Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Gi68nsD9gBH9vOBlWV98K--s9FA.roa
File:                     Gi68nsD9gBH9vOBlWV98K--s9FA.roa (raw, json)
Hash identifier:          WT7LGlU6rg965nzIcH+T5gDCg3ZOud9+TA1MiycpnA4=
Subject key identifier:   1A:2E:BC:9E:C0:FD:80:11:FD:BC:E0:65:59:5F:7C:2B:EF:AC:F4:50
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       018A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Gi68nsD9gBH9vOBlWV98K--s9FA.roa
Signing time:             Sun 01 Oct 2023 01:34:33 +0000
ROA not before:           Sun 01 Oct 2023 01:34:33 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        114.198.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:33 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=1A2EBC9EC0FD8011FDBCE065595F7C2BEFACF450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ae:7b:67:f9:f0:1a:d9:d2:48:1c:10:a1:10:
                    6d:ee:26:ca:cb:87:e1:8e:61:97:6e:e8:8c:d4:fb:
                    ba:a6:82:d2:03:90:db:2c:c9:cd:13:d0:f4:6f:d2:
                    f2:2f:3c:b7:f7:65:60:86:de:65:09:14:ed:26:b6:
                    12:ba:6c:0a:01:cc:eb:5e:14:05:ae:6d:ad:dc:ac:
                    26:fd:99:3c:46:86:3b:de:48:c2:4a:78:ea:cd:eb:
                    f9:22:4a:bc:fe:cc:c7:18:4b:c0:b5:38:53:67:29:
                    6e:cc:3c:2c:92:d9:ce:05:73:5e:31:ca:03:b5:4a:
                    d2:48:a4:21:02:bb:da:df:0d:97:c6:68:c5:fd:97:
                    24:08:88:c9:ef:2a:da:ac:72:c0:cb:86:94:17:1d:
                    ad:b0:b8:be:17:5b:59:d2:78:3a:a6:5d:29:59:22:
                    9f:27:1c:70:e6:24:c7:61:ef:68:9b:2d:c2:2f:34:
                    2e:c8:04:01:fa:40:b2:40:64:e2:88:3b:8c:58:cd:
                    f7:62:d1:41:16:98:ab:d7:e4:b5:fa:90:3d:c5:9b:
                    0c:58:20:ea:7c:16:5e:85:91:99:d6:15:f9:2b:1e:
                    52:2f:cc:a5:e5:fb:a4:a0:d1:8a:d2:47:1b:10:b6:
                    cb:3e:8a:61:09:ff:db:f9:5a:1f:b7:cc:68:fe:9a:
                    4b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2E:BC:9E:C0:FD:80:11:FD:BC:E0:65:59:5F:7C:2B:EF:AC:F4:50
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Gi68nsD9gBH9vOBlWV98K--s9FA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         62:93:03:5f:97:1c:fc:06:1e:39:78:5e:84:6a:62:b1:74:6d:
         5a:12:fc:97:1f:b2:0d:b3:99:4c:30:cd:29:08:6d:98:ec:af:
         c5:32:19:e6:5b:82:63:10:46:ef:46:26:27:b0:eb:1f:84:61:
         2e:63:7c:1e:10:3b:02:d7:f8:76:3f:e9:b0:3d:47:c3:65:a1:
         a8:bd:c4:4e:37:37:39:94:0e:4a:a8:37:9f:9a:94:d9:3c:59:
         8f:bb:34:09:d7:0d:09:fa:cc:67:0e:2c:20:2e:09:4f:7a:34:
         cd:d9:da:d2:1f:43:b7:f9:40:ac:f2:82:9d:8d:8c:46:c7:fb:
         2f:ea:ea:1a:47:53:b3:50:eb:b3:06:f1:97:c2:86:21:fe:47:
         33:90:d5:b6:85:6b:81:6d:ce:0a:f9:1f:f3:40:8b:27:15:b1:
         60:8d:19:0d:e2:69:cf:13:90:f1:8b:44:9b:ff:77:77:cf:08:
         dc:42:c4:be:91:6c:17:f3:df:b0:69:4d:4e:c8:8c:dc:fc:9c:
         99:c1:3d:af:ed:54:e2:a0:19:1a:33:39:0c:b9:4b:55:e3:d0:
         2e:6b:43:14:6a:ac:d6:1b:2b:ad:e2:76:06:dd:44:02:8d:8e:
         c0:56:ee:8d:72:1b:d4:7b:2c:5b:9f:90:54:06:d0:b9:9e:77:
         76:7c:0d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org