Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/pq4i2VXmstyL8pi9Jk4vU3753uU.roa
File:                     pq4i2VXmstyL8pi9Jk4vU3753uU.roa (raw, json)
Hash identifier:          hfzbCR7oxs3dBtjZW5zI9DP+bUlbuiAPQrcz8QyR7E4=
Subject key identifier:   A6:AE:22:D9:55:E6:B2:DC:8B:F2:98:BD:26:4E:2F:53:7E:F9:DE:E5
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       45
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/pq4i2VXmstyL8pi9Jk4vU3753uU.roa
Signing time:             Mon 01 Jan 2024 01:30:51 +0000
ROA not before:           Mon 01 Jan 2024 01:30:51 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     17676
IP address blocks:        61.206.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Jan  1 01:30:51 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=A6AE22D955E6B2DC8BF298BD264E2F537EF9DEE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5f:c6:bc:c8:99:fd:b9:f4:eb:de:7f:6e:f6:
                    d6:27:86:77:96:7c:b2:14:97:ec:d6:10:86:2c:d3:
                    fd:eb:20:30:1b:b6:14:74:3b:65:42:1f:89:a0:c3:
                    03:69:5d:83:ea:bf:87:4b:36:07:1a:e8:e3:fb:48:
                    57:15:61:42:83:ba:fe:c2:d4:ed:c6:c2:cc:4f:10:
                    b3:04:3d:29:6a:65:18:33:f9:62:a2:61:52:5e:6b:
                    a9:85:84:6c:37:84:53:4b:c9:bd:43:b0:03:bb:df:
                    84:e9:4c:f1:d9:36:c7:0d:b3:a8:c8:44:d0:b2:12:
                    5c:a4:b8:9b:4a:42:97:e1:74:0f:0f:77:10:ad:3c:
                    95:28:d6:a1:8c:d8:72:03:61:18:ef:8f:dd:4d:1f:
                    df:b0:23:e1:8b:bc:11:d3:88:20:fb:0e:25:6b:af:
                    99:8f:c5:d1:96:b4:0d:15:7c:dd:1c:02:6a:7b:df:
                    eb:3c:ee:7e:14:29:29:62:bd:6d:c8:1b:51:05:53:
                    39:c1:c5:7c:9d:a8:64:ba:61:a4:7d:ee:07:03:e8:
                    86:d0:d3:23:c7:50:33:ff:7b:a5:ab:27:94:9f:18:
                    de:42:76:25:be:46:c0:4d:ef:49:17:28:a5:1f:9d:
                    86:85:a9:98:77:76:09:0d:3f:8f:2d:69:24:5a:fd:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AE:22:D9:55:E6:B2:DC:8B:F2:98:BD:26:4E:2F:53:7E:F9:DE:E5
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/pq4i2VXmstyL8pi9Jk4vU3753uU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7e:b4:55:46:f2:ec:ac:74:1a:a7:da:c6:b2:47:9c:af:01:3b:
         3c:5d:4a:d5:50:88:b9:b3:e3:61:60:51:74:ec:36:c1:a0:f0:
         6e:cb:cc:2f:c2:c6:91:46:a4:52:5f:21:3d:5e:52:16:6e:76:
         31:13:6a:a2:6f:fb:d1:90:96:e3:c7:50:63:e9:36:92:01:ba:
         d0:58:21:4f:78:4e:dc:bb:c4:cf:01:55:15:41:62:d5:f1:99:
         b1:82:e7:5e:44:46:2e:9c:4e:27:db:cf:1d:65:e6:0c:14:5f:
         d1:4f:13:ff:e0:77:56:91:df:7a:e7:d0:5d:d3:d7:e4:21:4e:
         f6:a4:7e:c8:93:de:00:65:b9:a1:9c:fb:83:18:cd:0f:a3:0d:
         80:88:d3:00:9c:18:3c:80:9b:7f:29:f4:bd:6d:0e:d0:5d:9c:
         55:b5:69:2a:d7:f2:a2:81:29:b9:c0:aa:93:d4:23:ee:c8:8c:
         1b:a6:dc:f8:ff:d1:ab:aa:7a:0a:9e:16:0b:33:c2:e3:3e:54:
         88:29:74:f9:0e:02:c7:91:27:1f:af:80:d6:10:78:ec:55:9d:
         f5:1f:a8:a6:61:24:ee:28:78:4b:c8:a2:30:fd:d5:6b:a1:ce:
         22:09:61:f7:e0:8c:00:82:06:41:92:2c:d5:12:e2:77:69:a6:
         26:e7:4c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:22 2024 by rpki-client on console-fra.rpki-client.org