Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/G6qyIPfbFIuk8-4R1kRjdSPmxdM.roa
File:                     G6qyIPfbFIuk8-4R1kRjdSPmxdM.roa (raw, json)
Hash identifier:          q6AmypEac6x28vrH0QmXCUtH6yF5dRKufzYCNTEFFjQ=
Subject key identifier:   1B:AA:B2:20:F7:DB:14:8B:A4:F3:EE:11:D6:44:63:75:23:E6:C5:D3
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02CE
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/G6qyIPfbFIuk8-4R1kRjdSPmxdM.roa
Signing time:             Sat 31 Aug 2024 01:43:03 +0000
ROA not before:           Sat 31 Aug 2024 01:43:03 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9617
IP address blocks:        211.135.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:43:03 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=1BAAB220F7DB148BA4F3EE11D644637523E6C5D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:73:b3:29:c5:a8:fd:d9:0f:64:86:8c:35:71:
                    72:2e:c4:29:4b:8c:bf:e7:6f:b6:5c:49:ce:90:ab:
                    32:03:22:1b:bc:eb:1a:80:bb:32:78:1c:a6:d1:f9:
                    5c:f7:dd:10:22:e1:52:65:65:51:4a:fb:9c:e5:ef:
                    82:cb:7b:a0:30:82:e7:53:c0:0b:d4:2c:84:19:fd:
                    61:52:1f:56:1b:a7:28:84:ea:2e:a0:f0:ba:8b:81:
                    ff:10:3d:f4:17:4c:f4:d6:4f:1e:ae:b2:26:f0:07:
                    c4:82:dd:d1:b7:4f:38:65:f4:2d:11:09:9a:d5:bd:
                    6e:4b:2e:1d:65:89:b8:f6:3e:8a:4c:ab:fa:db:9c:
                    c4:a3:fa:c6:01:89:c5:ba:cd:6e:33:c5:7c:09:4d:
                    d2:35:be:3f:e1:49:4a:ae:7e:bb:7b:7c:b0:f1:60:
                    63:18:f6:f7:f5:66:fc:83:73:54:08:12:fb:02:51:
                    a9:4c:e0:b7:b0:47:4b:df:ef:2d:7f:9e:25:bb:73:
                    6e:1f:eb:8c:c5:b0:81:e3:2f:1a:5f:ea:ab:bf:51:
                    78:35:9e:83:a2:8d:25:bd:20:5e:76:fe:e7:9a:11:
                    a8:53:8d:d9:34:fc:dc:ec:ee:72:4b:10:24:6d:60:
                    83:36:29:89:44:40:ac:12:75:d4:02:37:52:2f:18:
                    e0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AA:B2:20:F7:DB:14:8B:A4:F3:EE:11:D6:44:63:75:23:E6:C5:D3
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/G6qyIPfbFIuk8-4R1kRjdSPmxdM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.135.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         43:db:72:cd:79:38:65:04:93:06:e2:c6:b0:2e:f3:41:4d:57:
         4c:54:32:aa:e3:58:05:08:b2:4c:59:bc:88:af:ac:86:a9:06:
         34:9e:e2:02:79:23:ee:0d:58:6a:ad:4a:13:43:01:57:7a:5a:
         cb:6a:49:c4:da:b7:4b:a3:0b:07:9b:03:99:85:22:c9:1e:96:
         84:0a:18:c7:4b:e9:7d:b3:63:af:cc:6e:07:9a:c5:01:3b:7f:
         82:6b:63:c5:e3:24:5a:b9:9a:6b:c9:76:24:c5:cc:78:66:93:
         92:87:c1:dd:ea:d5:53:65:b3:27:63:76:c0:82:63:c7:33:38:
         91:86:b3:44:cc:7d:ff:8f:00:2e:75:b5:b2:ff:55:51:18:78:
         f8:0b:b2:f3:eb:b8:8f:ed:7a:1d:c3:a7:d6:a0:fc:22:7a:0b:
         b3:8f:f8:d6:9f:30:6c:19:9e:bb:f4:e2:37:64:31:f7:6b:de:
         81:53:96:66:11:08:e1:0f:ae:6d:17:64:a2:2d:06:91:90:4f:
         6d:ec:c7:dc:df:c5:5e:0a:39:5c:f1:44:e5:f0:99:df:85:0c:
         36:3d:78:5e:82:89:71:14:03:9c:0d:d7:47:0d:cb:4d:b1:e1:
         cc:89:08:ca:0d:47:ab:01:47:65:fb:4c:8d:95:d3:0c:c4:c1:
         4b:88:ee:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org