Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/NDoJDX0UfD041U04PbFNygMegWg.roa
File:                     NDoJDX0UfD041U04PbFNygMegWg.roa (raw, json)
Hash identifier:          88a/vmcMFczeJfUPqWjKGlcGbdBTlky77m6PuJEkDUA=
Subject key identifier:   34:3A:09:0D:7D:14:7C:3D:38:D5:4D:38:3D:B1:4D:CA:03:1E:81:68
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01AF
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NDoJDX0UfD041U04PbFNygMegWg.roa
Signing time:             Sun 01 Oct 2023 01:36:37 +0000
ROA not before:           Sun 01 Oct 2023 01:36:37 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        219.112.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:36:37 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=343A090D7D147C3D38D54D383DB14DCA031E8168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:99:35:d2:09:be:a5:ab:5c:4b:b7:b2:e2:
                    fa:df:01:1a:e7:00:72:8c:b6:1c:67:26:ad:4f:c8:
                    df:d0:4a:de:e0:53:78:90:f8:ee:c1:a1:6c:b1:68:
                    d2:c3:c8:42:fb:77:e7:60:1f:5f:9e:2d:b6:36:04:
                    e5:ed:dc:ea:a0:58:bf:fa:37:02:7a:4f:a2:86:f4:
                    d7:f1:cb:5e:8b:c6:c0:6d:74:63:c1:4f:30:3f:26:
                    52:b2:a3:44:ca:70:a8:50:72:8b:d9:b5:5a:5b:72:
                    f4:d7:3c:be:88:4b:88:8b:5e:22:1b:3c:dd:04:0b:
                    71:51:39:fe:d0:95:52:91:e5:5f:22:b2:35:05:b5:
                    ea:eb:fd:49:d5:4e:ba:a3:94:13:02:e3:b1:0e:fd:
                    70:42:14:7a:16:10:ea:95:cd:9f:1e:2c:0a:9b:f4:
                    60:ec:b4:b2:ae:79:0c:be:b4:a8:ee:0c:b4:50:db:
                    ec:b2:93:c9:3f:71:c7:9f:06:8b:38:f6:29:26:6b:
                    c0:da:2e:4b:26:ac:74:fb:2e:3f:e9:7f:b1:e7:ab:
                    f0:0d:52:d6:94:31:c0:1f:8a:15:1e:f5:72:f6:83:
                    23:9c:c2:b2:29:6b:7b:89:ab:b3:4f:d1:07:18:38:
                    6b:7c:79:f9:41:1d:30:4c:3c:e5:b6:96:a2:ea:77:
                    24:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3A:09:0D:7D:14:7C:3D:38:D5:4D:38:3D:B1:4D:CA:03:1E:81:68
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NDoJDX0UfD041U04PbFNygMegWg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.112.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6d:d4:f6:94:48:8a:24:8f:d6:0d:13:f7:80:89:0c:8f:83:f7:
         63:c8:a4:51:fd:16:f9:39:de:f3:97:68:29:d7:27:d1:fd:21:
         d4:eb:40:bf:77:ce:36:30:af:76:b0:d0:07:9d:ec:83:f1:d2:
         10:9a:02:74:d3:0d:a1:4e:3a:25:88:c5:b0:8d:34:be:7c:c0:
         41:f1:9d:7d:4d:2f:e3:fd:7b:c5:6d:3d:f2:27:e7:c7:dc:6a:
         e4:28:a4:06:b2:80:5b:6b:d2:10:b0:ef:82:a3:52:13:5c:9e:
         d8:fd:8f:44:68:c5:e6:13:42:93:c5:22:97:95:0f:0a:13:6b:
         c3:03:b0:89:f5:95:c5:dd:c6:ec:bc:fa:c7:ec:41:2b:b0:9c:
         60:00:83:57:60:14:cb:ef:60:e0:5d:10:09:dc:67:e5:42:24:
         56:7a:54:b4:c0:53:36:24:cb:51:8c:41:5b:d1:51:c3:d0:ed:
         fe:b7:16:25:77:95:d8:4f:4d:4f:c1:37:64:e6:84:99:22:fa:
         ed:25:93:1a:8e:18:ef:54:29:19:b4:de:79:fa:fb:1c:62:7d:
         2c:aa:89:f8:7b:b3:1a:74:76:16:6d:0c:61:27:05:d0:e3:20:
         d5:41:78:13:5a:a5:75:a6:82:c8:3b:60:52:81:a3:ac:bb:0b:
         f0:fb:a7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org