Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/wLD5EA839NEf04b7gRMA5jDmsRA.roa
File:                     wLD5EA839NEf04b7gRMA5jDmsRA.roa (raw, json)
Hash identifier:          8IPHqNSRyB1WAMoqA7SfeydA8DSaXEP9T9BUCK+Ph2U=
Subject key identifier:   C0:B0:F9:10:0F:37:F4:D1:1F:D3:86:FB:81:13:00:E6:30:E6:B1:10
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       026C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/wLD5EA839NEf04b7gRMA5jDmsRA.roa
Signing time:             Fri 31 May 2024 01:37:42 +0000
ROA not before:           Fri 31 May 2024 01:37:42 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        61.44.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:37:42 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=C0B0F9100F37F4D11FD386FB811300E630E6B110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d1:d2:3f:cc:e5:a3:ff:b0:09:09:01:1e:8a:
                    d9:3e:1f:9d:c1:7d:62:26:63:33:97:f7:9e:3b:9f:
                    7d:38:89:fb:a3:9c:64:f9:76:fc:1a:e6:e8:77:5a:
                    f9:e7:0a:86:8c:31:28:29:2a:24:cb:1f:70:1d:6c:
                    29:13:92:d9:76:86:85:aa:78:7a:43:9f:83:6b:bc:
                    5d:09:52:9d:98:16:4e:9a:f9:e5:7b:d1:39:8f:74:
                    a1:9c:01:f2:29:86:cd:69:64:70:f6:b6:2f:18:6e:
                    48:53:28:ee:60:d7:88:36:de:86:78:af:07:b3:18:
                    fb:16:be:6c:36:7d:f5:18:59:4b:2f:b4:b5:35:3c:
                    11:79:af:0d:dd:12:be:6f:95:0d:76:3a:47:5c:85:
                    0a:2b:be:e1:9f:97:1a:96:f9:ed:34:8e:7c:b4:46:
                    0e:08:be:64:e4:d9:a9:81:2e:39:db:54:74:f2:3b:
                    23:76:b7:65:0c:8f:5e:0c:70:b6:a7:6d:c9:14:08:
                    fe:d5:e8:63:ec:6e:3a:0e:eb:ae:04:be:5a:b2:57:
                    00:ed:dd:ed:ca:d5:16:f5:b2:30:f6:e5:1c:2b:5a:
                    c4:9b:87:72:89:86:55:55:8b:ac:4a:cf:97:01:af:
                    73:7f:0f:c0:ec:b4:3a:c4:3b:df:be:80:74:74:8d:
                    0d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B0:F9:10:0F:37:F4:D1:1F:D3:86:FB:81:13:00:E6:30:E6:B1:10
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/wLD5EA839NEf04b7gRMA5jDmsRA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.44.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:a9:1b:25:42:d1:a3:ea:5d:a4:d4:a7:35:82:b6:1f:6e:14:
         55:57:98:06:14:34:1a:ec:d6:f5:95:f3:70:a5:9f:33:cb:92:
         e8:97:39:36:8a:ae:f0:a7:2b:f6:78:99:83:b4:4e:36:61:0a:
         30:fc:9c:61:86:7f:09:e1:62:85:66:98:32:b9:1f:55:92:c3:
         68:55:d0:98:bb:09:21:7f:c1:b6:05:ed:b2:5d:1c:f0:fe:da:
         62:b0:88:9b:4c:de:d6:68:15:53:5c:66:cc:6d:28:06:ca:66:
         33:7b:0a:ce:c3:9b:5e:b3:6a:bf:28:10:4b:f1:41:12:be:a0:
         3d:ae:d6:7a:16:a4:48:d0:2d:7f:36:ef:40:67:e2:c5:71:e2:
         da:ff:b7:0f:18:9d:95:4a:ba:56:5a:d0:32:68:14:45:ea:c0:
         34:39:f0:ce:70:5b:71:6d:16:18:ae:25:0f:ed:2f:34:5c:eb:
         94:ca:c1:e6:23:de:6d:e4:a7:56:13:b4:08:2b:16:64:11:8e:
         a4:d8:90:8b:e8:52:8b:0c:04:aa:6e:2e:ad:b3:e8:5e:69:7b:
         b4:85:c5:fa:3b:c7:1a:d1:74:a6:e8:4b:06:cb:9d:ed:91:f7:
         07:d1:65:ad:e5:3f:b1:c5:71:c1:e0:25:87:a5:db:9d:79:8b:
         22:ba:a2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org