Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/6MigXd3GH4xpLcvUiP_7_vn5G-Y.roa
File:                     6MigXd3GH4xpLcvUiP_7_vn5G-Y.roa (raw, json)
Hash identifier:          YSwaIKFgxHGCqCMQ5zLC7HPTZpOsCjJURFK4H0y7ZHU=
Subject key identifier:   E8:C8:A0:5D:DD:C6:1F:8C:69:2D:CB:D4:88:FF:FB:FE:F9:F9:1B:E6
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02E4
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6MigXd3GH4xpLcvUiP_7_vn5G-Y.roa
Signing time:             Sat 31 Aug 2024 01:44:41 +0000
ROA not before:           Sat 31 Aug 2024 01:44:41 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        221.132.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:44:41 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=E8C8A05DDDC61F8C692DCBD488FFFBFEF9F91BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:6f:59:54:46:d6:c3:e3:ef:2f:20:e4:4d:
                    2a:92:ab:20:93:20:0b:68:72:29:32:59:67:ce:e9:
                    9e:9d:be:68:c2:11:43:a4:8c:c8:6d:d2:cd:fb:79:
                    c2:d0:45:27:75:7d:bd:8d:43:2e:28:bd:46:63:73:
                    36:27:70:d7:5c:55:87:ed:62:a4:e7:62:a7:bf:14:
                    1d:0e:5b:c9:b6:67:68:fe:2a:c7:d5:8d:42:02:c9:
                    b4:04:a5:ac:38:54:39:a5:ce:d7:2d:f1:6a:76:c8:
                    24:c7:4f:54:8c:ef:01:7d:1c:dc:b6:86:5a:d6:db:
                    62:2c:38:b6:6c:59:bd:04:8b:b6:be:df:7d:57:ad:
                    c5:c8:98:de:a3:42:a7:14:3d:fd:70:92:2e:bf:f8:
                    ef:8f:f0:9b:72:f7:30:d0:0a:65:8a:42:26:22:5a:
                    4d:94:11:2c:34:20:3f:6c:27:c6:76:d8:19:37:0c:
                    68:55:98:c9:0b:eb:25:4d:12:c2:85:bc:4a:1a:4d:
                    cb:81:4a:38:6f:e0:eb:de:1a:91:e9:be:2f:ec:8b:
                    67:16:68:8e:ec:ae:45:bd:34:f6:6c:94:1a:2c:3f:
                    6c:94:00:fa:58:d3:f7:2c:c8:97:e6:a9:cf:95:b2:
                    17:07:f0:2a:ad:46:29:05:65:7f:56:c5:1e:d8:67:
                    ea:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C8:A0:5D:DD:C6:1F:8C:69:2D:CB:D4:88:FF:FB:FE:F9:F9:1B:E6
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6MigXd3GH4xpLcvUiP_7_vn5G-Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.132.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1d:c6:f2:67:ef:cb:68:29:06:d7:bb:f0:e1:43:50:f7:00:5e:
         24:e8:7b:d3:81:f1:68:ce:71:dc:e3:d4:2a:36:87:a6:15:fc:
         84:4c:9f:70:fc:dc:9b:11:57:4e:17:46:a0:bd:39:18:c3:f2:
         69:a8:25:f4:18:0e:c9:66:e3:99:31:f8:72:14:d0:51:20:50:
         da:0e:ff:e0:ff:53:d3:8c:bc:5d:2b:aa:8d:08:f0:ac:f6:3b:
         23:68:08:04:10:59:b9:8e:cc:95:91:3d:d5:27:2d:3e:80:ce:
         fe:e0:3d:d4:30:aa:7e:e2:a9:0a:d6:04:10:b9:3e:b7:fc:17:
         67:ac:6c:67:1d:41:a1:61:c7:a6:33:b7:e1:60:9e:6b:72:ad:
         f1:57:7a:9c:7b:0f:d4:ca:40:10:06:38:72:aa:87:34:a9:9f:
         82:ed:75:40:9e:b9:23:b3:34:bc:15:e3:0a:ac:4f:c2:cb:cb:
         b4:8f:ba:cb:27:48:0a:93:e9:23:6b:e0:0f:7d:7c:96:1c:25:
         e2:c0:1a:d0:bc:bf:6e:de:da:a1:c1:6b:10:fc:b4:60:95:45:
         56:18:81:25:54:1e:3e:3e:1b:56:9f:4d:a9:6c:bc:94:ec:7e:
         47:41:36:28:f9:fb:10:54:b5:22:4f:bb:dd:74:31:52:10:84:
         51:b8:4b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:57 2024 by rpki-client on console-ams.rpki-client.org