Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/eUI85V0HYBEu2PjxkrWp3_ArzP8.roa
File:                     eUI85V0HYBEu2PjxkrWp3_ArzP8.roa (raw, json)
Hash identifier:          t7obuxkc/NnfSlY/KNB7gXF3RkiwEXN4KPMU8UpDG+E=
Subject key identifier:   79:42:3C:E5:5D:07:60:11:2E:D8:F8:F1:92:B5:A9:DF:F0:2B:CC:FF
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       44
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/eUI85V0HYBEu2PjxkrWp3_ArzP8.roa
Signing time:             Mon 01 Jan 2024 01:30:51 +0000
ROA not before:           Mon 01 Jan 2024 01:30:51 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     17676
IP address blocks:        61.206.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Jan  1 01:30:51 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=79423CE55D0760112ED8F8F192B5A9DFF02BCCFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:ce:00:fb:43:3a:3b:21:c9:e1:7e:e6:3b:
                    27:11:1d:a8:61:98:c8:83:a9:35:12:eb:2d:cc:d5:
                    5a:26:31:ec:da:42:a6:ab:45:9a:27:2a:ab:13:4d:
                    05:22:00:2c:57:fc:81:a7:bf:c0:02:ec:a5:58:1f:
                    8a:bb:56:b6:84:c3:58:2c:00:2c:7e:e4:24:da:de:
                    0b:bb:2f:f8:4e:e6:79:c2:4f:05:29:5b:fb:cc:b7:
                    f4:15:1e:f7:6c:aa:85:9b:05:14:a2:89:df:d1:3d:
                    a7:be:83:61:ba:53:b3:42:df:74:36:a9:a9:3a:5b:
                    77:5e:ac:0b:95:ec:13:d8:2e:2e:b5:b1:2c:d6:42:
                    1b:5f:0f:c3:c7:84:01:c8:46:e4:f8:b4:72:1b:13:
                    18:fa:a6:fd:e7:82:11:eb:28:52:6b:68:81:c1:5a:
                    09:78:1f:2e:20:2b:0e:22:6c:8e:d5:ed:30:26:bf:
                    8f:c2:93:7f:54:c8:d9:2f:94:b0:2f:19:85:0d:86:
                    ed:48:fc:78:2a:4f:6a:6e:4c:cb:80:0f:53:2f:0a:
                    8e:dc:16:d2:4c:d9:a7:9e:41:da:32:d6:5e:93:26:
                    12:47:29:c5:5a:cd:50:0e:d1:d7:dd:2b:2a:fd:06:
                    4d:14:75:14:81:70:1b:6d:74:a2:77:61:88:7b:d4:
                    06:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:42:3C:E5:5D:07:60:11:2E:D8:F8:F1:92:B5:A9:DF:F0:2B:CC:FF
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/eUI85V0HYBEu2PjxkrWp3_ArzP8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:e7:1f:cf:84:db:e7:f6:42:f2:44:21:8d:c9:81:3d:f3:c6:
         36:d4:cd:0f:d3:79:3e:5f:d0:9d:f5:2e:03:f6:d5:ad:0c:42:
         51:86:16:ce:85:ba:54:a5:fb:9d:72:86:a6:15:cc:16:cb:da:
         2c:b6:c5:47:a2:f6:5b:eb:a1:e7:91:dd:d0:59:1a:82:65:6c:
         2d:90:f8:7d:ae:91:68:24:3c:7e:8b:5f:df:af:11:ee:78:22:
         f0:14:89:42:8c:a6:b7:42:44:74:89:90:5b:70:a8:09:80:c1:
         78:0f:dd:ca:6e:e9:ef:02:99:59:62:40:cc:a5:66:ac:f6:79:
         64:c9:80:d0:8e:91:49:5f:0a:ab:e5:1f:d9:62:cf:e9:e4:3e:
         83:b6:1e:6f:f9:3f:0c:61:7c:9b:85:14:58:9e:f1:50:7c:ba:
         34:0a:a6:51:cf:9c:fe:c3:b0:c3:70:05:2a:50:fc:09:93:53:
         14:32:59:6c:e2:2b:76:2e:76:52:ef:bc:8b:d9:58:27:50:32:
         50:43:a9:94:d2:e5:c1:2a:61:e0:06:3f:d9:38:02:17:12:3d:
         aa:04:22:cf:0c:f0:78:6c:a3:03:07:4b:6a:df:13:0c:0c:7a:
         69:8c:d0:5b:5b:ca:9e:98:58:35:08:fd:c8:c4:14:b5:d1:62:
         f0:b6:6f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:22 2024 by rpki-client on console-fra.rpki-client.org