Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Wd-q10LViZmake3ir7ufMCyxYU0.roa
File:                     Wd-q10LViZmake3ir7ufMCyxYU0.roa (raw, json)
Hash identifier:          X5KQJ3LB8cPiFgOHyWfLb4sVC04ClXTfNRMgLpjIFz8=
Subject key identifier:   59:DF:AA:D7:42:D5:89:99:9A:91:ED:E2:AF:BB:9F:30:2C:B1:61:4D
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0110
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Wd-q10LViZmake3ir7ufMCyxYU0.roa
Signing time:             Fri 01 Sep 2023 01:30:20 +0000
ROA not before:           Fri 01 Sep 2023 01:30:20 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9824
IP address blocks:        110.93.0.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep  1 01:30:20 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=59DFAAD742D589999A91EDE2AFBB9F302CB1614D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:11:68:aa:d3:35:71:52:8c:75:51:91:52:
                    d7:08:ca:af:db:cc:d6:b4:92:1a:62:2b:0f:a5:5d:
                    b8:db:c7:11:ac:4d:49:af:be:7c:55:80:f9:b8:60:
                    0e:da:d8:0f:77:39:33:e7:ba:03:7e:db:c4:1a:d4:
                    71:53:4b:18:5e:55:9c:e5:05:8e:e4:01:94:a2:1b:
                    d4:ea:e3:ca:76:9b:0a:15:23:ee:3d:a4:d2:d9:d7:
                    27:3d:fd:35:c9:7d:8d:bb:e6:5a:3e:56:f7:1b:9a:
                    c8:ac:5b:42:b5:d6:a9:a9:40:aa:65:30:40:ef:24:
                    e9:62:01:39:39:92:7d:c2:5e:de:2b:1c:39:09:bb:
                    25:27:5d:af:ff:c0:ed:1a:00:35:cd:57:0c:78:d6:
                    2a:be:c8:1a:88:c8:b1:94:1a:cb:60:9c:19:26:53:
                    35:6a:62:ae:62:32:ec:6e:5d:90:93:7e:d6:b6:ea:
                    12:a7:3f:cf:77:b2:c0:53:ff:35:be:35:61:4f:c8:
                    da:60:6c:5e:1a:61:a0:7e:fc:76:19:ae:48:99:11:
                    3d:07:92:58:7d:b8:07:08:bd:dc:15:ef:5b:2b:dc:
                    44:75:4c:52:11:3e:d7:25:91:fa:8b:5d:51:45:9c:
                    36:46:06:d8:00:38:5c:9f:7a:ae:ac:6f:14:25:0a:
                    5f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DF:AA:D7:42:D5:89:99:9A:91:ED:E2:AF:BB:9F:30:2C:B1:61:4D
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Wd-q10LViZmake3ir7ufMCyxYU0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.93.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         aa:d6:f0:43:cb:76:26:36:29:c6:08:70:0e:63:e0:7c:81:89:
         a1:2e:3e:03:4a:00:62:74:ba:d4:b3:50:17:14:94:75:68:2c:
         e0:5a:8d:ea:ed:99:67:20:6d:90:4b:5b:30:d1:3b:3f:30:e9:
         87:c9:88:87:88:c0:99:95:79:cb:69:be:a2:e6:48:84:6d:24:
         b9:99:4a:d0:d4:59:d9:3f:a7:f7:d3:28:23:3c:aa:5c:0e:0c:
         b8:ea:f9:79:5e:92:ce:ad:52:0c:3f:e6:69:b6:81:e8:d6:37:
         5d:ce:c1:6d:00:aa:f9:3f:86:2f:1b:c0:c2:35:4a:ea:94:19:
         89:3b:d3:6d:5d:a9:29:86:09:af:df:f6:fb:61:b4:79:72:9d:
         77:b7:08:56:df:c9:81:df:ca:fa:e5:06:ee:d5:f0:ba:f3:55:
         74:e1:a0:53:60:01:06:a5:4c:8e:18:bf:f4:c1:41:a8:a6:c2:
         d4:24:53:e4:76:9b:0c:f3:e8:ce:d3:1d:2f:33:ae:4a:06:66:
         7c:6c:d5:3f:5c:35:db:4c:b5:92:92:3b:c6:ef:2b:f9:d4:d6:
         bd:fa:b9:34:17:59:ec:75:61:81:c7:69:ab:bb:54:00:6f:6c:
         ef:d0:16:6b:97:1f:f1:00:34:61:9b:3f:98:d8:1c:3a:fe:dc:
         a8:82:b5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org