Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/b6H05lWHtdjY2vCwxVdBXknxztw.roa
File:                     b6H05lWHtdjY2vCwxVdBXknxztw.roa (raw, json)
Hash identifier:          g13DHJLhGFXnhVEJBVTHO8LGnVofTYPYCYq9dclxchk=
Subject key identifier:   6F:A1:F4:E6:55:87:B5:D8:D8:DA:F0:B0:C5:57:41:5E:49:F1:CE:DC
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       E8
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/b6H05lWHtdjY2vCwxVdBXknxztw.roa
Signing time:             Thu 29 Feb 2024 01:29:44 +0000
ROA not before:           Thu 29 Feb 2024 01:29:44 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9607
IP address blocks:        211.14.10.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Feb 29 01:29:44 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=6FA1F4E65587B5D8D8DAF0B0C557415E49F1CEDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c2:e5:dc:67:8a:90:fb:bb:bd:d4:6f:7b:85:
                    bf:d9:2c:53:45:0e:4e:f9:24:b9:cd:4a:27:dd:1d:
                    c0:15:27:e8:a3:80:2b:09:e8:45:ee:95:e4:00:4f:
                    93:22:82:3c:5b:75:95:1a:a5:47:9b:c6:50:e8:46:
                    a8:12:b1:f5:38:26:7f:de:94:61:fd:9a:d1:2c:38:
                    24:d2:d7:8d:52:1e:3e:f9:12:f7:fc:0e:70:19:ce:
                    ab:e2:f4:b7:03:66:f7:24:ae:b5:44:12:9f:93:8b:
                    b2:3b:14:19:ae:be:40:e8:04:bc:3d:73:49:0f:62:
                    9c:c0:d2:da:96:ae:f1:f5:ac:1e:c2:4e:1b:52:0a:
                    26:35:c9:3c:f9:c8:63:56:7c:59:4b:94:fc:a6:b1:
                    1d:fc:ef:72:35:d9:75:d7:03:c2:b4:56:aa:20:21:
                    88:5e:11:ac:27:09:7d:22:0b:53:b4:db:54:15:a6:
                    ae:29:4f:76:da:03:6c:31:34:fc:d6:3e:a0:0f:43:
                    b2:ba:8b:dd:62:6a:35:79:4f:0a:d9:12:97:02:ff:
                    83:73:25:c6:d4:4a:be:41:67:c9:c9:e2:28:c9:aa:
                    36:36:62:58:28:74:55:af:6b:a5:8c:1c:b1:56:f6:
                    d4:6f:4f:08:f1:d6:28:98:f1:0e:62:f5:25:00:8d:
                    02:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A1:F4:E6:55:87:B5:D8:D8:DA:F0:B0:C5:57:41:5E:49:F1:CE:DC
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/b6H05lWHtdjY2vCwxVdBXknxztw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:90:2d:25:7e:b3:f3:06:09:f6:ee:f1:7e:db:ba:2a:33:20:
         b7:45:34:93:99:3d:59:9a:f8:9c:2e:41:e5:08:2a:74:ac:99:
         42:88:5d:62:b5:6f:b5:56:07:51:f9:d9:ef:4f:95:62:fb:d5:
         7d:42:b0:04:a9:0f:d8:79:47:28:4d:1b:15:b0:1d:04:92:3d:
         64:a9:ab:84:96:37:ba:08:bc:98:42:72:d7:56:03:39:4a:eb:
         4e:63:6e:de:8e:05:4f:df:73:f7:a9:3b:3b:60:9b:11:62:52:
         61:1a:1b:b7:17:4c:7d:a3:35:3a:26:62:2e:3c:5c:de:60:de:
         ee:ee:84:f1:61:f1:7b:39:42:ef:16:24:b0:f2:9c:ff:ed:30:
         6c:b2:a5:c2:78:0e:29:a7:ef:d2:a4:f5:bf:79:8d:db:1f:4c:
         bf:a6:e1:49:9d:dd:25:89:fe:26:ce:3a:0e:9f:58:4c:1f:f6:
         34:4f:fb:c2:25:2f:86:8a:12:af:a3:73:07:e9:67:87:a1:70:
         32:59:3a:2c:91:58:d8:d4:be:0f:8a:fc:20:6f:18:f8:21:a7:
         44:b2:fa:c0:69:d0:89:ec:96:a4:ee:b5:37:dc:1b:30:f4:ad:
         ad:3a:3c:02:2f:e7:74:55:83:e0:c1:93:86:0c:d0:e7:32:45:
         59:c5:0f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:13 2024 by rpki-client on console-fra.rpki-client.org