Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/0JQIBXxyqy-iV-0OZZFSxbgwveQ.roa
File:                     0JQIBXxyqy-iV-0OZZFSxbgwveQ.roa (raw, json)
Hash identifier:          +tF8FDhQsL9t7ZpD+ytfgHIlu1Tf8eN/puDp+RDLRKE=
Subject key identifier:   D0:94:08:05:7C:72:AB:2F:A2:57:ED:0E:65:91:52:C5:B8:30:BD:E4
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       023E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0JQIBXxyqy-iV-0OZZFSxbgwveQ.roa
Signing time:             Sat 31 Aug 2024 01:33:31 +0000
ROA not before:           Sat 31 Aug 2024 01:33:31 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9378
IP address blocks:        219.124.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:33:31 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=D09408057C72AB2FA257ED0E659152C5B830BDE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c2:21:a7:f3:e0:16:79:5a:40:80:7a:62:bc:
                    53:84:da:68:36:49:02:4c:dc:38:0b:01:af:cb:15:
                    61:7b:5b:07:d4:97:05:18:63:12:bf:63:66:9e:5e:
                    5e:01:fa:d3:d3:2c:7c:8b:2d:ed:25:98:10:b4:f3:
                    00:42:12:40:52:37:9e:8c:e6:52:4a:d5:46:51:a4:
                    e1:06:72:29:c3:47:9e:4e:9a:1e:16:02:0a:f9:fb:
                    0e:9f:2c:b0:44:eb:79:93:3e:d9:d8:9d:3e:28:54:
                    61:c0:2e:08:b1:27:b3:1d:77:72:92:45:23:73:51:
                    02:77:88:b3:e4:73:8e:89:a7:8b:92:1b:4c:3c:e7:
                    ba:c2:12:32:db:1c:f0:f5:23:f6:34:36:ce:1f:c0:
                    39:2d:89:a7:38:b5:c4:38:c5:12:3c:d1:e0:fc:66:
                    04:66:1a:89:2b:4f:46:0d:b5:2d:30:a4:43:5d:11:
                    3e:04:8a:f8:b8:42:dd:37:d2:e8:f7:82:44:10:f8:
                    bc:28:68:62:f3:b2:ab:82:dd:93:31:cb:26:30:0f:
                    ec:6c:6e:5c:3a:9e:e7:47:97:4b:d1:8a:a7:1f:0b:
                    14:0c:80:2a:33:d7:37:36:b0:62:52:95:c3:b7:74:
                    fe:26:b2:3e:2f:b1:6e:d3:bd:52:4d:b7:d4:25:41:
                    ab:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:94:08:05:7C:72:AB:2F:A2:57:ED:0E:65:91:52:C5:B8:30:BD:E4
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0JQIBXxyqy-iV-0OZZFSxbgwveQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.124.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:bc:6c:ab:f6:14:f2:dc:5a:76:42:75:46:17:6b:96:8c:0a:
         9d:68:e2:76:5c:f2:c4:60:91:8e:ee:4a:09:27:d7:f7:ef:10:
         08:69:32:b3:e2:69:b7:c1:e7:5c:40:17:b4:b3:5c:e1:d3:05:
         0a:0c:76:ca:7d:6d:37:48:98:31:fd:74:bd:8f:67:bc:4b:2b:
         29:73:93:20:cb:07:b9:08:d8:b3:08:75:97:f2:fc:b1:c7:99:
         a8:5a:67:a4:e8:0e:cd:9d:64:e7:97:0d:5c:62:ad:bc:ad:83:
         35:5e:15:d2:b8:32:03:bc:cd:cf:9f:e8:44:d8:c0:60:61:7e:
         1a:99:5a:26:d5:d9:11:b7:64:89:7e:c6:dd:d9:e0:49:f9:d6:
         5d:bc:c7:95:25:d8:2b:1a:c0:6b:b8:18:ae:c0:b5:a5:45:f7:
         79:21:f7:b6:4d:b2:4e:04:06:49:9d:61:12:66:ae:5b:75:55:
         e5:9d:1e:be:45:65:a3:24:b7:a3:4f:d6:ff:bf:b9:d7:a6:64:
         43:5a:1e:99:fb:b6:4b:58:bf:04:21:0c:fb:bc:05:33:34:fd:
         f0:e6:0c:a5:6f:61:d6:19:68:a7:9e:72:ad:a1:7a:58:83:69:
         a0:08:d9:28:61:7e:6f:2c:17:24:fd:06:9f:24:0c:c8:11:dd:
         99:11:62:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:33 2024 by rpki-client on console-fra.rpki-client.org