Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/85xSQayfoOueUsPkxQscJZDmHtk.roa
File:                     85xSQayfoOueUsPkxQscJZDmHtk.roa (raw, json)
Hash identifier:          vWS9REf+Abk/iNUvXAIZ+ZD8YRQ7G1MsRN93ynpo3SQ=
Subject key identifier:   F3:9C:52:41:AC:9F:A0:EB:9E:52:C3:E4:C5:0B:1C:25:90:E6:1E:D9
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       012B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/85xSQayfoOueUsPkxQscJZDmHtk.roa
Signing time:             Fri 01 Sep 2023 01:30:32 +0000
ROA not before:           Fri 01 Sep 2023 01:30:32 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     45675
IP address blocks:        219.111.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep  1 01:30:32 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=F39C5241AC9FA0EB9E52C3E4C50B1C2590E61ED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:cf:c8:81:32:88:b5:5b:b1:a1:73:1b:d2:
                    c7:0b:dd:b2:a9:70:0f:44:5c:3e:20:96:54:e0:cf:
                    1d:3a:ef:8a:65:5d:e5:03:8b:01:d3:bc:33:a3:5f:
                    db:e0:02:18:76:06:b2:8a:27:72:02:b7:42:00:1f:
                    9e:c5:6d:ee:1a:ea:8f:46:f0:86:83:13:39:7c:ab:
                    b9:5d:b2:7d:81:c7:86:1b:5d:8a:ef:ea:00:a0:2c:
                    f0:55:28:1a:db:7b:4b:7c:e1:b3:da:96:07:82:df:
                    47:1a:23:cf:ce:f3:54:f5:71:2c:95:45:c9:38:3a:
                    9f:32:2e:9e:a7:b3:c6:e0:53:76:75:f0:3f:df:a3:
                    d1:dc:e7:c7:35:0d:a0:d6:c8:1d:ba:41:99:6b:a8:
                    b3:5d:7d:9b:96:5a:57:f8:ac:80:f2:d8:17:83:5f:
                    90:7f:36:c7:a4:af:fe:58:5f:a7:01:69:3f:7a:e0:
                    63:69:6d:5b:7f:12:82:bc:db:73:f2:d2:93:bf:73:
                    41:c2:2d:64:20:6e:91:9c:29:83:aa:d5:e7:4d:95:
                    a2:22:fe:1d:96:a8:cc:09:5b:65:ee:e1:53:38:74:
                    88:4d:c1:55:98:e2:3a:b8:f2:78:59:b7:be:86:ed:
                    56:11:90:8e:91:72:b1:5f:4d:a2:00:59:94:86:38:
                    1f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9C:52:41:AC:9F:A0:EB:9E:52:C3:E4:C5:0B:1C:25:90:E6:1E:D9
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/85xSQayfoOueUsPkxQscJZDmHtk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.111.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d0:b5:19:c1:e7:e4:31:e2:bb:5a:af:b6:88:97:08:41:55:d2:
         e5:08:f4:bb:ec:3f:84:d6:90:e3:76:0c:ff:eb:9f:f9:78:85:
         a1:86:2c:f0:71:eb:82:1e:24:e8:ef:83:63:71:b3:ca:c7:24:
         bd:ab:ee:29:d3:66:bc:89:f6:06:ef:d4:ba:9a:ff:c8:c5:0a:
         0d:65:12:54:78:b2:12:5b:7f:da:aa:c7:84:b5:4e:2f:81:68:
         f4:c2:8a:a7:53:f9:26:8f:5c:b7:8c:4b:0f:8c:ac:93:f9:61:
         09:92:f1:67:35:0f:2d:e6:24:09:b2:90:f3:59:4c:30:3b:51:
         7f:47:d6:59:ea:c5:55:37:7f:73:38:6d:c6:3e:f3:5c:05:20:
         60:6d:b1:d2:93:bc:ff:66:58:06:8b:6c:a9:f2:b6:2b:3f:8b:
         1e:4f:2a:06:69:57:2c:ad:6c:12:9b:b6:43:9e:4b:2b:2e:e2:
         34:11:c5:9a:c3:54:09:6e:1b:2c:2d:89:5f:d3:b7:29:91:7f:
         59:f2:45:82:a2:18:3b:12:50:20:c5:d2:c3:2d:42:8c:1c:de:
         62:eb:2e:fa:9a:71:5f:5c:d9:1c:09:4b:ed:d2:8e:44:e5:70:
         36:4d:23:2f:e3:40:d9:e5:ef:0d:3a:2d:a5:17:c9:91:8f:ef:
         b0:09:1c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org