Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/8OdU2VuKl-pQWetxFpXcib5fBHw.roa
File:                     8OdU2VuKl-pQWetxFpXcib5fBHw.roa (raw, json)
Hash identifier:          NcZFjefyWedfFGaxHGSzc2/LE1lCpCTEeB+uJTJPRYA=
Subject key identifier:   F0:E7:54:D9:5B:8A:97:EA:50:59:EB:71:16:95:DC:89:BE:5F:04:7C
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       B9
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/8OdU2VuKl-pQWetxFpXcib5fBHw.roa
Signing time:             Fri 31 May 2024 01:31:55 +0000
ROA not before:           Fri 31 May 2024 01:31:55 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     2518
IP address blocks:        61.193.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May 31 01:31:55 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=F0E754D95B8A97EA5059EB711695DC89BE5F047C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:14:72:62:2b:9a:b5:1f:43:98:67:0b:75:
                    2b:50:ff:1c:61:bd:dc:d4:6b:cd:70:bf:01:b0:4a:
                    e4:50:76:5e:86:bf:1b:37:b2:42:40:87:26:bb:8d:
                    2f:7b:88:62:2b:31:03:e9:c5:7f:e8:96:7e:0d:c4:
                    e3:60:6e:35:4d:d9:a9:73:d3:a5:da:6f:71:19:6a:
                    26:27:ce:ac:43:81:13:27:0e:18:60:0a:ca:17:53:
                    d7:78:9d:7b:91:9b:21:a7:8d:27:a5:a8:c7:c0:23:
                    fd:fd:cc:d8:ac:38:04:e6:b5:0d:8f:bb:45:7b:1f:
                    4e:1f:9a:c4:a3:1f:6e:61:9e:6b:c8:5f:d1:9f:0a:
                    05:da:9a:42:14:52:d0:52:fe:2b:b5:8f:16:4a:0a:
                    fb:4a:04:e1:a0:19:0c:91:ae:d3:aa:62:47:c6:aa:
                    d8:73:97:c0:2f:8f:5f:65:23:08:ae:b4:5e:ea:8b:
                    9e:8e:db:12:50:5d:dd:bc:33:a2:a2:0e:71:04:ac:
                    54:09:a9:e1:45:2b:6b:aa:eb:20:bf:37:e8:1f:23:
                    0b:f8:3a:e5:50:a8:c9:59:89:41:48:a0:a2:9f:05:
                    6e:ca:17:a5:61:9a:e0:68:0e:98:cd:0b:41:41:d0:
                    6a:d5:93:b9:b3:92:af:70:20:b1:03:a5:58:99:04:
                    28:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E7:54:D9:5B:8A:97:EA:50:59:EB:71:16:95:DC:89:BE:5F:04:7C
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/8OdU2VuKl-pQWetxFpXcib5fBHw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.193.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         47:96:e7:de:04:3e:30:74:4c:d5:e9:b5:ce:b9:e9:55:ff:ff:
         ee:a6:10:8f:b2:b0:33:52:47:a2:c2:60:17:02:90:57:20:8f:
         e5:ad:7f:7d:3b:0a:bd:1b:cc:0c:ac:26:4e:0f:ee:5b:d1:b1:
         c2:4d:09:36:0e:53:52:3f:5a:79:50:7f:fe:1f:7b:4f:b1:71:
         c4:b6:6f:67:7f:c9:ec:2b:46:55:d6:11:e9:f0:74:55:56:05:
         39:d4:91:03:ea:fc:58:5a:23:0e:79:e2:6a:bf:1f:65:63:90:
         a5:b0:5a:67:4f:ec:14:3d:65:f5:8e:b7:8e:31:b9:19:35:1e:
         6e:29:6f:f5:86:c3:44:3c:14:b6:54:b0:f5:54:c2:4c:ed:4b:
         8f:e3:20:e0:ed:39:5f:35:5d:53:f2:2d:3c:fe:0b:14:d8:20:
         a8:21:71:a1:c8:a9:2f:2e:e2:96:2a:ca:c3:37:9a:40:e6:74:
         5a:2f:ab:57:6f:a4:22:b1:a3:e3:ea:a2:8d:21:af:92:f6:4b:
         3d:fc:b0:39:90:ce:59:7b:2d:38:64:53:8c:97:e5:bd:9b:0a:
         f3:15:01:ee:32:35:e3:ab:04:c5:ce:3e:12:73:56:a7:14:f8:
         1e:10:2b:4a:33:5e:b3:16:bb:57:f9:8c:63:27:40:ef:94:0a:
         cd:79:f2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:49 2024 by rpki-client on console-fra.rpki-client.org