Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/7Db7Rsyz85_DGlJD9OAN5fH3cH0.roa
File:                     7Db7Rsyz85_DGlJD9OAN5fH3cH0.roa (raw, json)
Hash identifier:          dWVsa1V3qKAlnb1sSoAgGQi/8TjEQQhQjZRBAR3+bOM=
Subject key identifier:   EC:36:FB:46:CC:B3:F3:9F:C3:1A:52:43:F4:E0:0D:E5:F1:F7:70:7D
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01F5
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7Db7Rsyz85_DGlJD9OAN5fH3cH0.roa
Signing time:             Wed 01 Nov 2023 01:30:35 +0000
ROA not before:           Wed 01 Nov 2023 01:30:35 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     0
IP address blocks:        211.1.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Nov  1 01:30:35 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=EC36FB46CCB3F39FC31A5243F4E00DE5F1F7707D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:73:86:7a:ec:30:11:c4:dd:1a:4d:fe:3e:
                    0c:0b:02:85:b1:66:d7:ff:e9:ce:f3:cd:5f:87:22:
                    1a:01:75:98:d7:b2:df:ed:06:ea:07:d4:7e:9f:52:
                    4b:3f:45:dc:6d:8c:9a:d1:b7:b7:c6:5c:2c:f1:cd:
                    31:48:55:17:29:ef:9f:b1:b1:28:ca:6f:6c:0a:2c:
                    ef:4c:ca:be:c5:83:5f:02:b5:be:67:8d:f6:0f:9d:
                    3b:31:7f:75:d6:5e:96:6c:dc:df:0c:bc:dd:71:b9:
                    08:74:4d:db:df:d6:5e:2c:32:ab:c3:8e:2f:fa:50:
                    fe:e0:a7:74:ad:b6:ed:0b:b1:23:f3:06:c9:4b:79:
                    96:8b:e3:85:94:3a:77:bf:42:94:6a:71:1b:97:e5:
                    e3:3b:cf:47:b5:7f:43:88:41:b7:71:07:2f:dd:df:
                    81:bf:62:94:20:70:65:b7:d0:3f:5e:9e:95:f9:dd:
                    46:f5:37:08:21:7c:e2:5f:ae:5d:42:cb:fd:bc:38:
                    75:08:8b:62:e0:36:12:96:60:56:c3:e9:f9:3f:6c:
                    bd:08:b3:d8:cf:18:86:05:94:1a:b6:d2:94:fb:3b:
                    31:60:af:fb:92:92:56:b7:70:c9:af:64:5a:a3:c8:
                    af:56:3d:f2:7f:f7:8f:92:fe:dd:da:01:3a:cb:9a:
                    05:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:36:FB:46:CC:B3:F3:9F:C3:1A:52:43:F4:E0:0D:E5:F1:F7:70:7D
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7Db7Rsyz85_DGlJD9OAN5fH3cH0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d1:8e:57:ea:6e:dc:4d:b6:98:a7:20:5e:96:70:c6:3d:ca:81:
         25:8d:79:cb:e2:5e:8c:ad:72:5c:9f:ee:06:82:8b:1a:cf:74:
         07:16:ae:a4:89:19:f3:7a:67:bd:e1:83:0a:b1:a2:f9:c1:58:
         63:dc:45:e1:88:2f:c4:fd:00:3e:a8:ef:ed:41:cc:60:13:95:
         ac:12:76:92:bc:98:0a:75:73:54:e3:81:05:d0:2e:74:e6:cf:
         89:b4:e4:4f:1b:da:1a:05:e3:6f:04:57:d7:0d:0d:7f:28:bc:
         79:09:c8:13:1d:9a:e9:77:bb:41:8c:73:af:73:e9:20:88:ac:
         d7:37:61:5b:af:66:14:a6:bc:69:7e:c6:42:48:27:f6:47:eb:
         eb:1c:e0:ab:7a:fb:03:85:3a:18:01:7e:5d:84:a6:4e:11:f8:
         98:34:45:bb:8d:06:01:69:2c:7d:a7:b0:24:bb:35:88:35:06:
         ee:39:c7:6b:fc:d8:7f:05:b6:5b:12:88:e2:0e:bd:6a:19:60:
         e2:61:a9:88:d4:a2:e5:6a:ea:67:6d:26:bc:d7:15:a0:61:34:
         94:8c:39:ee:0f:35:8f:6f:b0:76:27:9e:ae:71:aa:6d:33:80:
         6c:86:38:5e:fb:77:b7:4c:42:1a:e5:14:34:4a:23:fe:99:6b:
         f3:e5:7c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:35:58 2024 by rpki-client on console-ams.rpki-client.org