Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/YbjIw-_F_FPKZo1uyGu_9Q0hdL0.roa
File:                     YbjIw-_F_FPKZo1uyGu_9Q0hdL0.roa (raw, json)
Hash identifier:          NtiYdX/jYx22Lb6oLqIhMu6Fbnarfu4ZeVV5OQNlp40=
Subject key identifier:   61:B8:C8:C3:EF:C5:FC:53:CA:66:8D:6E:C8:6B:BF:F5:0D:21:74:BD
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02CB
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/YbjIw-_F_FPKZo1uyGu_9Q0hdL0.roa
Signing time:             Sat 31 Aug 2024 01:43:02 +0000
ROA not before:           Sat 31 Aug 2024 01:43:02 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        180.220.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:43:02 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=61B8C8C3EFC5FC53CA668D6EC86BBFF50D2174BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:00:9c:85:dd:16:aa:c5:4d:eb:2b:f9:f6:22:
                    bb:67:10:56:83:ca:02:7c:d4:99:2b:1c:e0:f8:3b:
                    34:39:8b:d0:ef:7f:15:4a:15:8a:38:35:5c:d0:bf:
                    97:11:57:05:5a:96:fa:a8:b8:b6:07:1d:c4:88:59:
                    05:d2:80:11:84:a3:e1:1a:c9:3c:ea:43:dc:cf:94:
                    b7:ad:e0:47:16:2d:05:ff:69:3a:71:ee:1c:40:50:
                    a6:3b:15:21:44:77:17:6e:04:54:43:41:8c:27:fd:
                    ad:62:a1:7d:bc:9a:ae:24:d3:86:e8:50:06:94:a8:
                    ac:f0:bc:9f:43:de:a2:fd:a7:d2:db:b9:80:38:a5:
                    ce:64:c8:36:38:f5:a0:b3:41:f8:43:ab:49:b7:97:
                    1e:6f:93:98:49:65:78:b9:5d:f1:e1:98:03:b2:52:
                    5e:bf:14:26:ac:9a:7a:89:f6:84:fe:95:e7:8f:bd:
                    0d:56:13:37:b8:ca:4d:77:e0:eb:21:9a:13:2e:cc:
                    c0:55:fb:68:79:35:fe:38:ce:af:e9:ad:79:c5:51:
                    5e:7a:29:31:b7:5a:5d:33:30:7f:53:32:1c:53:66:
                    c6:24:97:25:16:96:64:93:34:11:cb:b2:c7:6b:a7:
                    d5:05:4b:3f:e5:05:1e:72:44:4a:cc:a2:c5:d4:14:
                    df:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B8:C8:C3:EF:C5:FC:53:CA:66:8D:6E:C8:6B:BF:F5:0D:21:74:BD
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/YbjIw-_F_FPKZo1uyGu_9Q0hdL0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.220.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a1:77:6b:71:66:e5:ee:18:5d:78:85:30:7e:1f:dc:c5:22:f8:
         e3:d4:fe:1e:7e:f7:e7:a3:11:ec:3f:82:77:39:d3:a4:ce:61:
         24:6c:fb:03:f2:fa:ce:b6:c1:2d:15:89:eb:40:ba:83:13:5b:
         6b:34:35:1f:85:87:b0:15:34:c4:6c:09:78:55:33:b2:83:ac:
         7e:11:5b:80:d0:cb:7f:6f:35:a2:de:a8:1a:ee:de:ca:4d:3e:
         4a:f5:29:81:f5:2e:8a:c2:63:e0:b5:9b:76:6e:db:c6:42:f9:
         2d:f4:88:c8:4f:3b:f5:32:78:05:b8:e1:87:19:e4:12:5b:4c:
         e9:c4:a1:18:5e:f0:c4:81:18:7e:28:00:48:f5:67:12:9e:da:
         6a:7a:69:6c:d5:eb:be:e9:9e:83:fc:68:f9:75:aa:7e:8b:6d:
         9e:7f:6a:9a:22:7e:86:c1:21:36:0c:14:48:33:a1:1a:27:1a:
         2f:6d:ab:4f:b2:ed:6b:d3:fb:01:97:8a:3f:1a:4f:44:09:0b:
         c0:37:ad:97:07:bd:e9:b2:53:c9:02:6c:34:42:46:80:77:1f:
         ef:42:fa:d0:a0:51:fb:c0:41:c0:45:34:f5:2d:7a:d7:65:7d:
         a7:0e:29:ef:6b:d9:8b:74:99:bd:4e:5c:73:32:1d:f5:cf:9c:
         47:33:0d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org