Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/_0LBhm4DyjwVumFWx020Ig4e69s.roa
File:                     _0LBhm4DyjwVumFWx020Ig4e69s.roa (raw, json)
Hash identifier:          u+jiO7bsPOdfbsmY+3iU47nWiInwtPKo5nGyHdwtshU=
Subject key identifier:   FF:42:C1:86:6E:03:CA:3C:15:BA:61:56:C7:4D:B4:22:0E:1E:EB:DB
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01BE
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_0LBhm4DyjwVumFWx020Ig4e69s.roa
Signing time:             Sun 01 Oct 2023 01:38:16 +0000
ROA not before:           Sun 01 Oct 2023 01:38:16 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9617
IP address blocks:        49.250.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:38:16 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=FF42C1866E03CA3C15BA6156C74DB4220E1EEBDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:32:0b:91:14:cb:91:c4:a0:12:50:7c:7c:
                    52:49:a2:74:fb:70:cb:97:c7:2d:96:20:b8:c7:6c:
                    08:b5:25:c2:70:54:f2:79:1f:0b:87:a7:0d:7b:b8:
                    39:6e:27:ac:4c:1d:bf:05:8a:2a:ac:c4:55:f1:46:
                    fe:b8:8b:6a:62:85:ff:c2:40:e0:8a:92:db:38:d7:
                    9b:f6:5a:5e:80:1d:af:90:f7:f5:6e:b3:48:3f:94:
                    e7:04:5c:71:84:ec:f7:13:51:f7:b9:2f:e5:fb:13:
                    44:47:87:56:ca:01:a8:10:95:c2:80:02:1b:ba:e4:
                    e1:56:ba:68:31:f3:e7:1e:5d:a9:4c:c2:fb:ed:f0:
                    98:dc:84:73:5e:ba:f6:b4:41:b0:64:f6:8d:fa:39:
                    0f:a7:0b:d8:27:28:6c:56:df:4d:c2:50:89:81:90:
                    ca:3c:9d:0c:2b:b5:21:a9:ab:e4:60:47:17:94:17:
                    25:33:00:fb:ca:84:6d:d4:52:58:d4:fb:c3:66:56:
                    3f:5a:5d:6f:81:fd:46:28:28:c6:23:cc:49:8c:9b:
                    a1:f0:e6:5d:da:04:1c:37:09:5f:61:45:d4:18:41:
                    1c:79:6d:c5:5c:a7:42:e9:ec:6c:c7:d9:96:58:8e:
                    d4:0a:36:cf:24:64:71:3a:f9:1a:a8:46:b7:1b:fb:
                    46:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:42:C1:86:6E:03:CA:3C:15:BA:61:56:C7:4D:B4:22:0E:1E:EB:DB
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_0LBhm4DyjwVumFWx020Ig4e69s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.250.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b5:3d:06:0d:dd:77:b4:15:27:d9:3a:6c:cd:a5:b2:35:a4:b4:
         13:15:4b:1b:10:6f:f4:25:37:5f:51:eb:a7:f8:19:3a:a6:57:
         c2:1e:67:2a:22:cc:a7:76:68:e2:0d:51:da:8d:f2:c1:2d:c9:
         1c:13:ed:01:4a:cb:44:23:13:03:61:ca:05:4e:62:f2:3c:b4:
         a7:a2:d9:da:db:3f:9e:11:01:18:ca:89:2b:b1:9a:6e:1c:e3:
         f7:2c:57:a8:18:d1:fe:27:8c:23:5e:88:d9:71:27:93:fe:b8:
         5c:04:c9:b1:2b:9c:e6:97:89:ec:f2:8e:91:71:e6:c8:88:97:
         1c:20:1e:47:8c:52:57:af:cb:3e:00:74:5e:b4:1e:9d:30:c7:
         7d:5d:1c:b0:ec:9c:75:98:8f:01:68:ce:69:b1:98:dd:a9:c2:
         0c:6c:52:f1:44:67:71:56:f6:f1:da:73:ee:b4:b0:c8:7b:66:
         2b:3f:e1:bb:95:8c:55:1c:99:22:f1:08:3e:84:e7:c2:44:65:
         f7:ad:a8:73:c0:dd:15:58:6d:ad:00:84:43:73:cd:36:0f:71:
         0f:be:96:08:cc:2e:5f:f0:37:cd:b9:16:50:dd:35:88:58:3f:
         b6:f0:0b:1c:f8:17:13:9e:28:ce:fc:a5:00:be:d2:53:29:2d:
         16:20:b4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org