Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/6Tto_Gqj51-qAgzI6d93dULb8Rs.roa
File:                     6Tto_Gqj51-qAgzI6d93dULb8Rs.roa (raw, json)
Hash identifier:          /ZbGS0MUdi2jm0eXCVj7HGcI4VxA7zMFDqllVr8bgxE=
Subject key identifier:   E9:3B:68:FC:6A:A3:E7:5F:AA:02:0C:C8:E9:DF:77:75:42:DB:F1:1B
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02E9
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6Tto_Gqj51-qAgzI6d93dULb8Rs.roa
Signing time:             Mon 30 Sep 2024 01:28:10 +0000
ROA not before:           Mon 30 Sep 2024 01:28:10 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     0
IP address blocks:        202.138.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 745 (0x2e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep 30 01:28:10 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=E93B68FC6AA3E75FAA020CC8E9DF777542DBF11B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:55:f8:6a:1f:7f:ed:67:e5:18:4b:35:23:45:
                    d7:5b:66:8e:e1:3b:4c:6a:27:99:31:7a:01:e6:e1:
                    a1:70:31:d4:78:e9:44:e9:c7:70:26:18:eb:fc:76:
                    d2:99:77:e3:92:de:26:26:0c:cc:a0:40:48:34:b0:
                    91:09:a4:91:a3:eb:c1:18:d0:1f:9a:7f:3d:38:77:
                    c3:50:17:e5:73:71:04:ab:b6:8f:bb:1f:8c:92:0e:
                    05:42:ab:5d:84:4f:e7:07:9d:2e:38:ac:62:10:41:
                    3d:87:d8:4d:09:dc:c3:f4:e2:8c:3f:6a:44:89:a8:
                    7a:a1:68:77:bc:9a:b5:9b:e7:98:b7:53:44:1d:8b:
                    9f:82:27:37:4f:1d:77:40:ec:68:d4:54:f2:0a:1e:
                    e0:1a:fd:05:35:82:1d:6e:7f:cd:07:5c:53:5e:e6:
                    35:0f:b8:4a:26:6b:12:30:e8:ba:ee:4f:17:d0:96:
                    4b:58:36:cd:f7:36:10:64:87:d5:1c:85:28:14:af:
                    b8:d3:a7:ec:8a:59:83:42:25:a1:83:8c:8d:12:aa:
                    4c:01:93:b3:07:57:c5:fe:a8:aa:b9:aa:8a:69:70:
                    e1:43:af:99:c2:04:b2:75:31:fc:c0:cb:48:41:e1:
                    da:1b:a5:76:fb:59:bc:82:6d:15:0b:26:bd:35:9d:
                    e9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3B:68:FC:6A:A3:E7:5F:AA:02:0C:C8:E9:DF:77:75:42:DB:F1:1B
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6Tto_Gqj51-qAgzI6d93dULb8Rs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.138.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:87:17:f9:58:8d:a0:98:77:b5:67:c8:3b:9f:40:ce:c8:8d:
         de:b8:cc:a1:35:83:79:59:e2:7b:51:ba:2a:73:a6:40:6c:7f:
         ac:42:a0:78:a7:3d:01:32:91:08:17:0b:f1:74:6d:c0:45:e4:
         46:d3:a6:4a:54:13:fa:ac:c4:1a:71:70:24:09:b1:20:de:1d:
         2e:30:c6:cc:11:e5:d0:c7:83:61:3b:b0:c8:87:f3:6f:73:41:
         5e:59:26:cb:5c:9b:7d:82:53:2f:a2:e3:da:e4:a5:f5:af:97:
         94:bc:f8:22:9f:cd:06:55:18:ac:2b:1c:6f:78:ee:7e:5a:0a:
         62:ae:3d:bd:a7:d5:d7:c8:a5:9d:fd:a7:8f:e7:e0:70:cf:f7:
         b4:a3:3a:1d:99:aa:39:27:02:ed:48:3f:54:a8:9c:94:d5:6c:
         1a:94:73:33:62:bf:d7:08:23:97:74:3c:92:81:59:6f:68:60:
         ce:a0:10:12:97:87:da:58:ed:ae:82:0e:8a:b8:10:46:2c:e0:
         86:1e:93:e0:ff:ec:9f:b4:94:e3:29:88:82:a9:07:95:7f:33:
         bb:6f:9c:fe:12:c7:0a:1b:ac:d2:5a:32:a1:9a:d4:35:55:f6:
         ad:65:26:cb:eb:33:ad:56:47:0a:9a:f0:00:d5:a5:2b:80:81:
         bd:3b:7c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:30:53 2024 by rpki-client on console-ams.rpki-client.org