Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/2nWs43ifWuoZMdiPRhbpaUkeFKk.roa
File:                     2nWs43ifWuoZMdiPRhbpaUkeFKk.roa (raw, json)
Hash identifier:          GNNRCZoP/5OCMOzLKStjtgv6k9ChBYLH0EAeqRpV1Tw=
Subject key identifier:   DA:75:AC:E3:78:9F:5A:EA:19:31:D8:8F:46:16:E9:69:49:1E:14:A9
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0182
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2nWs43ifWuoZMdiPRhbpaUkeFKk.roa
Signing time:             Sun 01 Oct 2023 01:34:30 +0000
ROA not before:           Sun 01 Oct 2023 01:34:30 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4721
IP address blocks:        113.61.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:30 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=DA75ACE3789F5AEA1931D88F4616E969491E14A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:d8:68:9a:c8:cb:77:30:65:b3:2a:fb:58:
                    9a:fa:60:c5:0f:36:c3:b4:7b:c2:8e:e1:0d:9b:cb:
                    5d:ee:f8:10:45:dc:42:63:c7:e3:52:27:db:23:ba:
                    34:f1:5a:a9:07:79:5a:7e:e1:00:6b:53:56:6a:cc:
                    02:44:3e:35:b0:16:26:80:49:71:ba:05:4a:6e:fc:
                    65:f4:b2:c6:6c:37:c4:91:56:7c:d3:6d:6e:f3:17:
                    58:2b:29:1b:3d:67:4a:2c:b7:1f:36:d4:39:2d:53:
                    de:4b:40:30:85:0a:ff:e1:7d:e3:95:d3:45:b7:e8:
                    54:d9:ce:b3:eb:27:6d:57:5d:7b:37:67:22:9b:c7:
                    de:03:34:cd:10:a1:10:9f:2d:99:4f:82:fe:e3:b3:
                    07:06:ad:0c:64:8f:46:a4:6a:bf:ca:e9:0e:86:41:
                    34:b3:8e:f3:45:b1:41:ed:99:fa:79:21:cc:21:df:
                    1a:bc:68:85:fc:a1:39:2d:69:a3:5e:de:aa:b7:c7:
                    66:10:d3:92:a8:3c:5b:3d:5f:ad:52:e2:2f:0e:28:
                    55:13:01:c6:02:d7:a8:8e:8d:e1:85:93:66:ab:29:
                    1d:f5:2e:df:56:30:b7:74:f3:cb:60:2d:29:a6:1c:
                    85:fd:cf:cc:58:32:b9:b2:8b:22:d6:04:ca:6f:f4:
                    a8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:75:AC:E3:78:9F:5A:EA:19:31:D8:8F:46:16:E9:69:49:1E:14:A9
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2nWs43ifWuoZMdiPRhbpaUkeFKk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:7e:b6:42:20:2d:df:ac:5c:02:8c:c7:e7:00:03:85:59:59:
         95:81:fa:16:9f:c1:59:12:d8:9a:4c:09:66:17:92:97:8b:61:
         e0:7e:30:23:22:ba:02:b1:58:b0:17:1f:d3:c5:f9:29:65:6f:
         eb:1c:1e:33:15:c6:77:a4:c5:8c:d0:a8:0a:eb:71:21:8f:5b:
         e6:ca:26:9a:29:35:5e:a3:a8:6e:1b:44:59:b8:69:cb:64:08:
         72:ea:7d:90:f3:01:ae:80:1c:26:d4:06:8c:e1:22:81:85:0c:
         bb:27:01:b9:71:b4:4b:72:51:fe:56:08:09:51:aa:20:76:c5:
         02:bb:7b:9d:c0:12:d2:38:d3:5c:63:50:4f:12:62:21:b2:02:
         65:6a:73:4f:03:d0:17:a1:0c:f5:50:cd:f2:17:b2:2c:94:3e:
         cc:67:f4:ec:dc:07:fb:4a:b1:26:0c:5e:e4:9a:d8:84:36:2d:
         25:0e:92:61:68:8e:3b:d4:ae:e2:f2:03:dc:f1:03:77:f0:7c:
         17:e1:ae:d2:87:78:ae:c1:d3:a5:2b:44:0c:9e:72:cd:46:4d:
         39:32:3c:bb:a4:99:7f:4b:7f:db:62:19:59:ae:1c:b2:4e:cb:
         52:38:8f:39:ae:8e:92:e9:40:c2:bb:b2:af:f9:83:53:7e:27:
         1d:60:96:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org