Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/FNfITITlCogItsSuhRzwQiq171g.roa
File:                     FNfITITlCogItsSuhRzwQiq171g.roa (raw, json)
Hash identifier:          FtDycxj/bR1hANLlw7Qh5vV4Y4yCwbve70iiiJGio5g=
Subject key identifier:   14:D7:C8:4C:84:E5:0A:88:08:B6:C4:AE:85:1C:F0:42:2A:B5:EF:58
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       2A
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/FNfITITlCogItsSuhRzwQiq171g.roa
Signing time:             Thu 25 Jan 2024 01:18:30 +0000
ROA not before:           Thu 25 Jan 2024 01:18:30 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        210.136.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jan 25 01:18:30 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=14D7C84C84E50A8808B6C4AE851CF0422AB5EF58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:c2:6d:bc:ef:8d:dd:b3:93:6d:b5:01:34:87:
                    67:ea:5f:ae:4f:cc:7e:d7:08:ca:d5:bf:40:dd:b6:
                    f5:a6:ac:f6:b0:e7:53:92:2c:b2:11:af:20:28:53:
                    2b:aa:6b:e6:a9:e2:34:ce:50:53:28:8f:81:1d:5e:
                    6b:5a:bc:a1:85:d2:15:a9:12:5e:1a:6c:6d:8d:d5:
                    a9:13:92:d2:bc:fa:af:27:dc:df:ef:4b:3e:d9:52:
                    ea:35:3d:04:34:6e:57:4f:f3:05:03:5e:fd:4c:58:
                    d3:35:32:b5:a9:bf:62:0a:88:ac:db:1b:75:b8:ac:
                    e6:ba:43:c9:e5:11:27:c8:b4:20:fe:b7:4a:7a:4f:
                    71:10:13:c8:3a:c5:bc:50:f0:a0:38:b3:f3:a4:09:
                    1b:eb:f0:34:e6:25:3d:53:6a:d2:b1:1b:3c:15:bd:
                    d0:61:8b:bb:55:c6:6c:d4:f6:0e:c4:49:57:29:4c:
                    68:26:76:e2:9d:84:e0:58:45:91:65:6f:d4:c4:92:
                    b2:24:76:77:9d:08:27:e0:54:f6:bf:ef:cf:de:b5:
                    28:ea:06:2e:7a:16:94:73:ac:87:f0:78:ff:3f:34:
                    ac:ca:55:d7:92:a3:3e:e0:70:1b:33:d3:01:85:d3:
                    ed:dc:76:7c:c2:aa:cd:a5:33:a5:e5:d5:30:e7:0c:
                    da:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D7:C8:4C:84:E5:0A:88:08:B6:C4:AE:85:1C:F0:42:2A:B5:EF:58
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/FNfITITlCogItsSuhRzwQiq171g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.136.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         62:99:38:ce:d7:74:33:71:04:7b:51:65:5c:d3:a9:6a:70:2e:
         05:a7:06:c3:09:6e:04:b2:d9:64:4e:54:ab:5d:92:6c:bf:38:
         1a:4f:e4:53:d8:22:0a:a4:ce:b6:cc:0a:aa:af:b3:28:a0:6d:
         a3:7c:28:4f:4c:89:6c:93:a4:36:19:b7:c3:a8:4e:3e:7a:26:
         90:5f:6e:3a:65:48:8e:09:aa:b2:81:59:43:20:c0:06:0b:4f:
         ba:bd:cc:84:1a:74:21:22:e6:de:c0:a9:a0:ee:69:2e:2c:41:
         9e:89:8a:e0:8d:eb:8b:31:7e:f0:9d:07:f4:e6:6f:28:e9:6d:
         b6:fe:78:89:bb:99:5b:93:5a:2e:4c:7e:a9:de:3c:63:22:7a:
         b4:db:1e:66:4c:0d:a0:cf:82:97:e9:8b:97:ae:c2:e0:92:03:
         e6:34:f4:44:20:29:c2:5d:a6:0c:a5:57:40:89:7f:e0:52:b8:
         20:a8:60:42:4a:1e:9a:46:38:16:51:10:a0:c3:b8:31:25:7b:
         52:f9:a2:50:2c:68:d6:2b:95:7c:1a:ae:06:7b:72:a0:11:15:
         c0:bd:dd:08:40:4c:27:bb:94:57:a4:40:60:82:d5:55:66:3c:
         0d:93:63:93:7e:ad:7b:21:dd:85:a7:9c:de:67:cc:72:9e:be:
         83:20:e5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:29 2024 by rpki-client on console-ams.rpki-client.org