Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Emx5r9ShPtCND2kNPhrzvX2JFnw.roa
File:                     Emx5r9ShPtCND2kNPhrzvX2JFnw.roa (raw, json)
Hash identifier:          DBVipIOgFfh1/yD4fIJznl4lqiv7fBIHy1tW5VxoA1Y=
Subject key identifier:   12:6C:79:AF:D4:A1:3E:D0:8D:0F:69:0D:3E:1A:F3:BD:7D:89:16:7C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0232
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Emx5r9ShPtCND2kNPhrzvX2JFnw.roa
Signing time:             Sat 31 Aug 2024 01:33:25 +0000
ROA not before:           Sat 31 Aug 2024 01:33:25 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9378
IP address blocks:        110.93.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:33:25 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=126C79AFD4A13ED08D0F690D3E1AF3BD7D89167C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:c6:00:c3:b1:ed:ac:08:6f:99:15:a6:d2:
                    04:64:5f:36:8a:63:0b:9e:03:0f:94:c0:a0:b3:b2:
                    a2:dd:82:e7:67:fb:4e:af:ac:d2:fe:5e:c2:92:26:
                    76:8f:6c:84:ff:dc:1c:ac:53:04:51:43:d5:38:96:
                    58:5c:38:c6:d6:de:c4:07:45:35:8c:0b:e1:21:5b:
                    38:96:ae:3a:be:87:ab:08:de:56:66:dd:92:8b:7f:
                    31:9d:29:de:aa:31:7a:76:e9:bd:f8:6d:93:f5:42:
                    8b:83:33:c7:20:97:76:ba:99:e6:ba:7f:61:62:50:
                    f0:f9:33:2e:fb:98:81:e9:1f:45:5b:ec:d9:35:be:
                    13:11:71:9f:71:89:76:d1:07:ea:15:ff:bd:93:90:
                    5b:0f:35:58:85:26:67:06:5c:10:54:d5:0e:fb:d8:
                    95:fb:7a:32:eb:c2:89:13:2f:3e:ec:ea:1f:ce:23:
                    fa:0f:1f:59:81:39:4b:aa:19:77:ca:ce:b0:bc:1a:
                    a2:c2:17:ea:33:9f:69:e7:26:7d:12:bf:56:68:c6:
                    31:40:6d:66:6c:b4:1b:2b:55:98:ef:60:22:6b:05:
                    bb:25:e3:54:50:b1:4b:fc:5f:b4:eb:6e:5d:a4:2b:
                    40:f6:61:11:23:69:bb:1a:7d:4a:e5:7b:d0:13:ef:
                    17:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6C:79:AF:D4:A1:3E:D0:8D:0F:69:0D:3E:1A:F3:BD:7D:89:16:7C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Emx5r9ShPtCND2kNPhrzvX2JFnw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.93.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cd:5b:b5:d3:1d:19:84:47:c2:82:2d:5e:ac:69:96:b6:82:eb:
         52:aa:51:35:55:85:50:6e:e7:69:14:56:7e:f0:b2:04:e1:a7:
         67:71:13:15:f6:db:68:19:ef:aa:7e:3d:ba:57:46:e7:e4:82:
         92:4d:b8:fd:de:d5:9d:71:8f:a4:95:8b:38:eb:53:15:98:16:
         7d:9d:a3:69:d5:eb:65:4b:95:13:84:eb:71:a1:e2:b4:d5:29:
         24:51:30:9e:a2:98:63:3c:65:cb:da:90:40:5f:83:0b:1e:04:
         a1:2d:6f:b0:58:c9:91:db:57:9f:b9:8a:93:95:37:72:8b:a0:
         b0:dd:57:0e:ee:28:09:97:aa:b9:79:1a:f5:36:96:3b:ab:da:
         3b:9b:cb:ff:bc:65:b2:43:e7:15:b8:77:fa:a4:55:a5:3a:74:
         75:a6:d3:c0:c6:50:d1:c3:67:21:40:fa:a7:f7:10:51:dd:8b:
         24:e6:af:1f:d2:41:c2:54:d3:7a:ba:a1:28:71:70:56:b0:2a:
         c0:3f:88:ab:f2:89:04:2c:4e:c4:b4:1c:46:2a:88:13:35:bc:
         d4:4e:a2:a8:52:0f:48:70:92:9b:ae:24:03:3a:5e:fc:11:6e:
         09:28:62:24:1a:27:58:6f:48:cd:ee:4c:6b:1f:cd:b1:57:99:
         68:3d:47:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org