Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/6ufzYnPk55YxQ1ssYa1VnJ_8-oI.roa
File:                     6ufzYnPk55YxQ1ssYa1VnJ_8-oI.roa (raw, json)
Hash identifier:          Bi1viRx2t42TDpztIZjWKfrmU2NbgWln+/j6XpnNC+E=
Subject key identifier:   EA:E7:F3:62:73:E4:E7:96:31:43:5B:2C:61:AD:55:9C:9F:FC:FA:82
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       4C
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/6ufzYnPk55YxQ1ssYa1VnJ_8-oI.roa
Signing time:             Sun 31 Mar 2024 01:30:00 +0000
ROA not before:           Sun 31 Mar 2024 01:30:00 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     10019
IP address blocks:        61.115.240.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Mar 31 01:30:00 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=EAE7F36273E4E79631435B2C61AD559C9FFCFA82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:19:e4:fe:aa:3c:c6:36:e6:72:52:a9:4e:
                    d3:26:b0:cc:1b:69:3b:b1:4a:87:78:4c:14:7a:9e:
                    b1:9f:47:eb:56:ad:6c:1d:8c:f0:bb:c8:9b:2f:f4:
                    d7:2f:a8:eb:48:95:15:b1:ee:f5:ae:02:66:39:4e:
                    cb:7f:d7:c9:29:ba:58:b6:1c:7d:e3:10:eb:c3:30:
                    da:e5:70:74:c9:7d:22:e2:2f:96:ac:ae:66:4f:f0:
                    f7:a2:df:f2:69:51:48:4c:84:ad:9a:9d:7b:da:53:
                    8d:38:48:33:b3:70:bf:f6:85:1b:54:3c:13:a5:81:
                    d1:8e:f9:4c:e9:d4:dd:68:09:aa:80:9e:97:79:cc:
                    01:95:70:56:f5:14:a8:05:b3:23:e3:c8:2e:ca:8b:
                    7e:f9:c7:1a:a3:e7:7b:4e:12:a8:d6:fe:31:51:51:
                    b3:98:ba:43:94:36:70:0c:f0:da:05:f5:34:0b:45:
                    af:c7:6f:98:12:6e:9b:59:5a:a8:a1:18:12:90:0e:
                    46:a9:69:f2:84:cf:96:03:ad:7c:57:8c:11:2e:2e:
                    b7:ed:a2:a2:dd:3a:73:67:83:ce:72:82:b6:8a:fa:
                    4c:a5:46:e3:18:c6:78:67:32:fb:40:2d:e0:94:c9:
                    7a:83:2e:b5:8e:f1:5d:95:d5:b0:00:55:c7:10:1a:
                    a6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E7:F3:62:73:E4:E7:96:31:43:5B:2C:61:AD:55:9C:9F:FC:FA:82
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/6ufzYnPk55YxQ1ssYa1VnJ_8-oI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.115.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:82:a4:82:e0:0f:41:02:a0:a7:cb:21:76:02:98:ff:fd:f6:
         1a:18:0e:74:78:5c:46:7c:53:3f:25:49:46:b6:5a:b1:9d:6d:
         dc:0f:58:d9:71:9c:30:96:ef:1a:5e:8e:c2:13:b4:7b:d2:11:
         c6:29:8a:6d:c5:f8:9a:e8:22:d7:8f:9e:b1:99:7a:7d:a7:d0:
         67:52:d8:46:5b:cc:3f:2b:f0:3b:b2:1c:88:11:74:fe:1c:4c:
         95:43:cf:69:04:7f:30:a5:6d:fd:af:bb:17:68:c9:e9:8f:dc:
         38:05:9b:f8:5e:97:0f:f9:51:4b:27:91:f4:bd:48:bc:e5:c6:
         42:14:14:1c:98:69:b9:de:3d:87:8e:b4:90:a7:59:60:62:81:
         9f:56:03:dc:18:cd:03:ae:0a:e5:bc:9d:86:01:97:51:be:22:
         b5:9c:01:f4:a0:0d:7b:d4:1e:39:b0:3f:70:4d:c8:2d:36:bf:
         b3:c6:9d:97:85:e6:89:4e:6f:ee:d7:16:93:9c:21:ec:9c:09:
         04:e4:6d:dc:00:ee:84:b0:75:70:49:8c:7a:24:8f:a3:7d:fc:
         17:97:61:1b:76:90:22:2a:0d:92:f4:14:53:56:48:2c:95:c7:
         0a:93:77:5f:38:f2:e9:3c:c8:6e:c9:7c:14:80:e4:e1:9a:bf:
         d1:0b:6d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:14 2024 by rpki-client on console-fra.rpki-client.org