Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/_URbGR6Za5KoSFx9PR-uu238mjo.roa
File:                     _URbGR6Za5KoSFx9PR-uu238mjo.roa (raw, json)
Hash identifier:          fC8Hm41Do0N0+BoeBaqLS5wv40T6fIxJABwwqZbh6MI=
Subject key identifier:   FD:44:5B:19:1E:99:6B:92:A8:48:5C:7D:3D:1F:AE:BB:6D:FC:9A:3A
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       027D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_URbGR6Za5KoSFx9PR-uu238mjo.roa
Signing time:             Sat 31 Aug 2024 01:38:52 +0000
ROA not before:           Sat 31 Aug 2024 01:38:52 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        114.134.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 637 (0x27d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:38:52 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=FD445B191E996B92A8485C7D3D1FAEBB6DFC9A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ae:7a:4f:0c:96:e2:67:8e:90:98:31:fa:92:
                    30:72:45:85:e8:44:87:f4:92:d1:80:75:b6:79:fe:
                    56:61:98:ca:f9:e0:3c:3c:15:a6:37:78:80:15:cf:
                    fd:f1:5a:7b:7a:25:ec:48:01:44:04:21:9f:46:f2:
                    00:00:5a:86:c1:6e:16:98:44:ca:5a:62:40:af:41:
                    32:a3:40:1a:63:53:c5:ee:2c:44:e6:69:5e:41:a4:
                    87:68:a1:b3:e4:85:88:fc:d1:e5:36:73:55:bb:f7:
                    b6:a6:b6:9e:c9:96:32:86:0d:6f:cc:eb:03:72:4d:
                    a6:0f:4d:f1:82:02:78:a5:9a:dc:8c:0c:b5:ac:a4:
                    1b:04:59:03:57:1d:44:b9:a1:bf:45:25:d6:ad:f4:
                    ef:f9:09:6a:f2:49:de:75:61:59:12:46:cb:7c:96:
                    76:cf:75:d6:f2:7c:15:50:77:11:1b:f8:8b:03:e4:
                    f7:1a:fd:da:c6:eb:f1:31:7c:bd:17:2b:9a:ed:ee:
                    55:99:b7:7d:c8:ae:94:b9:bb:54:71:2f:81:86:2f:
                    69:46:73:19:20:45:65:96:2a:99:c9:41:16:b7:61:
                    30:74:b8:7e:3c:3f:78:88:d7:88:48:28:98:09:eb:
                    15:65:72:64:ec:ca:b3:9a:48:56:b3:23:39:9b:28:
                    cb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:44:5B:19:1E:99:6B:92:A8:48:5C:7D:3D:1F:AE:BB:6D:FC:9A:3A
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_URbGR6Za5KoSFx9PR-uu238mjo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.134.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         da:7b:c2:79:78:31:4f:15:49:c0:9a:c3:39:ff:dd:29:4c:73:
         74:0b:c2:bc:a8:60:cb:de:6b:d3:ad:dd:fe:01:08:fe:ad:ee:
         c4:b4:bc:c8:53:c3:92:82:36:a2:65:83:35:db:eb:80:c1:03:
         54:13:87:ba:4f:1b:b4:b9:5c:da:64:42:f1:0c:cd:28:30:ec:
         9d:ec:70:2a:33:cd:99:b5:71:f2:36:47:7b:c0:c0:6c:59:63:
         f1:53:6f:15:94:ac:a4:06:04:1e:ad:7f:e5:9a:68:2e:d6:92:
         fb:0b:21:af:f6:65:6d:3d:d6:0f:1f:18:75:b0:49:b2:10:c4:
         55:89:fa:5f:56:ab:64:1e:b0:09:21:4e:3b:e4:26:1e:31:05:
         5c:94:aa:27:43:4a:95:69:39:69:be:c9:15:4b:8d:32:96:44:
         07:a5:36:60:48:21:35:93:97:5f:56:27:1c:d2:a7:1a:82:a8:
         9a:3a:ee:b5:7a:ec:be:b7:5e:c9:6b:cf:c2:d3:c4:5d:e3:38:
         37:4d:f0:77:96:96:86:c4:bf:ec:f5:2f:f1:e2:35:c0:cc:f4:
         71:04:1a:82:b9:6e:5d:99:0f:a3:4b:e9:6e:02:29:5f:72:92:
         17:2c:36:cd:f1:2f:15:0f:fe:09:fb:04:a0:3b:05:d1:05:b9:
         f6:88:93:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org