Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/E7gL0LG-1Q16CG6Md6kAjVaUZHY.roa
File:                     E7gL0LG-1Q16CG6Md6kAjVaUZHY.roa (raw, json)
Hash identifier:          r2GdIAmGcEQEtNGZqzwtG/OnT3HJQJZtMOwwfdrEfNg=
Subject key identifier:   13:B8:0B:D0:B1:BE:D5:0D:7A:08:6E:8C:77:A9:00:8D:56:94:64:76
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       47
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/E7gL0LG-1Q16CG6Md6kAjVaUZHY.roa
Signing time:             Mon 01 Jan 2024 01:30:52 +0000
ROA not before:           Mon 01 Jan 2024 01:30:52 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     17676
IP address blocks:        61.200.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 17:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Jan  1 01:30:52 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=13B80BD0B1BED50D7A086E8C77A9008D56946476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2b:f2:29:0a:65:21:f9:d2:3b:00:96:12:fd:
                    2e:c2:dc:67:cc:b7:b4:94:eb:58:19:2b:58:47:d2:
                    17:ce:d8:3a:20:f9:ca:11:c1:bb:c9:03:66:c6:25:
                    97:c1:1c:9f:4c:a8:41:3e:31:39:70:7e:a9:fd:7b:
                    84:9c:ab:89:e7:05:18:b0:d8:ac:61:0b:2c:91:85:
                    24:5e:56:dc:dd:7d:18:6d:51:1f:c1:22:0e:fb:09:
                    12:b7:7d:1a:59:c4:66:16:f6:60:06:fe:08:93:df:
                    f0:01:df:87:4d:08:e6:ac:1f:da:3b:c9:f5:b4:1f:
                    51:cf:b7:e2:9a:7a:cf:fd:d2:8f:60:7a:25:55:6a:
                    2d:ec:3d:ea:52:3a:44:5d:40:a1:69:14:6a:a7:6e:
                    7d:73:69:11:cc:fb:c9:55:ce:16:a5:f9:b6:6f:5e:
                    b4:65:3b:fe:0c:4e:41:22:75:c7:28:36:29:b4:0b:
                    2d:48:20:18:8f:20:a1:14:ed:6b:bb:5b:9f:00:58:
                    c2:1f:7e:a2:f8:48:6a:81:e6:37:da:28:dd:67:7e:
                    3d:11:2f:eb:49:52:ca:5e:19:57:0d:5d:7c:00:38:
                    99:bc:81:64:26:da:be:60:42:4d:aa:18:cc:60:b3:
                    10:e0:18:51:bc:bc:74:0f:b0:43:24:c7:78:4a:26:
                    7c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B8:0B:D0:B1:BE:D5:0D:7A:08:6E:8C:77:A9:00:8D:56:94:64:76
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/E7gL0LG-1Q16CG6Md6kAjVaUZHY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5c:9b:ba:88:ec:c4:46:03:37:c9:94:13:60:c6:f9:45:0e:dd:
         9d:8e:92:e0:37:77:cb:d1:33:e0:37:32:67:1a:52:fd:33:89:
         52:c4:80:22:85:4e:9c:58:bd:45:4c:9b:ed:85:d6:24:cc:81:
         63:48:10:01:84:8a:9d:43:c2:e5:b2:20:88:59:58:ee:ad:83:
         9c:4a:6a:d9:c1:b5:00:11:aa:04:98:98:a9:75:7f:62:e8:a7:
         2b:9e:de:17:9b:17:50:08:e3:74:ce:29:94:64:a0:55:d3:9d:
         64:09:a5:f8:67:75:6f:0b:a4:81:19:1a:31:43:da:fe:65:a6:
         25:08:05:52:93:af:e0:0c:80:a2:0e:87:e4:12:a1:04:79:4f:
         81:2f:66:ca:c1:82:0a:25:61:64:08:65:b7:9f:d3:52:f0:c8:
         0a:26:41:4d:d5:84:c5:4d:b4:1f:e4:36:98:a9:e4:18:d0:c5:
         20:db:79:73:1b:a6:81:76:db:bf:5b:48:dc:60:5f:90:62:f1:
         df:56:81:99:34:8c:67:4a:a3:14:f5:2a:7e:cd:b4:e5:6d:71:
         50:c7:da:9a:4d:81:b4:06:5e:0b:7e:bb:6f:e3:aa:74:3a:93:
         ce:61:61:03:bf:2d:4b:c1:ff:f8:4c:90:31:0c:60:cf:d3:27:
         67:04:1d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:45:04 2024 by rpki-client on console-ams.rpki-client.org