Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/JLtCgeXz_EEHdj8i-TwLdtwLSvc.roa
File:                     JLtCgeXz_EEHdj8i-TwLdtwLSvc.roa (raw, json)
Hash identifier:          ZWdcILVIbb4I4Mb5MCD0K38tGDy6WJt+H7aueKPFTqQ=
Subject key identifier:   24:BB:42:81:E5:F3:FC:41:07:76:3F:22:F9:3C:0B:76:DC:0B:4A:F7
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       5A
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/JLtCgeXz_EEHdj8i-TwLdtwLSvc.roa
Signing time:             Thu 29 Feb 2024 01:31:10 +0000
ROA not before:           Thu 29 Feb 2024 01:31:10 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     32787
IP address blocks:        61.211.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 13:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Feb 29 01:31:10 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=24BB4281E5F3FC4107763F22F93C0B76DC0B4AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:83:d7:bc:b3:0b:32:ba:30:f0:39:08:6f:
                    ab:e2:bb:23:5a:1b:f8:f7:23:dc:76:22:93:c7:ea:
                    b5:bd:48:44:7f:68:90:e3:41:6f:04:30:8f:03:e8:
                    7d:50:6e:a3:75:8f:71:8d:3f:ed:fc:17:d9:79:bf:
                    d7:4e:99:85:ec:a9:27:41:2e:57:08:57:4e:92:fd:
                    96:d9:df:3e:47:8e:51:bb:db:6f:0f:69:6e:d9:d4:
                    e5:df:a3:9e:08:f4:26:37:83:f3:b6:47:53:b5:38:
                    95:96:af:d3:e9:2c:61:99:2f:46:6c:1d:38:ab:b9:
                    cd:90:fd:2c:e9:9c:ae:d5:23:4a:52:32:e3:11:36:
                    ff:83:4e:f5:a4:05:c5:e2:51:22:ec:df:62:1a:5a:
                    7e:ce:65:29:38:e8:52:9f:0f:54:2c:1b:3e:e1:63:
                    7a:1a:eb:ca:f6:4f:e0:84:da:f2:95:66:be:68:e1:
                    c3:51:34:82:4b:8e:8d:88:9a:3e:09:d4:c8:75:bd:
                    3a:29:4c:19:fc:d9:b2:ad:11:d9:96:14:64:dd:03:
                    69:1b:78:a9:80:23:b6:fa:6c:4e:0f:43:df:ec:ba:
                    e4:1b:5e:07:e7:d1:dc:a5:61:83:38:99:e0:8e:fd:
                    ed:11:9e:3f:d4:dc:21:3f:e6:67:93:57:75:65:39:
                    28:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BB:42:81:E5:F3:FC:41:07:76:3F:22:F9:3C:0B:76:DC:0B:4A:F7
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/JLtCgeXz_EEHdj8i-TwLdtwLSvc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:b1:a7:31:dc:4e:de:71:f4:9d:03:cd:ef:0f:ec:a1:26:2f:
         07:e7:1c:ef:b3:7b:76:e1:f6:c0:29:f8:20:cc:ff:59:2d:a8:
         ae:eb:56:cb:54:cb:85:0f:8a:96:3a:74:2a:5a:1f:7e:49:f3:
         9f:5b:f3:b8:3d:82:e0:be:fc:77:03:22:4f:b8:6e:51:41:5a:
         ae:d2:17:ea:28:86:17:3a:ce:05:55:4e:79:93:ba:4e:d1:6a:
         31:a7:0f:9d:47:3e:52:5c:c9:7c:a0:e0:4c:c9:18:f1:1e:58:
         b9:2b:b2:90:3a:45:d4:5c:0f:fc:ad:ff:07:5f:f1:ce:2f:72:
         b6:43:10:71:78:54:5a:34:66:2e:6a:ef:36:b4:28:4e:6c:a5:
         f7:37:83:6b:33:df:cb:3f:5e:b0:ee:0c:42:c6:d6:bd:f2:f3:
         4a:5f:0f:b3:ee:a9:82:9f:e6:9b:2c:89:2e:19:67:87:61:ab:
         3d:aa:69:9d:f3:ea:ad:96:df:e6:5c:81:bb:ed:80:89:86:25:
         37:a2:de:bf:6f:35:90:69:70:ae:dc:34:20:a6:83:77:96:c5:
         0a:3c:d6:0d:89:96:8c:22:8f:06:df:6d:a6:18:c6:05:2a:94:
         15:af:03:08:5a:4a:00:2e:5b:b7:67:28:16:f8:c6:45:1a:ef:
         0f:ee:d5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 00:03:34 2024 by rpki-client on console-fra.rpki-client.org