Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/EXH22H8PJQhX5H3ZSUYLKTr7z38.roa
File:                     EXH22H8PJQhX5H3ZSUYLKTr7z38.roa (raw, json)
Hash identifier:          SToSa+pGTC9VVluqTTok2XkYVNpg+yEeMQ482trCtD0=
Subject key identifier:   11:71:F6:D8:7F:0F:25:08:57:E4:7D:D9:49:46:0B:29:3A:FB:CF:7F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01C9
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/EXH22H8PJQhX5H3ZSUYLKTr7z38.roa
Signing time:             Sun 01 Oct 2023 01:38:21 +0000
ROA not before:           Sun 01 Oct 2023 01:38:21 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9617
IP address blocks:        119.26.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:38:21 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=1171F6D87F0F250857E47DD949460B293AFBCF7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:6f:1e:7d:d6:5f:58:87:eb:bd:20:77:10:
                    a3:f8:95:2a:25:3c:d2:a8:df:ae:30:0a:a1:59:c4:
                    1b:a5:39:88:2a:1b:9b:e9:35:f3:00:c2:f3:16:f1:
                    a2:79:74:1c:bb:7d:11:11:7c:95:ab:3e:f8:c8:d1:
                    a1:a9:cf:47:73:ff:99:b8:a7:a5:f0:d3:94:2b:d4:
                    e4:fc:1e:73:2f:60:69:da:43:de:1c:3b:d0:4f:87:
                    cb:6f:1d:5b:27:2d:b2:10:41:fa:8a:98:39:af:ce:
                    62:c9:ec:8b:66:00:68:e2:7d:f3:97:9f:fa:93:b1:
                    a6:29:99:95:47:e9:9d:3b:38:95:f9:ae:e0:95:c8:
                    2e:89:02:62:0c:aa:5e:79:84:08:67:b1:5f:47:af:
                    3d:45:35:f1:4e:12:66:45:39:12:88:a9:59:f6:b4:
                    f7:cd:2b:53:b0:a8:37:b4:b7:5b:4f:33:ae:e8:f5:
                    7e:f1:f9:f7:70:15:55:f6:a0:da:5e:82:5a:06:8a:
                    15:a8:68:69:71:a8:87:53:06:d4:97:64:28:46:14:
                    ca:17:33:27:6d:21:76:f1:99:ed:2d:65:cd:fd:4d:
                    1d:a9:7e:73:9a:f9:76:08:bc:2f:82:57:e6:73:9f:
                    f7:4e:05:aa:e6:a6:97:dd:77:d2:b3:cd:fe:4f:0e:
                    5a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:71:F6:D8:7F:0F:25:08:57:E4:7D:D9:49:46:0B:29:3A:FB:CF:7F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/EXH22H8PJQhX5H3ZSUYLKTr7z38.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.26.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         79:b9:44:7c:21:a7:1b:fb:c0:37:cb:8f:fc:9f:f0:3d:60:4b:
         98:3a:b1:0a:6a:bd:85:7a:f5:a4:dd:c1:12:81:f7:33:c7:ea:
         0f:85:ef:68:90:ae:4f:2a:be:10:84:02:db:58:e4:01:77:d5:
         b5:c7:35:91:71:5f:ab:d3:0b:30:96:1e:c1:b2:84:00:77:d9:
         c6:49:86:43:63:b3:05:03:97:1c:c3:30:2c:d7:17:54:63:43:
         bf:2f:ea:8f:62:c4:01:66:6b:fe:57:98:25:26:5a:4b:79:4a:
         ab:bb:05:7c:67:ef:0d:1b:0e:7a:9a:38:e7:97:6b:e4:0a:45:
         84:da:0a:8a:8c:66:65:a5:0e:ae:b4:93:b2:2b:5a:cd:1d:03:
         34:ff:6f:3d:e1:e0:e3:a9:62:f8:51:d3:cf:7b:3a:8c:71:02:
         f8:1b:b3:51:92:f8:86:ef:df:28:68:0a:5c:e1:ad:ef:9b:bd:
         fa:31:17:1a:9c:31:da:14:fd:a8:8b:fb:95:62:df:b3:dd:6f:
         61:56:07:b1:82:67:b6:7e:a9:f6:82:25:14:22:5e:0e:2e:d6:
         85:3c:95:34:35:dc:86:28:11:60:d7:6b:f8:61:5b:57:20:37:
         04:2d:e3:84:a5:01:1e:39:83:0b:23:16:43:37:48:94:7c:96:
         d5:7d:69:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org