Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/4oZP9K-VYJr8YmnlkLHdoKp_5ts.roa
File:                     4oZP9K-VYJr8YmnlkLHdoKp_5ts.roa (raw, json)
Hash identifier:          3/RhHW87UGEgfWu22AashinwIMJ2IuBQyZ5dmfYFyAk=
Subject key identifier:   E2:86:4F:F4:AF:95:60:9A:FC:62:69:E5:90:B1:DD:A0:AA:7F:E6:DB
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0278
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/4oZP9K-VYJr8YmnlkLHdoKp_5ts.roa
Signing time:             Sat 31 Aug 2024 01:38:50 +0000
ROA not before:           Sat 31 Aug 2024 01:38:50 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        113.52.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:38:50 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=E2864FF4AF95609AFC6269E590B1DDA0AA7FE6DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:da:4f:36:47:65:4b:4a:38:12:65:99:62:a9:
                    ca:2a:d5:57:8e:0e:78:c9:b6:b3:a1:25:5c:67:6f:
                    e1:83:2c:39:41:a6:5e:b0:9e:69:39:36:61:63:ce:
                    a7:4f:f2:17:be:2b:b3:ad:df:2e:41:41:98:a8:fc:
                    56:6b:a3:d5:da:b4:c6:55:19:d6:e1:06:9b:0e:8b:
                    82:7d:47:88:20:59:75:78:94:51:1d:c8:d4:3e:7e:
                    b5:56:7c:a0:91:e8:9d:74:99:0e:a9:f4:bc:00:93:
                    7e:39:a4:20:d7:02:f1:87:35:b3:1f:59:d3:4e:4d:
                    cd:aa:66:f9:5f:4d:e5:8a:43:19:8c:8e:be:3c:4b:
                    fe:be:06:76:ef:6f:ea:53:55:c5:53:f4:76:30:e2:
                    c4:cf:c6:de:0f:ab:7c:89:2e:52:82:0d:42:55:21:
                    c2:01:e3:50:be:b8:79:81:46:91:3c:ae:1d:fe:64:
                    c8:74:58:80:84:69:11:55:46:80:29:a1:fc:da:2d:
                    54:f3:8c:4e:47:5d:67:19:7f:32:ee:dd:c7:4e:d8:
                    aa:6e:da:12:d0:45:da:9f:d8:5b:06:a1:a4:38:03:
                    ce:9b:44:f9:6d:07:da:01:0a:3a:ca:e2:9f:70:4b:
                    2d:97:e7:e8:01:a6:5f:4a:f0:f2:93:7a:f2:df:da:
                    d8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:86:4F:F4:AF:95:60:9A:FC:62:69:E5:90:B1:DD:A0:AA:7F:E6:DB
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/4oZP9K-VYJr8YmnlkLHdoKp_5ts.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.52.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:74:ef:11:94:e3:f0:70:a3:0e:5c:92:a9:8d:e4:ee:17:ac:
         10:68:13:b2:ff:2c:74:7c:7c:f4:2a:46:c7:6f:b4:61:f2:7b:
         24:5b:e2:84:5e:8b:6a:10:4d:fa:98:33:3a:25:2b:4a:34:d1:
         cb:0c:12:31:68:aa:f2:67:a3:92:bd:f6:8b:af:23:10:a6:dd:
         e4:aa:6f:09:4f:84:09:59:c4:73:0c:4a:46:ae:68:c4:34:35:
         31:26:72:39:7e:07:e4:e5:7f:e9:50:84:99:bf:a0:1a:fc:20:
         38:a0:87:71:01:ef:9b:b0:bd:14:99:33:d3:2a:40:93:f2:10:
         34:d7:ed:d4:e4:2e:fc:d0:52:a0:1b:f1:3e:61:64:84:5b:e5:
         20:66:65:ad:7d:e1:3a:d6:e8:ea:35:1f:db:6b:3e:a4:34:64:
         de:f8:10:51:b2:d0:5a:f6:0a:8e:07:e8:54:16:24:37:33:3b:
         88:c2:f0:62:42:1d:38:70:72:a7:c4:1e:45:b5:58:3a:c1:17:
         4b:5f:43:11:29:c5:75:55:8e:5d:54:a6:a1:9d:b3:b5:69:93:
         a9:30:41:b5:6b:18:ac:76:87:85:50:b1:f0:49:28:fd:84:dc:
         bc:a8:b5:96:30:dc:83:b5:fa:bd:ab:77:2e:bb:9e:01:c5:5a:
         89:b9:8e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:33 2024 by rpki-client on console-fra.rpki-client.org