Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/aN9V9CCCPvBR90zp87nOfW5Xx8w.roa
File:                     aN9V9CCCPvBR90zp87nOfW5Xx8w.roa (raw, json)
Hash identifier:          aS3M4+2iTcy00DxcTeTjVxEW2qL5V7WmPW/RKV+sqrY=
Subject key identifier:   68:DF:55:F4:20:82:3E:F0:51:F7:4C:E9:F3:B9:CE:7D:6E:57:C7:CC
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02D7
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/aN9V9CCCPvBR90zp87nOfW5Xx8w.roa
Signing time:             Sat 31 Aug 2024 01:43:06 +0000
ROA not before:           Sat 31 Aug 2024 01:43:06 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        14.193.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:43:06 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=68DF55F420823EF051F74CE9F3B9CE7D6E57C7CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b7:b7:1f:17:dc:f3:cc:8a:07:1f:27:3d:ef:
                    cd:7f:98:7c:02:fd:36:c4:52:95:15:6b:94:77:e2:
                    62:ee:76:c8:79:54:e5:11:84:ec:13:2f:f9:af:52:
                    b3:98:fd:18:15:dd:1f:df:d4:83:91:5e:ed:f9:ea:
                    62:e8:36:9d:6d:10:5a:57:e8:1c:95:e6:9e:62:11:
                    fb:0f:4e:62:c3:b7:52:93:27:79:79:19:16:4a:48:
                    61:8a:98:ab:1e:b8:42:86:d2:f2:95:a1:2a:c0:73:
                    b9:14:7f:5e:e3:91:4b:ee:53:0a:47:65:01:e9:b1:
                    7b:23:6e:93:b8:9f:3b:39:40:a0:d8:0d:e6:55:b6:
                    be:61:19:45:ed:f9:49:ba:02:63:90:59:e4:d6:d6:
                    90:92:2e:4a:dc:1b:03:5f:d1:4d:a2:78:1c:b2:2e:
                    ac:c0:19:72:06:e0:5c:69:c4:aa:8d:d9:26:ef:b5:
                    c0:ae:90:49:4c:ce:fe:01:23:05:e3:64:09:db:57:
                    2c:4b:e6:ba:b4:19:3d:33:c9:59:1d:c4:ce:f4:e6:
                    e5:c4:4b:46:8c:7d:91:0b:cb:1a:78:d7:4c:a6:c1:
                    a3:b9:48:1e:85:4e:c5:16:1a:d5:78:cb:6d:05:52:
                    eb:79:7b:89:de:b4:47:6e:ee:10:5c:d0:39:cc:62:
                    b8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DF:55:F4:20:82:3E:F0:51:F7:4C:E9:F3:B9:CE:7D:6E:57:C7:CC
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/aN9V9CCCPvBR90zp87nOfW5Xx8w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.193.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         77:2c:b3:1b:ea:b7:18:d5:af:79:29:9f:22:f1:49:f4:86:f4:
         e1:02:e2:90:14:f6:5f:14:0d:5f:4a:d4:03:85:ff:8e:b3:d0:
         90:76:e7:2b:c9:63:6c:ff:7a:9f:0f:dc:e5:6e:95:9f:02:27:
         be:81:b9:fe:95:55:0c:05:6e:27:7d:f0:99:9e:13:e5:29:15:
         08:6a:28:da:38:ea:5f:89:9d:1d:f8:fd:15:69:f6:5e:2f:3c:
         e3:03:14:8f:49:24:8d:13:68:44:a6:f0:55:45:5d:41:94:f3:
         76:46:fa:17:c5:4e:56:17:0c:ef:06:76:3b:96:1c:79:0c:b8:
         3e:2a:7c:61:1d:90:34:96:ab:09:ac:97:0d:aa:b6:16:59:36:
         b5:cb:3b:ff:3a:cf:fa:b8:3b:fb:ba:5b:89:98:7d:c0:c8:2c:
         76:27:53:79:0f:0b:ab:de:40:56:d3:2d:1a:c4:72:f8:43:12:
         cd:15:00:15:5f:84:5a:b7:89:47:93:35:67:fd:65:51:6d:de:
         c0:1e:c2:f1:3b:f6:fc:f9:f2:92:fa:3d:be:f0:3d:7d:a8:d5:
         5b:6b:3e:e1:d2:25:c8:a4:59:8f:70:05:57:5f:61:63:b1:f5:
         5b:4b:b9:15:b5:51:00:58:52:bf:24:ce:6d:e1:0c:f8:dc:b5:
         1b:1c:c4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org