Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Vz5tASxdhuKl3zPAThGXMRNK6Ls.roa
File:                     Vz5tASxdhuKl3zPAThGXMRNK6Ls.roa (raw, json)
Hash identifier:          +k/kRzBwWOIq/rk5WNgQOAdh/FMPHHXwnZe0YPaK+r8=
Subject key identifier:   57:3E:6D:01:2C:5D:86:E2:A5:DF:33:C0:4E:11:97:31:13:4A:E8:BB
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0256
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Vz5tASxdhuKl3zPAThGXMRNK6Ls.roa
Signing time:             Sat 31 Aug 2024 01:36:41 +0000
ROA not before:           Sat 31 Aug 2024 01:36:41 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     23788
IP address blocks:        119.82.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:36:41 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=573E6D012C5D86E2A5DF33C04E119731134AE8BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:69:36:13:8e:ba:b5:02:08:6f:8e:85:17:eb:
                    09:7e:b1:50:9f:fe:a2:d7:fd:be:2a:76:c3:52:bd:
                    6e:e2:aa:73:2d:ab:7f:bb:e7:28:5d:67:fc:11:7e:
                    b1:22:7e:87:ca:f8:2e:3b:7e:79:0e:fd:37:0f:b7:
                    ee:a2:5c:a2:cd:c8:85:ce:d1:da:92:34:44:8b:90:
                    b5:31:58:4f:eb:40:f7:ad:e3:94:4a:51:7f:0f:7a:
                    b2:51:4e:17:c0:a4:4e:75:78:12:14:e2:4b:c8:40:
                    04:71:45:bb:b9:b8:85:11:d9:5f:f1:cf:fa:04:11:
                    48:29:9f:88:70:b1:13:2a:40:39:67:b3:a0:e6:00:
                    63:c0:20:13:55:6a:af:00:bd:53:52:6f:7c:fb:27:
                    30:59:7e:ed:86:96:d8:96:44:de:94:00:5f:93:07:
                    44:b0:e0:ef:d1:8c:68:41:b3:be:41:f2:fb:6a:f9:
                    d2:d6:d2:13:7e:1e:27:14:1f:32:52:ce:65:1c:53:
                    8d:29:88:c7:71:59:2d:b3:77:7b:41:07:9d:06:a8:
                    cf:f6:5c:4a:e6:52:52:57:3d:87:b8:e0:d6:97:83:
                    76:a7:b4:a4:c7:e3:52:e8:3b:3a:98:7b:cf:88:b0:
                    ff:65:8a:b2:f6:57:70:73:e4:f8:b1:0c:a0:0f:a5:
                    ff:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3E:6D:01:2C:5D:86:E2:A5:DF:33:C0:4E:11:97:31:13:4A:E8:BB
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Vz5tASxdhuKl3zPAThGXMRNK6Ls.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.82.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:e3:b6:69:ef:b5:36:d7:9b:2b:b6:f3:5f:b5:35:a3:3b:1b:
         1a:9d:e9:2b:7e:dc:b7:5d:80:98:f5:5d:fb:71:4b:ae:f2:37:
         6d:4f:33:61:57:23:e5:a0:0d:1a:ba:68:bd:f1:4c:af:28:86:
         37:fb:6f:ec:0c:d1:00:23:d6:fb:55:d1:54:4d:76:9a:32:a4:
         c2:c7:1f:03:b3:d2:3b:18:36:3c:ad:87:bb:9c:b9:42:89:b1:
         2f:9c:46:2e:42:8f:05:40:0d:ee:e4:e0:ef:ea:b4:22:f8:80:
         a7:ba:11:9d:e4:ea:d1:57:9b:e2:2d:2e:36:47:87:97:82:c9:
         c7:39:5b:21:77:50:a7:6a:a6:dd:0a:2d:a6:1a:0c:87:be:30:
         21:d3:32:49:68:7a:b4:d4:3a:66:15:f0:b8:e3:38:31:b6:00:
         e3:b9:7a:1c:66:fb:d9:76:8b:3b:a4:73:2b:17:ba:11:6c:55:
         f3:48:f5:06:6c:38:30:76:cc:cf:67:1f:a6:2e:fb:a1:64:12:
         98:87:70:72:68:31:09:2b:f4:19:56:d9:13:b4:4f:5f:a6:ab:
         3b:13:70:c1:0a:ce:54:b6:bd:f0:84:9e:5a:0a:e8:9f:a2:df:
         3f:1f:75:f1:e9:7a:dc:ca:9e:a4:f1:67:5b:ba:06:fc:69:c9:
         c5:fe:17:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org