Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Z5D00suD_5UX5-45MJjJ1KvEQsE.roa
File:                     Z5D00suD_5UX5-45MJjJ1KvEQsE.roa (raw, json)
Hash identifier:          UGQ8b5Jrk3qC8jTHwdmeJK97grGhyQR8Q31evw018Dg=
Subject key identifier:   67:90:F4:D2:CB:83:FF:95:17:E7:EE:39:30:98:C9:D4:AB:C4:42:C1
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0271
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Z5D00suD_5UX5-45MJjJ1KvEQsE.roa
Signing time:             Sat 31 Aug 2024 01:38:47 +0000
ROA not before:           Sat 31 Aug 2024 01:38:47 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        110.92.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:38:47 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=6790F4D2CB83FF9517E7EE393098C9D4ABC442C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7a:ad:fb:b1:47:81:45:ae:dc:e5:77:cf:c4:
                    df:1d:7a:1b:22:d1:10:47:20:27:e8:02:1b:75:29:
                    45:93:d1:85:9b:5d:69:a8:17:ce:8a:0c:da:7e:cd:
                    68:03:2c:70:83:67:f5:39:bd:d3:d2:76:8d:6b:a8:
                    8f:e1:33:ca:65:34:17:a8:ce:4a:90:78:42:3c:e2:
                    87:af:95:34:03:25:f0:11:49:57:b9:79:54:65:c6:
                    a9:2d:a6:e8:aa:6b:54:51:6a:c0:29:12:6f:8e:1d:
                    a3:f8:62:a6:29:90:c5:18:b7:6b:c9:50:c6:11:d9:
                    3d:33:28:1e:a1:a2:66:0c:cf:58:9c:b5:ed:f6:0e:
                    5d:08:3b:ac:a3:7b:f1:a6:01:b0:d1:3b:4b:33:6f:
                    ea:7a:28:ba:49:ad:f5:98:d3:82:87:67:65:0b:ac:
                    c1:81:df:42:9e:96:12:11:38:f7:f2:f6:8b:a2:b4:
                    00:c7:cf:3f:6a:f7:b9:8a:88:2d:a6:7d:c7:7e:6c:
                    36:f4:f6:b1:56:2c:dc:ea:4a:8a:eb:99:3d:8d:6c:
                    98:9f:e2:1e:71:ed:3e:e5:18:55:b4:d9:41:6e:02:
                    53:f9:2d:f8:13:3b:67:0d:3d:6a:3d:69:82:c8:c5:
                    dd:d0:d3:39:5f:40:e2:d4:e8:ef:bb:3e:99:42:cc:
                    ab:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:90:F4:D2:CB:83:FF:95:17:E7:EE:39:30:98:C9:D4:AB:C4:42:C1
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Z5D00suD_5UX5-45MJjJ1KvEQsE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.92.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:c7:d2:8b:ca:74:28:3e:c3:8b:bb:4e:60:e0:ab:41:8f:d5:
         95:2d:78:56:6c:7b:95:43:04:9f:c2:5a:49:1b:8f:be:03:e1:
         72:9e:27:6d:a0:d4:c8:93:22:a4:75:d8:03:78:d9:4b:96:3e:
         a3:da:9f:53:35:de:cc:08:e2:58:bb:0a:df:0f:e9:96:c6:39:
         61:c6:c5:e4:fb:55:5b:25:d2:8c:e7:54:26:46:d7:30:5f:48:
         ce:c8:a3:b5:bb:19:3a:c0:b7:c0:8a:73:fc:e6:f4:a7:57:41:
         12:9f:27:35:f9:98:20:6c:ea:50:6c:3d:06:84:d3:7b:3a:a9:
         06:89:b8:5b:62:85:2d:81:26:f4:c6:e8:d7:4f:87:1f:ec:b9:
         46:ba:6b:4b:0b:fc:76:1b:a1:a0:d0:47:2a:7c:8f:c8:fa:01:
         73:8f:2d:3f:f7:0d:54:2a:a5:ce:72:49:b0:9f:50:12:f1:62:
         ab:5d:03:97:3e:5d:c1:fe:cf:fe:53:f9:d1:92:97:71:8c:9a:
         31:18:72:97:3f:2f:d7:5e:18:dd:5e:ab:29:c6:31:7d:8e:15:
         de:31:dd:41:a5:d2:e9:b6:61:8d:56:53:b0:d4:71:c6:05:ea:
         d7:ba:70:a5:39:23:40:0d:c3:37:49:e2:7d:73:5e:a5:20:14:
         4a:8d:62:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org