Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/cfdEVs_iQERmiMDLa4GruF-2_o8.roa
File:                     cfdEVs_iQERmiMDLa4GruF-2_o8.roa (raw, json)
Hash identifier:          gaHQ9lKRBk/n/2/OsHaCeiuCWoX0HjI6kUVgI4fB3ao=
Subject key identifier:   71:F7:44:56:CF:E2:40:44:66:88:C0:CB:6B:81:AB:B8:5F:B6:FE:8F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0217
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/cfdEVs_iQERmiMDLa4GruF-2_o8.roa
Signing time:             Wed 31 Jul 2024 01:29:12 +0000
ROA not before:           Wed 31 Jul 2024 01:29:12 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        103.55.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul 31 01:29:12 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=71F74456CFE240446688C0CB6B81ABB85FB6FE8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:e7:35:d2:35:00:47:2e:f5:0a:12:fc:38:
                    9f:13:3d:73:07:61:0e:46:ce:c6:e0:18:d5:51:b3:
                    30:fb:98:d1:97:be:ee:d5:33:ee:17:1d:39:a3:02:
                    72:e5:86:d0:b7:05:2b:1e:a6:09:40:78:fe:9c:df:
                    f4:79:c0:52:d3:f8:3a:12:3a:27:72:a9:d3:d7:9e:
                    a9:4d:7e:26:24:9f:39:ec:23:98:0d:f5:c8:0c:47:
                    83:d8:c3:53:72:64:13:96:c0:d6:6c:54:f8:f7:ec:
                    45:38:43:c9:75:76:aa:ff:5e:f6:5c:d4:5c:ae:31:
                    43:54:41:bc:02:29:73:43:15:f3:91:50:bd:70:3f:
                    69:cd:ae:8e:bb:d8:0d:fb:16:db:47:a7:22:00:02:
                    e3:8d:91:f7:99:60:0c:2b:58:37:83:5d:52:1b:8c:
                    3b:d0:00:28:83:25:1c:dd:8d:f6:50:a7:89:f5:0b:
                    39:9f:89:a4:95:0e:44:00:3e:0c:45:58:01:47:ce:
                    30:0b:bc:3f:2d:40:b7:26:21:83:55:16:6c:e7:43:
                    92:8d:e9:53:b1:27:94:29:61:ac:62:72:84:08:77:
                    ab:30:2b:09:4c:1f:5d:c0:d8:3a:54:d2:c4:a0:d5:
                    5b:9c:28:25:5f:a6:40:b3:86:85:c1:9a:fb:48:1b:
                    23:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F7:44:56:CF:E2:40:44:66:88:C0:CB:6B:81:AB:B8:5F:B6:FE:8F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/cfdEVs_iQERmiMDLa4GruF-2_o8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:51:04:22:48:2a:9f:f3:8c:dd:40:d3:c3:83:3a:f2:35:2d:
         69:7d:7f:85:8e:59:b1:b2:9e:8a:e1:24:84:ab:69:14:68:96:
         63:0c:76:3f:81:c8:33:df:6e:5b:9d:8e:a3:e8:97:b5:8c:61:
         96:73:65:ac:4d:6f:29:ec:1d:5a:9c:cf:ad:9d:8a:4d:b6:0e:
         d5:14:88:6d:6a:e5:1b:a5:76:70:0f:79:bf:bb:a1:62:89:a1:
         b9:b8:53:62:f0:c8:ad:71:e4:00:d9:82:9b:99:56:b6:b8:9a:
         3c:4d:a5:96:17:4e:36:57:4d:00:bc:47:8d:3a:99:1d:ba:b2:
         76:07:7f:9f:ce:31:50:83:69:08:c3:bf:e4:15:82:d8:85:99:
         61:97:d0:7d:db:66:b2:56:c8:da:17:81:b9:47:09:5b:96:43:
         9b:78:f8:d2:9a:08:e6:36:f3:02:59:89:9d:b0:e2:b6:1c:79:
         27:5a:3c:f1:e2:c3:94:1a:73:e2:7b:ab:67:d1:06:fe:0d:70:
         58:db:22:67:8d:17:6f:32:1c:76:02:47:96:0f:46:fc:79:b7:
         2c:76:7f:8d:24:83:19:c2:e9:26:b2:e0:f5:d8:98:a8:4c:ee:
         30:02:93:72:0d:f4:48:2e:2f:84:3a:bc:e1:e7:5c:2d:60:6a:
         0a:5b:c2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org