Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/H55CzpH0BBWXBHTLhB8d-0-kkAE.roa
File:                     H55CzpH0BBWXBHTLhB8d-0-kkAE.roa (raw, json)
Hash identifier:          FSA8wkCu5PVP03aAqKS1ZZ80rMxbQWZPMbYQuyaorlE=
Subject key identifier:   1F:9E:42:CE:91:F4:04:15:97:04:74:CB:84:1F:1D:FB:4F:A4:90:01
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0255
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/H55CzpH0BBWXBHTLhB8d-0-kkAE.roa
Signing time:             Sat 31 Aug 2024 01:36:40 +0000
ROA not before:           Sat 31 Aug 2024 01:36:40 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        110.172.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:36:40 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=1F9E42CE91F40415970474CB841F1DFB4FA49001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:cb:1d:5a:4f:9c:95:03:eb:8e:59:38:c1:
                    1d:c1:6b:b2:3d:39:00:20:6f:32:0f:e3:5c:ef:4b:
                    ce:95:d2:b0:b1:15:fa:a8:1c:d9:ab:a2:e0:39:39:
                    3e:f7:5c:28:19:19:18:35:aa:15:e8:34:77:27:e6:
                    29:de:64:41:1e:1a:d1:ea:5e:3d:ff:9a:df:9b:4c:
                    6e:08:c5:a3:f5:1e:c0:c3:db:6e:10:88:fd:58:58:
                    98:e6:dd:77:73:5d:ed:e0:5c:20:0f:61:13:ea:2e:
                    03:47:e2:6a:b7:71:a6:04:67:10:3b:7a:a7:51:f5:
                    f7:d9:2d:cf:b5:e7:32:5c:f9:24:0f:db:9f:fe:e6:
                    6b:00:31:a5:3c:32:aa:de:20:f2:c7:0b:c9:82:c2:
                    2b:5f:73:2c:af:62:93:40:9d:55:41:91:9c:8f:f6:
                    9c:50:31:ef:3d:b4:4b:24:44:9b:3f:01:c3:a2:08:
                    b4:c1:c9:15:dc:82:c3:80:74:c1:2a:eb:55:35:8e:
                    df:94:32:76:9d:a9:71:cc:1a:25:f3:a8:3c:84:ef:
                    d1:a6:c1:4b:a9:16:d9:1d:62:42:02:e0:88:5d:39:
                    1d:98:c3:ec:e9:92:9b:d6:d9:29:a3:33:95:fe:cd:
                    a9:ae:7a:54:3e:d9:78:dd:94:ab:d3:86:e6:f2:b1:
                    17:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9E:42:CE:91:F4:04:15:97:04:74:CB:84:1F:1D:FB:4F:A4:90:01
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/H55CzpH0BBWXBHTLhB8d-0-kkAE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.172.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b0:92:85:10:40:d2:9e:6e:fe:59:0c:ae:1f:88:9f:f4:d6:6b:
         aa:9b:b3:83:66:2b:58:40:b0:b8:67:df:88:f8:3b:59:73:eb:
         65:5e:a1:c2:ec:c9:0c:60:9d:15:8a:17:2c:6b:5b:04:ab:9c:
         2f:43:21:d5:d5:4c:13:42:c2:e0:71:72:b1:5c:72:9e:88:b6:
         90:e6:95:e2:7c:ce:a7:62:a1:53:60:a9:8c:33:51:44:c1:51:
         63:22:29:4d:62:58:65:89:67:03:6c:f1:5d:9e:61:32:81:a3:
         4b:ca:04:fd:f9:d1:06:9b:f4:71:92:2d:b0:81:ea:47:2a:8e:
         9b:47:f5:b4:38:19:44:05:2d:49:af:d7:db:72:a3:9a:d6:92:
         34:a5:e2:b7:66:29:04:3e:28:ac:93:4c:74:60:9b:13:2a:1c:
         8e:87:da:5b:59:05:b1:80:aa:6b:3c:62:67:8b:5d:62:9e:e6:
         6b:47:68:c8:79:e4:98:15:19:f7:f6:c4:b8:34:ad:d1:46:ea:
         7a:93:a5:79:59:42:9d:10:a6:5e:77:66:ec:9c:13:b6:c3:f9:
         c1:9e:29:8b:17:25:57:cc:54:a3:e5:95:c1:af:74:69:65:a8:
         fe:56:bb:fa:17:98:a1:03:b0:e4:6c:f0:d7:b7:97:a4:ae:a6:
         1b:d5:cc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org