Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/7Ec0Abu9s2cftX2ogTtUJenuBF8.roa
File:                     7Ec0Abu9s2cftX2ogTtUJenuBF8.roa (raw, json)
Hash identifier:          myBOstaLrjJVxXq3AzTAaXMF3yLDaW6rgFRTYLxg2PQ=
Subject key identifier:   EC:47:34:01:BB:BD:B3:67:1F:B5:7D:A8:81:3B:54:25:E9:EE:04:5F
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       4D
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/7Ec0Abu9s2cftX2ogTtUJenuBF8.roa
Signing time:             Thu 31 Oct 2024 01:28:39 +0000
ROA not before:           Thu 31 Oct 2024 01:28:39 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        61.197.0.0/16 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Oct 31 01:28:39 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=EC473401BBBDB3671FB57DA8813B5425E9EE045F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:3d:25:7c:0f:7c:32:d6:06:46:d4:3d:32:
                    fb:08:69:c2:b4:8b:4d:c4:2b:25:33:84:82:78:2d:
                    bf:a1:5b:75:39:cb:c3:87:70:ac:2d:e0:f9:60:57:
                    d8:42:a4:34:34:2d:7f:af:cd:68:c0:a7:ac:85:48:
                    1d:d7:ae:21:3b:11:16:f2:04:5e:24:c1:de:98:c2:
                    c4:e4:fe:9e:35:ee:08:c0:68:2c:57:55:4e:66:a3:
                    c3:47:b6:b1:64:84:3c:62:78:5f:b0:c0:82:32:de:
                    05:78:27:ee:67:b3:9b:52:a0:01:b1:39:48:1e:2c:
                    39:63:bc:19:cc:3a:58:db:e8:d1:62:77:9d:cf:b5:
                    e1:e9:46:0c:11:54:2d:f8:4b:a9:a5:1e:ba:57:9f:
                    4f:70:bf:fc:9c:34:81:99:ae:53:89:75:8c:b4:0f:
                    cd:e2:dd:92:45:c8:95:51:6c:46:b6:f5:d1:6c:f2:
                    7d:37:4a:ec:b5:8f:47:c3:c3:b4:55:46:c1:18:13:
                    f4:c6:6d:10:a5:3b:13:16:d0:7e:0b:89:d0:a9:18:
                    ef:93:2e:f5:21:45:55:66:a8:99:65:b9:6c:f0:39:
                    25:5f:aa:4c:b5:df:3b:91:db:8f:1c:ff:a4:76:00:
                    59:da:a7:ab:02:cc:33:1b:c8:a3:fe:0f:e6:61:83:
                    66:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:47:34:01:BB:BD:B3:67:1F:B5:7D:A8:81:3B:54:25:E9:EE:04:5F
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/7Ec0Abu9s2cftX2ogTtUJenuBF8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.197.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6b:98:f9:e1:f5:c9:f1:ef:24:4b:7d:bc:5a:cf:f3:07:42:17:
         8b:93:2b:a1:36:65:c1:fe:da:67:2f:d6:d2:ec:e8:8e:a3:0f:
         30:2b:41:df:3a:9e:fb:06:4f:72:67:65:4f:f4:ff:31:da:c9:
         01:98:1e:55:ee:2f:1a:b3:52:6e:bf:63:2a:eb:4b:1c:52:12:
         2d:4b:aa:12:b4:6c:86:a5:70:3d:b2:86:7c:55:cc:49:b8:33:
         b3:d6:2f:16:67:da:b0:63:95:4c:bd:44:e3:87:23:34:be:d9:
         3b:14:d2:00:9d:f6:75:cf:47:7e:45:d4:60:d9:14:bd:28:85:
         e7:db:07:79:2f:9c:2e:14:7b:3a:83:26:47:06:26:06:89:4b:
         88:c4:81:78:ea:0d:e0:8d:d2:0d:ee:f2:d1:a3:e9:a5:ea:95:
         24:17:f3:fe:c4:35:16:f3:b2:00:39:74:1a:3d:56:95:d2:f9:
         54:02:b8:95:1e:4b:ec:c7:ce:b5:ab:7d:64:d6:21:42:46:ce:
         6f:3a:c6:0d:bf:ee:ad:cf:a3:4b:d9:d3:5c:5b:61:cf:54:49:
         fe:a6:85:5d:22:41:99:70:6f:15:4a:17:d3:00:6c:d2:d1:a9:
         a8:f9:4e:d8:b9:d0:a8:2b:d6:5d:f1:83:aa:d5:76:b4:c5:08:
         4f:d4:f0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:06 2024 by rpki-client on console-fra.rpki-client.org