:48:5a:13:09:ee:0b:54:20:53:a2:
         fc:bd:38:71:80:17:5f:a1:14:77:62:02:c4:f9:ba:5c:80:cb:
         59:12:bc:c4:08:a3:f4:69:a8:0f:ed:63:34:c9:8e:c5:1e:13:
         43:44:9b:27:36:74:c8:a7:dc:1b:87:9f:1b:db:cd:96:a7:02:
         20:a7:a3:06:6f:0a:a5:95:c5:7d:df:ff:96:18:71:04:82:8b:
         eb:54:bb:bc:41:fa:23:c1:d6:e9:06:63:c9:13:b3:51:ff:15:
         0e:65:bf:d4:33:74:5a:43:92:cc:61:d9:d9:bc:8c:42:fa:4b:
         24:30:36:b2:bb:af:0f:fe:c8:bf:dd:26:34:14:d0:dc:3b:d7:
         e9:0a:f5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:19 2024 by rpki-client on console-ams.rpki-client.org