Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/oQG2Hju_ORnjkhsUxqp8S2xpTE0.roa
File:                     oQG2Hju_ORnjkhsUxqp8S2xpTE0.roa (raw, json)
Hash identifier:          6HHre/LU5QxFUsGTiWLlUT2bC/zkwgIRVaqPM5DmA6w=
Subject key identifier:   A1:01:B6:1E:3B:BF:39:19:E3:92:1B:14:C6:AA:7C:4B:6C:69:4C:4D
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       26
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/oQG2Hju_ORnjkhsUxqp8S2xpTE0.roa
Signing time:             Fri 18 Oct 2024 08:13:38 +0000
ROA not before:           Fri 18 Oct 2024 08:13:38 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     23783
IP address blocks:        61.11.192.0/20 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Oct 18 08:13:38 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=A101B61E3BBF3919E3921B14C6AA7C4B6C694C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:e3:5f:9d:29:bc:a3:a4:7d:6b:9d:b1:ac:
                    af:ff:27:e5:78:32:47:e2:1c:b4:6d:c3:f5:36:a4:
                    46:04:13:f2:29:9f:7f:9e:f4:00:86:15:9e:9a:bd:
                    12:65:cb:e1:c2:c7:cc:72:7c:7a:71:02:47:c9:37:
                    9b:73:a1:b6:8b:7a:2c:d6:f7:a1:c8:21:f5:38:1e:
                    a3:af:e1:e8:0f:2b:dd:2f:5c:63:15:9c:1e:2e:00:
                    a8:d2:e2:4e:d5:bb:90:f3:7d:c4:be:37:1d:bd:f3:
                    08:51:cd:72:15:29:3d:f5:dc:a0:3d:d7:75:0f:09:
                    4e:8b:dd:99:fe:61:97:0f:e0:07:51:fc:77:6f:7f:
                    3f:60:fc:19:97:59:2f:7c:72:72:d9:27:b1:66:6e:
                    c0:59:a1:e6:31:90:11:fb:8c:ad:03:3a:ba:69:b3:
                    74:b1:b4:4b:3b:71:be:0c:74:6d:a0:8a:8b:0e:b5:
                    60:59:c0:4f:b0:8f:07:3a:72:28:9b:7b:c2:7a:3a:
                    95:9b:1c:2a:f3:31:df:d1:0b:18:fa:27:0d:50:4a:
                    09:24:d9:cd:6b:e3:c5:99:9a:e4:40:ef:56:3b:64:
                    97:dd:0e:91:a6:fc:f1:de:1f:df:0e:81:3f:1f:55:
                    66:69:d0:11:12:ec:02:38:2c:e5:e9:22:d0:32:f3:
                    c2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:01:B6:1E:3B:BF:39:19:E3:92:1B:14:C6:AA:7C:4B:6C:69:4C:4D
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/oQG2Hju_ORnjkhsUxqp8S2xpTE0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.11.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:ce:fc:6c:b8:fc:06:d7:02:ca:72:b8:53:ed:5d:86:ae:41:
         49:11:62:62:16:d8:2d:c4:a6:54:88:f4:14:95:11:e2:90:ba:
         66:90:4b:dc:86:3f:9f:e1:70:04:21:22:fe:82:66:af:78:b2:
         89:6c:14:89:ad:78:e9:f3:6a:6e:ce:7b:1f:65:15:ea:ed:a6:
         f0:1e:2d:20:e4:7b:2b:32:15:ac:93:64:d4:91:f5:dd:2c:f8:
         99:41:31:e4:33:c8:ae:61:02:11:72:b0:87:28:ae:59:c2:31:
         7a:80:92:b0:d7:5d:10:3b:6b:26:e4:44:6d:cc:77:c7:12:81:
         8c:a3:82:a0:85:61:2c:b9:19:a5:59:4e:bc:9a:6d:cb:8e:42:
         51:04:bd:f5:59:9e:0e:95:f1:05:75:ac:09:f7:0c:cb:56:55:
         19:3e:ed:af:00:98:9e:ca:5e:c4:73:d8:37:cc:3e:c2:fb:db:
         7b:12:35:db:36:8b:d9:b1:cb:c9:6d:1b:55:c4:c3:0c:d5:04:
         a7:30:b6:fb:17:3e:56:63:77:8e:fd:cc:aa:6a:60:84:32:9f:
         4f:fe:18:25:86:6f:7e:32:a0:36:90:73:1d:33:ff:62:6b:d4:
         47:92:61:8e:f9:51:77:b1:33:09:d6:a7:50:bc:c4:7d:35:9f:
         ab:a7:53:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:35 2024 by rpki-client on console-ams.rpki-client.org