Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/CT6KBi_IjRRlvzVGjF9jRQeNqzI.roa
File:                     CT6KBi_IjRRlvzVGjF9jRQeNqzI.roa (raw, json)
Hash identifier:          knDVJmtDZrkJu4WZNQm2WgJhe5T2II0u/18nURKA3/o=
Subject key identifier:   09:3E:8A:06:2F:C8:8D:14:65:BF:35:46:8C:5F:63:45:07:8D:AB:32
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0234
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CT6KBi_IjRRlvzVGjF9jRQeNqzI.roa
Signing time:             Sat 31 Aug 2024 01:33:26 +0000
ROA not before:           Sat 31 Aug 2024 01:33:26 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9378
IP address blocks:        124.195.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:33:26 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=093E8A062FC88D1465BF35468C5F6345078DAB32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:c3:05:2b:ee:93:89:a1:d4:f5:ec:f6:1d:
                    a4:ac:cc:82:41:84:9e:f7:74:77:3a:07:31:50:03:
                    52:10:88:8f:af:19:e7:3a:83:50:93:0d:75:97:bd:
                    99:8e:46:49:73:b4:f1:33:52:25:76:14:77:e7:1e:
                    29:4a:73:6d:dd:d8:3c:91:a9:40:d2:7b:c8:ad:9b:
                    38:e2:16:63:17:e8:b4:f2:7d:21:69:1f:72:f5:5b:
                    1e:2d:ff:8c:13:4e:4a:c7:67:14:68:46:c1:00:a2:
                    f4:68:e3:82:bc:e6:1b:04:f9:21:2d:87:64:8c:43:
                    74:18:97:dd:97:21:56:09:cf:e5:90:dd:bf:dc:4b:
                    f7:c1:e9:13:82:3d:04:5a:51:13:98:b8:b6:7a:7f:
                    09:74:b3:69:5a:84:1f:d4:6f:ca:c5:01:3b:19:bc:
                    4e:b9:7b:d3:d8:1f:68:95:59:c0:7c:af:a3:31:85:
                    db:48:63:75:62:25:55:b3:37:2a:26:e2:bb:19:92:
                    e7:2c:b8:1c:6f:d5:2b:f6:a3:a9:7c:10:df:69:37:
                    e8:07:9b:be:14:b5:15:c7:43:67:f8:1f:ac:2d:77:
                    2d:03:5b:2f:f3:02:8e:b8:b4:a7:53:f6:25:f9:b8:
                    3a:68:2e:19:65:27:1f:cd:15:79:57:4f:3a:e5:8d:
                    88:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3E:8A:06:2F:C8:8D:14:65:BF:35:46:8C:5F:63:45:07:8D:AB:32
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CT6KBi_IjRRlvzVGjF9jRQeNqzI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.195.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:7f:65:e0:e9:f5:f4:e0:65:bb:c9:1b:64:bf:c3:b7:a1:0b:
         8d:8f:f4:0d:01:00:db:21:d6:0d:10:5d:06:08:2c:42:43:1e:
         49:6c:dc:3a:ad:31:bc:44:41:2e:29:73:da:16:5a:8d:6f:00:
         ab:25:09:39:94:bb:b3:67:50:31:6d:97:50:54:26:74:63:df:
         23:b1:75:0e:45:6a:05:f8:28:9e:1a:18:e3:34:b9:49:5a:6e:
         a8:97:08:e2:3b:26:95:14:e1:c6:e4:57:91:56:2d:ab:d6:6b:
         04:e2:1a:9b:69:5b:43:2c:46:90:4d:28:92:d4:20:77:2b:76:
         3d:59:41:7f:eb:b7:8c:21:b6:d7:2e:ec:03:d7:85:84:33:a0:
         74:87:ad:5c:b1:18:ee:a9:2b:38:b2:cd:d5:b3:93:4e:00:d1:
         75:91:95:6c:f0:58:06:45:cd:42:92:94:45:92:3f:c8:da:9b:
         50:bf:22:c4:83:dd:66:07:90:a8:2b:3c:b0:39:63:4e:97:ca:
         ba:71:7d:6e:6e:1d:4a:59:b4:3f:a1:68:a3:22:27:b6:ec:6e:
         0b:28:e3:2b:0c:2c:a8:39:67:79:af:9d:c2:05:49:f4:6b:19:
         1b:e2:87:bf:6a:ce:28:97:ab:30:f5:6b:dd:f1:23:11:92:4c:
         9a:d7:08:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org