Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Q_V6wKPHE79TAIMVKJPZjbP7EdU.roa
File:                     Q_V6wKPHE79TAIMVKJPZjbP7EdU.roa (raw, json)
Hash identifier:          C97W/xSL9gKjmzNdOlBdi4Xz63P1Ehu0bEU1TGEDLDU=
Subject key identifier:   43:F5:7A:C0:A3:C7:13:BF:53:00:83:15:28:93:D9:8D:B3:FB:11:D5
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       025C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Q_V6wKPHE79TAIMVKJPZjbP7EdU.roa
Signing time:             Fri 31 May 2024 01:35:43 +0000
ROA not before:           Fri 31 May 2024 01:35:43 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        59.156.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604 (0x25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:35:43 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=43F57AC0A3C713BF530083152893D98DB3FB11D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0c:c5:eb:df:7d:aa:94:9b:1d:3b:ba:08:d2:
                    e8:d2:c5:80:e6:07:26:14:d4:2b:b4:b9:26:dd:53:
                    03:96:1e:5d:ef:ca:43:06:51:7a:62:1d:0f:ae:b5:
                    7f:12:40:9a:fc:41:8c:b8:f0:c3:98:10:86:a0:aa:
                    34:2b:d4:73:aa:2c:b9:ba:c0:de:df:eb:ed:6c:c4:
                    c5:fb:99:63:dc:73:15:de:19:d3:76:0b:2c:58:8d:
                    b0:cf:a4:ad:86:f6:67:78:bb:2e:1d:28:f9:de:cf:
                    51:2e:d3:88:ee:38:60:b2:62:a8:59:35:8e:b0:f1:
                    2c:91:b5:15:26:c8:1d:ee:6f:92:b9:08:08:3a:ab:
                    bb:00:68:40:7e:df:56:c3:3a:94:83:c1:50:61:10:
                    e7:0b:8f:12:5d:0b:eb:d2:06:17:4c:ef:3b:6f:83:
                    5c:ab:89:01:3c:7c:45:d9:45:9d:32:ce:1c:8b:ca:
                    ce:3e:0f:6e:77:99:07:ca:61:13:b2:a2:3d:81:b5:
                    28:c5:8b:21:0e:38:1e:54:7c:aa:6d:b3:1c:16:78:
                    62:86:e8:d3:5a:cd:29:cc:4a:04:c3:9b:b6:20:61:
                    e8:99:4f:2e:51:0b:70:8f:6f:26:bb:ae:f1:65:9f:
                    78:2a:00:c7:5d:ce:3e:f9:c8:2e:3d:2d:02:35:48:
                    28:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F5:7A:C0:A3:C7:13:BF:53:00:83:15:28:93:D9:8D:B3:FB:11:D5
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Q_V6wKPHE79TAIMVKJPZjbP7EdU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         01:5e:79:5b:42:4d:98:7a:6a:a5:65:ab:38:81:bc:d0:96:a6:
         0f:50:b4:8d:c0:6c:f4:6b:84:10:e6:46:2c:78:fd:cc:41:44:
         87:b1:bb:81:6d:b2:90:4c:e2:4a:25:11:6f:47:2c:b2:4a:eb:
         80:d4:ab:8d:59:cf:9b:ef:ef:a1:75:06:9c:f7:59:5f:fd:57:
         9a:df:34:03:89:1b:19:c5:37:75:ea:e6:3c:a4:58:66:4c:10:
         9b:a9:5b:ce:76:ba:50:2a:6b:21:24:ce:63:ca:b7:78:23:60:
         3a:0c:03:4f:53:3f:77:0c:28:8f:1f:b3:24:f6:58:e5:06:cb:
         e8:8f:6e:8a:e0:74:3d:2b:52:8c:00:36:8a:bd:53:cb:f0:1d:
         cb:50:58:e8:a3:3e:06:a4:5c:6c:9b:62:9f:80:09:58:a9:68:
         62:2e:71:ce:22:55:29:a9:d3:d7:3e:2a:2a:82:5c:18:e4:ad:
         ec:a9:a0:1d:1c:a7:e4:a0:88:db:b6:21:c5:05:58:20:85:1d:
         a5:a8:ff:a1:f5:06:f8:92:a1:24:a9:a6:24:ff:8b:9e:8d:26:
         a6:7f:16:d6:40:c4:75:fa:d1:fd:81:bd:f3:47:d9:f6:44:70:
         0f:32:f7:1b:fa:bc:05:0c:f0:ed:ea:6f:40:2d:05:4c:de:da:
         63:51:9f:02
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw
MTM1NDNaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQzRjU3QUMwQTNDNzEz
QkY1MzAwODMxNTI4OTNEOThEQjNGQjExRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeDMXr332qlJsdO7oI0ujSxYDmByYU1Cu0uSbdUwOWHl3vykMG
UXpiHQ+utX8SQJr8QYy48MOYEIagqjQr1HOqLLm6wN7f6+1sxMX7mWPccxXeGdN2
CyxYjbDPpK2G9md4uy4dKPnez1Eu04juOGCyYqhZNY6w8SyRtRUmyB3ub5K5CAg6
q7sAaEB+31bDOpSDwVBhEOcLjxJdC+vSBhdM7ztvg1yriQE8fEXZRZ0yzhyLys4+
D253mQfKYROyoj2BtSjFiyEOOB5UfKptsxwWeGKG6NNazSnMSgTDm7YgYeiZTy5R
C3CPbya7rvFln3gqAMddzj75yC49LQI1SCirAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUQ/V6wKPHE79TAIMVKJPZjbP7EdUwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L1FfVjZ3S1BIRTc5VEFJTVZLSlBaamJQN0VkVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAY7nEAwDQYJKoZIhvcNAQELBQADggEBAAFeeVtCTZh6aqVlqziBvNCWpg9Q
tI3AbPRrhBDmRix4/cxBRIexu4FtspBM4kolEW9HLLJK64DUq41Zz5vv76F1Bpz3
WV/9V5rfNAOJGxnFN3Xq5jykWGZMEJupW852ulAqayEkzmPKt3gjYDoMA09TP3cM
KI8fsyT2WOUGy+iPborgdD0rUowANoq9U8vwHctQWOijPgakXGybYp+ACVipaGIu
cc4iVSmp09c+KiqCXBjkreypoB0cp+SgiNu2IcUFWCCFHaWo/6H1BviSoSSppiT/
i56NJqZ/FtZAxHX60f2BvfNH2fZEcA8y9xv6vAUM8O3qb0AtBUze2mNRnwI=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:13 2024 by rpki-client on console-fra.rpki-client.org