Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/hs5hw7Klnhy2J5zLUAPJhPm1oUs.roa
File:                     hs5hw7Klnhy2J5zLUAPJhPm1oUs.roa (raw, json)
Hash identifier:          SPdzR2GEm9KLvI04OX4YqgnoEf5DnNOa8TKHQDSK8tA=
Subject key identifier:   86:CE:61:C3:B2:A5:9E:1C:B6:27:9C:CB:50:03:C9:84:F9:B5:A1:4B
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       3A
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/hs5hw7Klnhy2J5zLUAPJhPm1oUs.roa
Signing time:             Wed 31 Jul 2024 00:56:44 +0000
ROA not before:           Wed 31 Jul 2024 00:56:44 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        61.194.0.0/16 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jul 31 00:56:44 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=86CE61C3B2A59E1CB6279CCB5003C984F9B5A14B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:78:fc:54:c9:94:14:0a:08:0b:70:cc:f1:15:
                    03:2a:1d:4a:ba:e2:2e:e8:63:92:34:06:bc:2c:57:
                    d4:49:4b:35:ef:6b:72:50:cd:b6:22:46:05:e2:9a:
                    83:75:5c:27:2a:31:ff:dd:5f:04:32:2c:2c:ca:16:
                    ce:08:bd:18:5d:d6:37:a8:86:eb:e1:45:21:05:bc:
                    89:c0:93:ab:16:ca:2c:30:48:a1:d2:82:37:ec:7e:
                    f3:ac:f4:29:f1:00:24:0f:ff:97:3c:74:ca:35:d2:
                    80:16:60:e8:52:2d:c8:11:9b:e9:fc:d9:84:5a:ae:
                    94:d9:74:c7:c2:a7:e1:40:98:d7:11:1f:4a:50:ea:
                    17:63:6b:9b:cb:87:24:eb:d8:57:7e:6a:8b:0b:dc:
                    ff:4c:e0:f9:4f:87:b8:b8:b3:c6:b1:b3:4e:48:97:
                    29:e4:8d:07:b1:66:a8:8e:2c:2b:cc:9e:a1:2e:c2:
                    6f:3e:a0:1b:0e:ce:7e:db:11:df:4f:05:ed:b1:a1:
                    ff:8c:83:90:3e:e7:40:92:ca:39:d5:35:cf:a7:91:
                    8e:d8:3d:44:33:b3:d4:aa:ff:86:6f:6d:1c:0e:09:
                    38:66:63:37:d0:22:86:8b:68:7f:c3:79:55:64:f7:
                    33:6d:36:2e:69:e5:49:9e:a4:b1:0f:99:e7:17:ba:
                    18:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CE:61:C3:B2:A5:9E:1C:B6:27:9C:CB:50:03:C9:84:F9:B5:A1:4B
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/hs5hw7Klnhy2J5zLUAPJhPm1oUs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.194.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         78:6f:42:a4:de:a9:46:ab:26:f8:e4:fd:20:d6:3d:43:98:aa:
         39:e0:4c:f3:67:e6:bf:ef:2e:18:7e:f2:d3:18:13:87:d3:6b:
         10:84:9d:14:5a:82:58:b1:aa:23:8d:6f:ca:31:b3:a1:c4:fa:
         71:26:11:36:e4:8e:00:ab:37:fb:69:8d:5b:fe:77:3c:57:08:
         31:4c:00:f0:4d:d6:af:e8:37:23:a6:34:16:c6:1f:16:dd:b8:
         23:94:dd:fa:0a:fb:79:b1:6f:2b:a0:cd:0e:a7:00:fc:ea:ce:
         59:6a:69:f2:a4:8c:d2:61:83:15:c9:3a:e5:e1:95:32:62:56:
         8e:10:52:5b:2c:bb:c5:53:49:aa:c8:7e:4c:8c:9a:a6:de:19:
         86:67:0b:78:1b:61:1f:00:9e:6f:a1:6c:0f:dd:28:d9:7b:de:
         ac:b5:0d:40:60:7a:03:b3:17:48:56:bf:0d:5a:86:9b:79:ce:
         5d:53:b9:8b:e1:61:5c:e7:bd:73:3a:93:3d:9d:b9:21:2e:45:
         b1:9a:b9:f2:d9:94:2b:b3:29:a5:93:43:44:f1:02:6e:1e:88:
         c2:e9:d3:b0:ec:61:47:3d:1b:de:42:2b:23:81:f0:20:c7:ad:
         74:e3:48:f0:d4:41:08:37:45:50:7c:43:f0:d2:d0:85:e7:2c:
         fb:d5:ae:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:57 2024 by rpki-client on console-fra.rpki-client.org