Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/adixU2EAB1pui14D3HOh-VfLNCc.roa
File:                     adixU2EAB1pui14D3HOh-VfLNCc.roa (raw, json)
Hash identifier:          6+QEsYux/QNZDDgrprIwHJ7D00s7Exnp9+rRQw7DfWY=
Subject key identifier:   69:D8:B1:53:61:00:07:5A:6E:8B:5E:03:DC:73:A1:F9:57:CB:34:27
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0130
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/adixU2EAB1pui14D3HOh-VfLNCc.roa
Signing time:             Sun 01 Oct 2023 01:30:10 +0000
ROA not before:           Sun 01 Oct 2023 01:30:10 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     7686
IP address blocks:        210.228.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:30:10 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=69D8B1536100075A6E8B5E03DC73A1F957CB3427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:51:51:f8:fd:25:c1:2e:27:85:f4:52:32:
                    e9:a2:8c:d7:ee:a7:aa:9f:b7:63:f0:20:66:6c:83:
                    63:70:ff:20:14:da:8d:f2:4c:0f:04:fc:f8:cc:d7:
                    f9:4d:4c:68:ed:a1:7e:7b:7a:f4:2f:8b:18:a2:99:
                    13:42:61:ed:6b:53:ea:a5:67:62:ca:f5:91:cd:79:
                    50:60:24:b8:7c:3d:3a:37:89:22:2d:2b:f2:f0:29:
                    56:0b:51:9c:ba:6e:e6:31:49:91:5c:70:25:ea:3d:
                    fe:04:9b:e4:49:aa:f0:ff:c8:78:e2:73:74:20:55:
                    4e:f7:c2:2c:28:f6:e1:de:9e:05:56:d8:4a:ba:1f:
                    b2:f0:2e:b7:e5:01:5f:da:c7:44:fe:d0:80:be:98:
                    c5:c9:df:c7:fa:9f:0d:8b:5c:08:e5:0d:67:61:52:
                    4e:20:be:d5:59:2d:03:02:b2:01:4f:c5:b0:8a:01:
                    7d:c9:61:0e:d0:b1:c1:56:a7:17:a5:d4:9d:6e:07:
                    f3:35:47:a7:29:44:d8:38:a5:84:37:94:4b:6e:d7:
                    40:bd:d8:03:d5:b0:04:39:9d:a2:8b:3f:07:a9:2d:
                    7f:eb:fe:c0:ae:1f:26:13:95:4b:f1:da:94:df:5d:
                    c4:8b:1d:b8:e8:d6:3f:04:98:7d:de:c5:04:fd:0d:
                    4b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D8:B1:53:61:00:07:5A:6E:8B:5E:03:DC:73:A1:F9:57:CB:34:27
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/adixU2EAB1pui14D3HOh-VfLNCc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.228.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:b0:10:7d:bf:03:8c:1e:8c:d6:c5:a3:5f:6f:48:a8:d9:67:
         9b:20:c9:75:fd:f8:ce:64:63:3f:0a:fa:ab:c8:e9:87:9c:59:
         47:91:b7:ac:e5:dd:4a:bb:cf:f3:29:2f:ea:26:f9:58:45:87:
         a2:68:2c:a8:8b:9e:45:0e:ed:93:83:48:19:51:15:7a:ad:e0:
         20:20:ef:27:66:5b:fc:dc:48:84:2d:de:a2:ad:e8:73:d9:ab:
         ee:ea:4f:ce:c7:4e:cc:4b:83:85:53:a4:99:35:08:a6:47:96:
         10:ba:39:1f:19:04:3f:95:ed:b9:7c:04:f2:74:86:c0:6a:a0:
         10:43:b3:92:6f:e7:10:b0:6c:5c:9c:f5:7f:88:51:f6:14:52:
         f1:88:31:90:8d:16:b9:cb:1a:b4:de:af:17:a7:b0:13:21:24:
         42:f3:42:db:4c:8a:27:ba:29:a1:b6:3d:70:03:dc:96:63:22:
         31:c4:bc:8b:c1:f6:3f:1f:f2:3b:3b:2c:63:2e:0b:73:e2:29:
         7f:b5:92:11:e2:f6:ae:99:95:a2:ae:dc:1c:9d:56:f0:00:a4:
         d9:e3:a5:d5:dc:24:c0:f7:36:51:0b:32:60:94:61:8b:5e:09:
         09:45:4e:b5:8b:b3:72:0f:a6:ea:c8:be:a4:63:e2:20:c4:67:
         ba:48:b8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org