Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/_wfxP99FYjo97xONCocq-fCja6U.roa
File:                     _wfxP99FYjo97xONCocq-fCja6U.roa (raw, json)
Hash identifier:          x0tQIf4NPviLsy95Yrsq//qYODMFyc03rrzPu6HVhQc=
Subject key identifier:   FF:07:F1:3F:DF:45:62:3A:3D:EF:13:8D:0A:87:2A:F9:F0:A3:6B:A5
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0190
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_wfxP99FYjo97xONCocq-fCja6U.roa
Signing time:             Sun 01 Oct 2023 01:34:35 +0000
ROA not before:           Sun 01 Oct 2023 01:34:35 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4721
IP address blocks:        175.41.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:35 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=FF07F13FDF45623A3DEF138D0A872AF9F0A36BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:88:e0:60:c5:8e:51:5d:ee:8e:98:29:85:
                    06:0e:92:cf:b8:d5:49:39:5a:19:9f:33:88:df:91:
                    c4:7f:c9:21:94:57:36:20:4a:0e:23:76:94:71:be:
                    e5:de:1d:56:72:d8:32:e8:1f:b0:3a:dd:cc:9e:44:
                    90:27:64:a0:d1:49:0a:e3:1e:2c:55:08:a7:aa:c9:
                    0e:fc:3d:20:45:69:53:57:59:eb:00:37:e9:c4:e3:
                    e0:36:77:81:28:03:10:d1:38:7d:6f:b5:21:8a:66:
                    df:78:48:c8:f2:80:0b:45:90:b1:40:39:f0:64:fd:
                    f3:fc:7e:60:fd:e2:38:8a:97:1a:64:1b:a3:1f:82:
                    1d:46:19:aa:73:c6:7a:01:fc:ad:ab:eb:e6:73:97:
                    e0:c0:54:25:46:53:64:02:75:bf:8f:e8:9b:9f:d7:
                    16:72:28:7f:72:0f:b1:5b:fd:14:c4:4f:79:8e:b8:
                    be:c4:1a:0a:93:0c:ef:fd:44:04:e8:45:de:a0:44:
                    dd:99:d6:f9:e7:84:af:92:21:48:af:a8:05:6d:07:
                    7a:cc:92:9e:9b:05:39:4b:42:d6:14:d2:4c:d1:f1:
                    9f:46:ab:e8:b6:80:68:4e:42:a2:5a:c1:35:7f:f2:
                    cb:38:4f:8e:43:b7:8e:f9:ce:27:19:3f:f3:0d:5a:
                    95:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:07:F1:3F:DF:45:62:3A:3D:EF:13:8D:0A:87:2A:F9:F0:A3:6B:A5
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_wfxP99FYjo97xONCocq-fCja6U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.41.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4d:10:d4:86:70:b6:e7:0d:f8:88:2b:c9:6b:60:df:17:ae:46:
         c9:71:37:37:74:0e:d6:1a:bf:1b:1b:1e:84:d9:12:e6:93:2f:
         35:5e:d9:88:06:d2:d0:a0:bf:62:ad:f9:dc:ee:17:28:64:08:
         5c:70:ee:e7:04:65:5a:4f:14:c8:c8:f4:1e:56:1c:cf:32:bd:
         6f:98:2f:67:13:9a:42:d3:bb:75:e2:09:ce:2b:8d:f0:0c:72:
         1d:1d:70:de:c2:a9:e9:1d:c5:ef:17:2d:94:b7:1c:20:10:cc:
         93:a7:0a:cb:29:f5:1f:88:ed:5c:e6:da:40:2c:a3:04:c9:30:
         27:8f:2c:4c:26:36:f6:d0:16:2a:60:e9:39:88:52:5e:8b:22:
         2a:c6:b3:0f:9a:84:ab:e6:3b:f2:ab:47:67:35:fe:30:69:72:
         af:8c:84:c1:c6:09:48:bc:b4:76:18:47:78:bb:24:5d:73:73:
         19:ea:e4:51:8e:b6:b6:6c:d7:ee:11:67:fc:1f:21:1f:77:bf:
         14:b5:6f:77:d9:07:e7:a9:02:6b:41:66:fe:02:43:0b:6b:fa:
         73:03:f8:c0:d4:55:ff:45:fc:0f:24:dc:31:8e:c0:4d:85:c2:
         f8:4c:66:11:0f:e2:4d:c9:89:88:73:6a:79:20:e2:ed:05:97:
         6d:76:8d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org