Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/6T_0c_nQufKki1sdSW-2z0VoB9A.roa
File:                     6T_0c_nQufKki1sdSW-2z0VoB9A.roa (raw, json)
Hash identifier:          boi/iBteT/g2JF+c2IXowvRQ03SSVkKAbakJO5zBWLM=
Subject key identifier:   E9:3F:F4:73:F9:D0:B9:F2:A4:8B:5B:1D:49:6F:B6:CF:45:68:07:D0
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       027B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6T_0c_nQufKki1sdSW-2z0VoB9A.roa
Signing time:             Sat 31 Aug 2024 01:38:51 +0000
ROA not before:           Sat 31 Aug 2024 01:38:51 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        113.61.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:38:51 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=E93FF473F9D0B9F2A48B5B1D496FB6CF456807D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:85:0b:08:2a:a6:86:25:dc:e7:82:9e:9c:0e:
                    f6:9a:0f:fc:78:89:e2:9d:3f:bc:c7:ed:d2:12:64:
                    22:e7:62:95:11:45:48:0b:cf:76:52:e3:e3:59:b7:
                    ea:ce:35:ea:aa:95:74:e9:1f:c9:f2:14:1c:80:9d:
                    17:ff:9f:7a:dd:d3:f3:3f:1d:3a:7f:44:eb:ad:76:
                    3a:b3:5f:d1:ea:42:b9:74:60:7e:a0:64:10:27:9b:
                    21:ed:5c:8b:54:0b:36:50:ab:26:1c:a0:fc:5d:28:
                    66:b3:12:7d:ff:61:5b:c0:82:1b:76:1f:e5:7f:20:
                    f8:ad:c8:c0:c1:94:d2:c6:72:7f:21:a4:86:3b:07:
                    f1:f4:52:76:8d:42:38:93:3a:17:eb:94:50:81:c1:
                    11:02:4d:b9:37:d5:26:ff:c3:19:b3:c0:e5:5d:42:
                    cf:2c:af:0f:a7:b7:07:6c:46:a1:4c:64:bf:b2:ee:
                    09:20:e1:ac:0a:28:bb:b3:a4:9f:be:1c:8b:a7:c1:
                    d0:85:4a:f2:da:b7:34:1a:f8:b2:d4:88:76:c3:4a:
                    90:09:d8:04:22:1a:68:ca:c2:8d:48:3c:3c:4a:90:
                    f3:af:63:24:2f:77:d5:38:87:61:e2:00:96:e4:39:
                    32:da:2f:d9:e4:8c:0b:14:d0:b4:81:a3:e3:18:08:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3F:F4:73:F9:D0:B9:F2:A4:8B:5B:1D:49:6F:B6:CF:45:68:07:D0
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6T_0c_nQufKki1sdSW-2z0VoB9A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:bb:72:f3:4f:54:a5:11:89:6a:c0:d7:80:8c:67:ea:20:1f:
         fc:ba:b1:aa:a5:81:f6:10:26:32:e2:ec:fd:54:a7:68:c6:69:
         b5:38:ef:2d:be:cc:71:6d:8b:61:98:fa:0d:87:64:d7:a7:ad:
         83:b9:ff:ab:bc:30:4c:72:c8:02:a4:54:65:9e:fe:cd:c6:05:
         7c:9c:0c:81:a9:20:ee:d3:2a:2f:50:aa:0f:6c:79:fd:7b:d2:
         df:24:9c:8d:75:fd:11:9a:cf:33:0f:9b:a9:60:d8:06:67:9e:
         cd:a3:49:5d:57:6a:9a:cd:d9:45:eb:e8:20:d9:4a:bd:ba:3c:
         ab:7f:5e:52:ed:2e:b4:1e:14:8d:db:d4:5a:ca:94:43:8e:16:
         75:1d:ca:6d:98:ba:69:91:a1:c1:f2:23:4a:69:0d:94:a7:0d:
         51:b8:15:d2:25:5d:f4:d0:22:61:34:00:2e:8f:1b:c0:60:a3:
         ff:a5:b9:07:bf:d4:c9:bc:3e:94:83:22:01:e2:95:f0:eb:25:
         2e:cb:92:c4:be:24:6a:85:fe:1a:5f:70:6f:10:9d:60:87:e9:
         60:d7:40:aa:7c:17:f1:1c:c4:c9:5a:3d:8f:6d:11:49:c1:56:
         f3:86:cd:a4:e2:be:87:e5:1c:2a:71:49:3c:c9:2e:ef:66:49:
         5c:95:a4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:33 2024 by rpki-client on console-fra.rpki-client.org