Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/61HA5pikkN9HY4cBsf5nFtabXfo.roa
File:                     61HA5pikkN9HY4cBsf5nFtabXfo.roa (raw, json)
Hash identifier:          SbQg6F9O7n+K3LpLyoFyWTc1R/0BRHpld+nPTDrrd48=
Subject key identifier:   EB:51:C0:E6:98:A4:90:DF:47:63:87:01:B1:FE:67:16:D6:9B:5D:FA
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       4C
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/61HA5pikkN9HY4cBsf5nFtabXfo.roa
Signing time:             Mon 01 Jan 2024 01:30:54 +0000
ROA not before:           Mon 01 Jan 2024 01:30:54 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     17676
IP address blocks:        61.114.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 18:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Jan  1 01:30:54 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=EB51C0E698A490DF47638701B1FE6716D69B5DFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:03:f9:03:b4:43:08:f7:2f:93:2e:6c:0d:
                    1d:0f:1c:b7:d8:82:1e:6e:d4:dc:e7:65:cf:fb:53:
                    92:de:76:7f:2c:3c:55:d6:3a:ef:3d:d6:28:d4:7e:
                    f4:7e:7a:e7:b8:1a:e0:eb:01:1e:a8:bd:4b:d8:d8:
                    6f:11:c6:30:24:a5:f4:70:ea:b3:18:10:42:1e:af:
                    1b:dc:5c:b8:a3:46:b5:86:24:5b:a1:f1:94:ce:14:
                    04:9c:91:d3:88:9c:be:f8:40:40:02:66:6b:a4:45:
                    d2:4d:fa:28:c6:92:9f:a1:d3:85:54:48:15:7c:9f:
                    e1:e4:fc:03:ec:1c:f7:d1:08:df:08:f6:b0:29:72:
                    b0:d8:b6:26:1b:9b:35:1f:5a:44:cc:4b:c9:42:a5:
                    a7:ca:eb:92:c0:5a:bd:e3:49:30:63:09:5f:d3:4d:
                    39:2b:c0:80:f8:29:81:ea:81:34:3e:97:6d:4f:51:
                    45:e2:90:4b:72:ac:57:9c:85:83:6a:37:95:95:35:
                    2f:b2:fc:79:a7:6b:7a:3d:a4:35:8f:b7:a5:e2:e9:
                    4b:fa:19:e4:23:29:d3:a8:d0:69:e7:cc:43:40:eb:
                    06:d4:3d:47:78:88:79:a0:3d:96:19:90:63:bd:33:
                    6a:23:d1:e8:66:23:5b:79:c3:b5:9d:de:38:9c:19:
                    cb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:51:C0:E6:98:A4:90:DF:47:63:87:01:B1:FE:67:16:D6:9B:5D:FA
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/61HA5pikkN9HY4cBsf5nFtabXfo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.114.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:be:eb:07:a2:7c:86:05:f5:69:a1:10:82:a9:d6:dc:18:ee:
         57:77:56:96:72:da:44:bd:1c:58:70:f0:59:04:a3:26:7b:05:
         07:76:c8:2f:49:49:bc:32:53:36:87:c2:dd:23:aa:99:2e:8d:
         b5:1c:4a:ea:a0:25:f9:b2:e8:d5:8f:12:8d:0a:46:66:e8:47:
         a9:d7:87:ae:da:79:12:4b:5f:a3:b8:b8:d6:4c:ce:69:96:1c:
         1c:fc:c2:c6:48:22:95:6a:9d:9f:53:93:0d:b4:a0:0a:22:18:
         72:54:18:02:c1:44:ab:03:2d:61:03:de:55:0e:0c:e5:1b:13:
         5f:8b:43:90:a0:fd:8e:2e:aa:da:e6:06:58:0e:7a:8e:7f:01:
         09:6c:cd:a3:f8:f7:68:ad:fb:0b:29:42:9d:1e:d3:76:20:16:
         91:5b:15:0b:d3:68:6a:78:ab:ae:26:ce:d9:1b:f7:5f:56:ee:
         22:2a:23:2a:78:36:71:44:99:e7:c1:a8:a3:b6:34:d0:fe:3e:
         bb:28:41:90:3a:52:f0:cb:f0:64:cb:d6:b2:41:2b:a1:df:a0:
         e6:63:ee:74:d1:44:d6:c0:29:7d:dd:c0:22:fb:de:ec:78:a2:
         f2:f4:02:65:28:ee:2c:d6:a0:cb:93:8c:7e:81:2a:7b:d4:90:
         1a:f4:6d:11
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjIz
MzhERTMzMkM2RjRCOUUyNTk2RUU1REMzNzlBMjVFRkU1OENGMB4XDTI0MDEwMTAx
MzA1NFoXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoRUI1MUMwRTY5OEE0OTBE
RjQ3NjM4NzAxQjFGRTY3MTZENjlCNURGQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALbBA/kDtEMI9y+TLmwNHQ8ct9iCHm7U3Odlz/tTkt52fyw8VdY6
7z3WKNR+9H5657ga4OsBHqi9S9jYbxHGMCSl9HDqsxgQQh6vG9xcuKNGtYYkW6Hx
lM4UBJyR04icvvhAQAJma6RF0k36KMaSn6HThVRIFXyf4eT8A+wc99EI3wj2sCly
sNi2JhubNR9aRMxLyUKlp8rrksBaveNJMGMJX9NNOSvAgPgpgeqBND6XbU9RReKQ
S3KsV5yFg2o3lZU1L7L8eadrej2kNY+3peLpS/oZ5CMp06jQaefMQ0DrBtQ9R3iI
eaA9lhmQY70zaiPR6GYjW3nDtZ3eOJwZy3ECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTrUcDmmKSQ30djhwGx/mcW1ptd+jAfBgNVHSMEGDAWgBTmIzjeMyxvS54llu5d
w3miXv5YzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3LVdNOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3
LVdNOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NDAvNjFIQTVwaWtrTjlIWTRjQnNmNW5GdGFiWGZvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBD1y8DANBgkqhkiG9w0BAQsFAAOCAQEAUL7rB6J8hgX1aaEQgqnW3BjuV3dW
lnLaRL0cWHDwWQSjJnsFB3bIL0lJvDJTNofC3SOqmS6NtRxK6qAl+bLo1Y8SjQpG
ZuhHqdeHrtp5Ektfo7i41kzOaZYcHPzCxkgilWqdn1OTDbSgCiIYclQYAsFEqwMt
YQPeVQ4M5RsTX4tDkKD9ji6q2uYGWA56jn8BCWzNo/j3aK37CylCnR7TdiAWkVsV
C9NoanirribO2Rv3X1buIiojKng2cUSZ58Goo7Y00P4+uyhBkDpS8MvwZMvWskEr
od+g5mPudNFE1sApfd3AIvve7Hii8vQCZSjuLNagy5OMfoEqe9SQGvRtEQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:47:59 2024 by rpki-client on console-fra.rpki-client.org