Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/LoN6Bgh5IC3uQDNkeJpz2GHv58Q.roa
File:                     LoN6Bgh5IC3uQDNkeJpz2GHv58Q.roa (raw, json)
Hash identifier:          hOTcp8hw0DyLavrv5c6mJnx6qjEiQydkAAW0TtolZgM=
Subject key identifier:   2E:83:7A:06:08:79:20:2D:EE:40:33:64:78:9A:73:D8:61:EF:E7:C4
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0188
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LoN6Bgh5IC3uQDNkeJpz2GHv58Q.roa
Signing time:             Sun 01 Oct 2023 01:34:32 +0000
ROA not before:           Sun 01 Oct 2023 01:34:32 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4721
IP address blocks:        114.198.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:32 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=2E837A060879202DEE403364789A73D861EFE7C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:60:83:c9:2c:ff:ff:c5:a8:3a:3d:e9:9c:65:
                    46:81:e6:37:cc:f9:86:ec:10:d0:c8:2b:0b:91:90:
                    f6:f3:59:ad:a5:cd:16:51:40:dd:8b:5f:b0:c6:83:
                    72:ea:8a:3f:4e:f5:39:74:35:c5:02:ca:6d:1d:76:
                    96:0d:e2:7f:dd:7c:e8:85:ca:dc:2d:6a:3b:1f:87:
                    c7:c1:ef:3e:a4:02:da:bd:99:3b:1d:c6:83:9e:60:
                    04:88:5d:78:2c:96:39:99:3f:92:0c:fb:15:a0:27:
                    77:92:6a:68:73:46:98:1b:40:f0:40:a7:b0:d1:72:
                    a6:d1:8c:7a:9f:49:65:16:76:48:79:47:08:f7:0b:
                    31:2d:ea:23:05:e1:1b:43:b6:1e:8d:5c:36:b8:7c:
                    af:6b:96:83:66:89:54:4c:7e:d5:7e:33:8f:1f:1b:
                    ad:9c:2a:1a:8d:e0:3f:f1:b2:5d:20:ba:af:8d:c5:
                    dd:ff:aa:69:11:a4:a6:90:49:a9:c7:f1:6b:19:5f:
                    fe:9c:b7:cc:42:70:31:3d:dc:0c:e8:ea:0c:ef:18:
                    e1:aa:1a:4a:09:ab:a1:a9:56:7a:c6:50:80:3e:9b:
                    56:4b:02:1c:48:f6:4a:88:a1:3b:0e:0e:c0:fd:d8:
                    da:86:d1:be:f3:17:cf:3f:b8:67:e1:e4:1c:d1:59:
                    6f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:83:7A:06:08:79:20:2D:EE:40:33:64:78:9A:73:D8:61:EF:E7:C4
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LoN6Bgh5IC3uQDNkeJpz2GHv58Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ab:9c:47:a0:01:67:0b:59:ab:fd:86:80:79:68:c5:53:ad:04:
         b9:cd:82:be:1d:09:16:fd:13:d3:7e:ca:77:72:95:28:1d:31:
         4b:71:0e:2b:35:99:b0:8f:b4:3d:a8:27:2a:71:b2:9c:01:8d:
         25:9d:4f:52:39:f9:7c:2b:44:8a:fd:c5:9c:e5:ee:b1:06:c1:
         14:43:15:a7:42:f4:51:dd:04:d3:05:2e:38:19:53:b3:bd:98:
         2a:3a:4f:39:08:30:06:d1:92:cd:e0:29:ef:26:2d:7c:c9:a2:
         35:14:69:28:3f:2b:85:cb:e5:ba:a4:22:a3:fa:7c:e0:a5:6f:
         80:f8:8b:b9:3d:39:b4:18:b6:79:a5:ae:ed:37:46:f7:58:59:
         70:d3:29:f0:cd:88:0f:d8:2e:ec:33:bf:a1:06:ee:1a:89:b2:
         29:8a:ad:d3:90:74:58:dd:db:de:04:2b:5e:64:e8:ef:61:0e:
         ce:60:44:03:d8:7e:56:ee:d2:cc:3a:f5:96:17:a4:31:1d:e7:
         c9:ca:c2:dc:4e:d8:7e:ab:12:28:b8:cf:e2:9a:04:33:d8:43:
         18:82:24:c4:59:a2:1c:e9:c7:bd:c3:04:ab:6e:5d:61:b9:7d:
         be:e2:ba:2d:35:e7:50:50:9c:2a:62:bf:74:ba:51:48:70:9b:
         25:75:19:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org