Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/W6239D4BDdhf0rLfGn7hOfmtSvQ.roa
File:                     W6239D4BDdhf0rLfGn7hOfmtSvQ.roa (raw, json)
Hash identifier:          2qKW5Ya16pGRh8lzkBkSIqpcDsamyQgywNrhp38jBGE=
Subject key identifier:   5B:AD:B7:F4:3E:01:0D:D8:5F:D2:B2:DF:1A:7E:E1:39:F9:AD:4A:F4
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0261
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/W6239D4BDdhf0rLfGn7hOfmtSvQ.roa
Signing time:             Fri 31 May 2024 01:37:37 +0000
ROA not before:           Fri 31 May 2024 01:37:37 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        61.205.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:37:37 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=5BADB7F43E010DD85FD2B2DF1A7EE139F9AD4AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0b:c9:24:ba:cf:f4:0e:95:e6:2b:31:39:37:
                    1a:32:52:2c:c2:24:8e:c6:f4:ac:b9:ad:ca:1a:ab:
                    cb:2e:75:98:19:50:ed:d6:35:8a:af:bf:5c:fa:44:
                    af:06:13:80:7c:24:19:46:75:95:28:7c:cf:ae:37:
                    e9:c2:c2:be:d5:5a:a7:f7:ad:7f:c6:82:36:ba:6e:
                    6a:2b:fc:f4:94:ad:c1:51:44:a7:70:d8:b8:b4:a0:
                    e0:5a:4d:a6:52:b3:ef:9e:db:05:c4:c7:47:77:e5:
                    0d:02:f8:f7:11:dc:57:cc:85:f1:02:79:32:f3:63:
                    5f:65:67:5d:a1:c1:2b:c0:fa:a7:61:53:4b:f3:d9:
                    9c:b7:6a:0c:00:07:78:4e:46:0c:49:ea:e2:9c:63:
                    eb:3b:ba:fb:bf:02:60:d8:12:e3:79:86:bd:e6:52:
                    6c:e1:88:2a:93:b2:09:da:70:3d:ec:5a:b3:8d:2f:
                    6f:f2:c0:dd:c8:7e:7b:81:b7:96:f6:6d:e4:96:af:
                    18:83:0b:ed:cb:bf:4a:7a:3d:ec:d8:0f:13:ee:ff:
                    87:81:6e:20:22:69:7d:68:a7:0c:d0:74:19:41:8f:
                    e0:e0:7d:f1:ec:8d:83:0f:db:9a:30:c2:ea:49:81:
                    cc:a2:dd:f3:5f:8e:23:5d:b6:6c:6b:4c:c0:26:d1:
                    12:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AD:B7:F4:3E:01:0D:D8:5F:D2:B2:DF:1A:7E:E1:39:F9:AD:4A:F4
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/W6239D4BDdhf0rLfGn7hOfmtSvQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         44:77:ea:51:81:d8:12:98:27:84:af:03:61:2c:6b:5c:4e:f9:
         94:79:b7:26:c8:b2:62:a8:b3:0a:b0:43:68:27:23:57:6b:32:
         90:9c:ef:88:cd:9a:ca:b3:77:54:fb:73:df:d7:3b:d0:58:5d:
         de:71:2b:00:94:d3:18:fc:0a:8a:57:84:66:7f:84:2f:d5:01:
         73:95:ac:bc:bc:e1:92:ca:a5:8e:f7:f3:74:b4:f7:26:08:50:
         6f:dc:18:df:46:bc:41:97:54:4a:7d:95:53:ac:e4:ce:39:9a:
         60:74:2a:1a:8f:26:ac:83:05:2e:54:05:ec:aa:9f:5b:6d:4e:
         32:62:4c:b4:60:dc:75:f5:07:0d:3b:78:20:87:a3:19:44:05:
         05:36:9a:e2:96:31:f6:af:1d:1d:88:59:d2:72:5a:27:3d:d2:
         79:ad:a3:01:c7:ab:ea:06:01:b3:57:4b:22:35:bf:cd:f5:bf:
         af:09:5f:c5:61:fd:43:fe:0c:43:62:39:67:a1:4b:ad:a6:7d:
         a4:8b:0f:d1:8d:b9:2a:a9:46:c9:38:f5:7f:77:43:cf:da:56:
         27:fc:4c:99:66:71:8c:88:a0:c4:8b:b0:10:66:26:36:d2:b3:
         65:c0:6b:32:d6:3e:b7:8d:65:48:ae:ec:e1:f7:08:9c:fc:d7:
         96:58:fe:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:44 2024 by rpki-client on console-ams.rpki-client.org