Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/q61pgXX-eUFqofO5ODK4ZSpgl1w.roa
File:                     q61pgXX-eUFqofO5ODK4ZSpgl1w.roa (raw, json)
Hash identifier:          8Zas3ZpE6/LGWrJPfo9jcS4S4UtoghFIXKcQjgQk10U=
Subject key identifier:   AB:AD:69:81:75:FE:79:41:6A:A1:F3:B9:38:32:B8:65:2A:60:97:5C
Certificate issuer:       /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial:       68
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/q61pgXX-eUFqofO5ODK4ZSpgl1w.roa
Signing time:             Wed 31 Jul 2024 01:31:14 +0000
ROA not before:           Wed 31 Jul 2024 01:31:14 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        157.65.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
        Validity
            Not Before: Jul 31 01:31:14 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=ABAD698175FE79416AA1F3B93832B8652A60975C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:40:0d:1d:f7:d0:a8:1d:83:98:fa:fc:df:
                    14:0f:5e:d2:26:0c:f9:bb:1a:0e:8d:04:28:88:6c:
                    a0:bf:68:14:c7:6f:8d:c4:51:84:31:0b:73:3b:ba:
                    25:d8:72:fb:16:7f:2f:03:d9:be:f5:60:34:fe:f4:
                    d3:bc:75:da:ee:69:82:c1:96:eb:ba:dd:aa:bb:1b:
                    70:c6:12:39:c3:e7:da:db:48:03:15:eb:bd:86:aa:
                    4d:ec:10:65:09:56:24:98:1c:87:5f:2f:6b:10:c5:
                    15:f7:ea:60:95:aa:7c:61:e1:af:b3:49:2a:0b:af:
                    6f:d9:04:4b:f7:0f:57:ef:3b:6c:34:6a:be:2f:7a:
                    bc:75:b0:c6:b8:bd:13:64:9d:1d:07:3e:30:0d:ee:
                    de:4e:53:80:29:41:4b:65:5f:27:05:28:84:e8:0a:
                    b3:d3:50:83:01:02:e9:68:83:11:a0:e0:49:57:03:
                    dc:a6:9e:f5:cc:b8:cf:5c:0e:ae:86:0c:40:cc:6d:
                    b7:49:32:a2:33:99:40:79:c1:2e:6a:7c:23:8c:b9:
                    3c:86:9e:18:d6:e2:a5:bb:23:5e:9c:75:f0:ff:cc:
                    c8:8d:84:dd:f1:00:58:a5:42:bc:13:a3:26:22:51:
                    5d:9c:cb:1b:6a:05:5e:e4:7d:00:29:c9:06:cc:bd:
                    73:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AD:69:81:75:FE:79:41:6A:A1:F3:B9:38:32:B8:65:2A:60:97:5C
            X509v3 Authority Key Identifier:
                keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/q61pgXX-eUFqofO5ODK4ZSpgl1w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.65.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c2:48:95:c0:bc:36:c9:e9:1d:eb:51:b7:8c:f3:cf:59:38:1e:
         8a:a9:34:27:51:80:1f:00:9a:88:77:ab:bc:cf:cb:da:91:2e:
         7e:de:a8:44:0e:18:15:b0:38:ca:2e:b3:e1:c6:f1:99:a2:07:
         4c:a1:63:bf:b8:1c:d2:31:c6:f6:e7:fd:61:b4:aa:0b:e2:44:
         dd:95:53:92:c2:a3:e3:3e:2b:31:91:57:98:23:91:88:d4:46:
         34:c4:d2:2c:c9:74:d1:b9:09:71:be:dc:b1:36:a0:ce:37:91:
         6b:8d:5f:77:16:ac:25:22:ec:6b:bf:2f:49:bc:84:9c:60:03:
         ca:82:0c:07:80:20:89:60:5f:0d:0a:18:ef:8b:2f:ab:44:c0:
         c6:be:1e:7c:5e:66:56:43:c4:bb:72:2f:b6:e7:d2:92:ec:a4:
         34:84:e9:b4:2f:3d:72:5a:de:fe:e9:47:e1:2b:8f:4d:ba:1e:
         cf:dd:56:98:6c:cc:bf:f6:db:c1:3c:e7:a5:05:75:97:20:6a:
         82:80:6b:f5:d9:38:72:6d:ae:a3:dd:bf:f7:5c:5c:83:1d:8b:
         99:b7:0d:e2:82:07:10:0f:f5:6b:99:84:e9:4e:57:fc:93:1f:
         98:6a:da:ed:dd:e1:39:38:82:94:96:7f:96:57:11:10:8f:0a:
         d7:c5:95:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:05 2024 by rpki-client on console-fra.rpki-client.org