Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/-wElUAYmIkUxLxiR6OsfiWpq718.roa
File:                     -wElUAYmIkUxLxiR6OsfiWpq718.roa (raw, json)
Hash identifier:          1BlQ9TUKxbaBtV8Mq28lSAjq5yUaRT/ELMkzcNjjUO4=
Subject key identifier:   FB:01:25:50:06:26:22:45:31:2F:18:91:E8:EB:1F:89:6A:6A:EF:5F
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       42
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/-wElUAYmIkUxLxiR6OsfiWpq718.roa
Signing time:             Mon 01 Jan 2024 01:30:49 +0000
ROA not before:           Mon 01 Jan 2024 01:30:49 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     17676
IP address blocks:        61.215.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Jan  1 01:30:49 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=FB01255006262245312F1891E8EB1F896A6AEF5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:eb:32:49:cd:fe:e4:a9:b6:72:dc:4d:9c:
                    f8:db:db:73:f4:36:ba:1d:29:46:21:4d:01:a1:f2:
                    12:3a:3f:a3:9a:ad:af:68:a8:95:5e:b8:09:04:50:
                    3b:ff:8a:c6:c2:56:2a:34:4c:fc:2b:98:9a:89:7e:
                    2c:d2:01:91:07:1d:40:2c:be:fd:7a:76:84:6b:78:
                    f1:6a:c2:fc:1a:60:e1:c1:56:dd:6a:17:0c:ee:3c:
                    61:4d:d3:da:84:00:69:ca:21:4b:62:33:66:fa:58:
                    2b:19:f0:08:32:48:97:cf:19:f8:f7:58:e8:91:54:
                    c9:c2:62:18:51:21:7c:62:2b:b4:99:cd:29:cd:12:
                    ed:ab:ce:37:e4:16:c2:48:22:f4:1e:d3:c5:33:be:
                    b9:c6:3a:40:d7:bf:31:28:d2:5a:ef:8d:93:5c:62:
                    bf:f5:89:98:bc:8a:45:5c:ce:7f:4b:55:13:5c:7f:
                    e6:b9:af:07:08:d4:18:21:47:df:16:aa:34:d3:aa:
                    26:78:e3:3a:8b:b8:2c:88:10:f8:9e:d7:d6:f0:fa:
                    74:4d:d5:8b:06:f7:d2:61:d2:2a:0c:02:69:fd:46:
                    1b:36:46:9d:eb:d7:38:b6:d4:28:f1:66:ab:e6:b0:
                    2c:7a:57:9c:2c:48:25:92:68:ad:e6:23:25:c5:8b:
                    00:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:01:25:50:06:26:22:45:31:2F:18:91:E8:EB:1F:89:6A:6A:EF:5F
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/-wElUAYmIkUxLxiR6OsfiWpq718.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:0f:a0:20:57:5b:a7:7b:1b:55:ee:e4:3c:16:33:a9:8f:e3:
         3d:b2:41:6d:63:34:b4:12:0c:41:e9:96:23:d3:2e:44:cc:67:
         1c:d2:92:fb:96:45:2c:bf:09:53:f3:1d:a8:ef:25:03:ca:bd:
         ba:3a:5d:b0:69:30:9b:e1:b1:6f:e1:bc:f4:d1:1c:13:44:93:
         6c:6f:30:7e:99:61:ec:61:7b:ea:7b:88:cf:bd:5c:e8:73:b6:
         9c:7a:7d:36:ce:11:9a:f6:0c:cb:fb:13:32:aa:51:a9:ee:48:
         36:b9:ab:ad:bb:6a:d7:6b:fe:07:6b:51:cd:f7:15:ab:9d:a0:
         38:33:13:9d:42:5a:b0:9e:fb:31:70:df:11:7c:87:f9:b5:7f:
         44:da:92:1e:80:83:f2:52:23:45:e5:86:35:0f:ee:32:f2:0d:
         c8:61:8b:94:4b:48:1b:56:ce:d0:b5:37:22:97:ef:e3:73:78:
         4e:bd:b1:5d:ec:4a:3b:cc:80:0a:b5:a5:93:11:44:ef:57:f7:
         13:83:55:1e:83:86:aa:e0:d8:43:34:c5:26:a8:f7:bc:8c:1e:
         e7:79:d2:6b:4d:77:59:93:7b:00:36:c8:06:cb:e6:a3:84:38:
         18:0f:ef:cd:f6:a9:c7:0a:20:b0:90:45:3e:fd:15:6b:8a:b0:
         7b:5f:dc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:22 2024 by rpki-client on console-fra.rpki-client.org