Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/6BNobbALhF0gR6dVMQJSlEVk39c.roa
File:                     6BNobbALhF0gR6dVMQJSlEVk39c.roa (raw, json)
Hash identifier:          LS6hw5H9hHi5IPVljiiDGv598UR91VcfuaLxlOR2sGg=
Subject key identifier:   E8:13:68:6D:B0:0B:84:5D:20:47:A7:55:31:02:52:94:45:64:DF:D7
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01D7
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6BNobbALhF0gR6dVMQJSlEVk39c.roa
Signing time:             Sun 01 Oct 2023 01:38:26 +0000
ROA not before:           Sun 01 Oct 2023 01:38:26 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        211.135.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:38:26 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=E813686DB00B845D2047A755310252944564DFD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1f:32:d0:88:da:89:c4:49:e8:b5:76:e5:98:
                    79:27:67:ab:59:4a:52:b2:e6:e1:ee:c7:83:c3:88:
                    1f:49:0f:91:99:e6:4c:c6:55:51:9e:24:20:63:37:
                    a7:e1:ad:56:78:eb:98:9e:e8:01:36:6a:ce:dd:fd:
                    a3:11:20:04:dd:1d:ee:dd:fe:be:f7:58:cb:e8:1e:
                    73:53:16:76:a7:b6:e9:e8:bf:d6:15:22:a8:97:15:
                    39:37:24:8d:68:ea:ca:9d:f0:bb:03:b7:e5:24:f0:
                    e6:17:04:cb:65:4d:2f:e3:61:0c:88:04:e8:65:2e:
                    23:77:a7:f1:1e:58:21:12:75:27:b2:a0:13:23:df:
                    20:55:3a:67:86:10:85:ab:f1:9b:ea:8c:a0:de:52:
                    4c:bd:51:51:d0:ee:52:bc:fb:66:8f:04:dc:6b:bd:
                    1c:43:66:d2:4e:3e:e5:49:16:cb:79:e1:9c:88:17:
                    da:dc:c1:1a:a8:70:14:24:c4:af:ed:4b:aa:d1:be:
                    72:78:01:0f:92:2a:d6:9c:d4:5c:d8:2a:34:73:d7:
                    f0:20:81:80:89:f2:91:70:4d:c9:77:35:46:3a:5a:
                    03:6b:9d:b0:87:5c:7c:4e:e0:1c:9b:71:1a:09:ea:
                    ab:f9:fb:06:95:31:0f:39:04:ff:1b:53:1e:3d:dc:
                    dc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:13:68:6D:B0:0B:84:5D:20:47:A7:55:31:02:52:94:45:64:DF:D7
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6BNobbALhF0gR6dVMQJSlEVk39c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.135.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c9:68:36:5f:87:fb:d8:4d:5e:b1:51:a1:d4:79:12:15:a1:77:
         5a:55:e4:45:13:c8:c6:71:c4:34:ac:c8:e0:00:ae:d9:a9:a8:
         ac:f6:58:ae:86:bf:9d:ff:bc:07:8e:4f:ce:33:72:6c:20:b5:
         82:7b:58:d1:7e:2f:a8:33:b9:4b:68:ac:62:fe:c6:e7:a3:e4:
         4a:20:6f:05:37:25:0e:c2:d7:50:c3:2b:66:51:29:8f:a6:55:
         21:08:71:d4:5e:c5:22:e7:cb:48:fa:3e:8a:33:52:95:70:75:
         66:6e:d1:d1:b0:55:9e:28:60:11:43:88:96:1e:95:6d:39:dd:
         b4:26:f2:66:24:82:d6:5e:85:fc:a0:78:d5:29:cf:f7:d1:23:
         fc:26:3d:7a:20:83:f7:fe:d1:66:08:7c:bc:8a:e5:a5:46:02:
         30:50:a9:c3:34:13:4d:d1:be:bd:15:b6:0c:47:a6:c9:31:9b:
         47:4e:e7:e7:cf:ba:90:6b:48:cf:d9:6b:0c:55:c4:da:7b:14:
         ec:2d:e0:89:1c:fe:f2:fb:43:d6:b1:4c:75:f4:39:1b:14:a6:
         74:bb:f9:b0:b3:8b:45:8d:c0:67:59:6b:ad:65:1a:e9:3b:8c:
         a8:64:20:3a:8f:80:6c:8e:62:38:46:19:32:e5:a8:08:60:20:
         03:42:cf:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:55 2024 by rpki-client on console-fra.rpki-client.org