Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/bC2Lflf81XFZM6dRMB3gJ_MQaoE.roa
File:                     bC2Lflf81XFZM6dRMB3gJ_MQaoE.roa (raw, json)
Hash identifier:          d47Wu41lX89SY07C7tRaAbuVSfowGIkycmPbuVbwRrc=
Subject key identifier:   6C:2D:8B:7E:57:FC:D5:71:59:33:A7:51:30:1D:E0:27:F3:10:6A:81
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0148
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/bC2Lflf81XFZM6dRMB3gJ_MQaoE.roa
Signing time:             Sun 01 Oct 2023 01:30:21 +0000
ROA not before:           Sun 01 Oct 2023 01:30:21 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     18134
IP address blocks:        113.197.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:30:21 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=6C2D8B7E57FCD5715933A751301DE027F3106A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c2:ac:c9:fa:10:bf:c7:e2:08:24:77:3d:34:
                    6e:39:cd:63:ff:ff:e9:e3:39:49:6a:ec:d0:f4:17:
                    92:89:36:b3:79:b5:63:34:26:c4:2c:c6:4f:bb:e7:
                    0a:44:99:b4:4e:56:c7:27:86:dd:6e:3b:ac:65:23:
                    46:46:35:f5:ee:0a:70:7b:b3:a0:12:a7:f4:1b:8d:
                    aa:cd:a7:62:a6:58:a6:f1:d3:16:dc:16:06:e0:5a:
                    ff:26:2a:61:e2:28:8b:2d:9c:fe:50:24:dd:02:0b:
                    02:83:7e:db:d6:33:c7:0c:d8:74:a1:42:ba:8b:0d:
                    44:ae:62:b3:8c:5e:0c:38:08:33:ad:84:43:44:cc:
                    04:b7:61:11:82:c2:25:d3:a9:61:cd:39:ed:69:d5:
                    59:7c:c7:6c:25:d8:23:39:f3:ad:7b:5b:82:d5:a8:
                    c3:66:12:34:f9:bf:4c:53:c5:36:86:e8:69:3e:f0:
                    76:97:f5:cf:2d:fc:93:97:dd:fd:14:dd:20:e0:11:
                    f7:ba:37:5b:98:57:b6:22:d8:0c:ee:0e:f3:d3:85:
                    c4:d3:91:3c:21:b5:0a:41:ff:bc:a1:08:2c:47:e8:
                    11:15:13:32:20:e1:2f:a2:8f:1f:bc:88:a5:d7:3b:
                    6d:6d:4c:88:47:5c:86:cf:fb:d7:8e:0e:35:e3:eb:
                    1e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2D:8B:7E:57:FC:D5:71:59:33:A7:51:30:1D:E0:27:F3:10:6A:81
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/bC2Lflf81XFZM6dRMB3gJ_MQaoE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.197.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         db:b4:24:55:71:2f:80:57:8a:68:93:4e:96:72:4f:23:1a:11:
         58:c1:32:ee:a9:83:f7:1a:57:ac:3d:5d:a4:c3:10:5b:69:29:
         10:65:28:e7:21:2e:97:50:b4:ee:1c:13:3b:1e:9d:65:f2:f5:
         0b:27:b2:7b:67:3d:ab:0a:d6:e8:e7:3e:37:0f:ce:65:a8:18:
         6d:d3:14:20:a3:11:43:a4:8f:d2:74:c9:47:7d:ef:39:d1:44:
         30:f8:2f:c2:fe:62:ea:85:69:03:0f:bf:01:ee:ad:d3:ff:4c:
         fa:02:56:5f:a2:d2:d6:fd:72:23:b4:57:67:29:81:59:c3:37:
         95:b2:1f:5b:c8:93:b9:aa:29:5a:51:86:a7:fc:da:f1:ca:08:
         cc:9a:6f:b8:57:70:5c:46:c6:58:9d:e7:f6:12:7b:c7:4e:97:
         01:d8:9f:81:03:21:56:30:2b:b6:e5:03:62:af:29:f0:82:69:
         76:5b:ee:28:39:72:ab:fe:18:94:a2:85:fe:2b:e2:21:aa:49:
         a8:2e:0f:ed:d9:59:4e:d9:a3:56:6a:5f:bf:15:04:9b:43:b8:
         7f:1e:75:bb:3c:97:c0:d8:2b:2f:09:eb:31:1d:c3:d7:e1:56:
         68:b5:dc:e8:0d:85:21:e6:bd:56:cd:f7:f1:8e:b3:47:5b:91:
         0d:05:8a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org