Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/dO67j8dg6IJq_AynDjhrcYsedMA.roa
File:                     dO67j8dg6IJq_AynDjhrcYsedMA.roa (raw, json)
Hash identifier:          HsJxfgeHGVCvy+xh7ij8DH03xwUYJSft8s4eDD44YY0=
Subject key identifier:   74:EE:BB:8F:C7:60:E8:82:6A:FC:0C:A7:0E:38:6B:71:8B:1E:74:C0
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0280
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/dO67j8dg6IJq_AynDjhrcYsedMA.roa
Signing time:             Sat 31 Aug 2024 01:38:53 +0000
ROA not before:           Sat 31 Aug 2024 01:38:53 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        114.198.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:38:53 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=74EEBB8FC760E8826AFC0CA70E386B718B1E74C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:12:ab:bd:2c:5f:47:70:f3:79:a8:29:e9:59:
                    4b:54:1a:ed:8f:00:cd:3c:1e:2f:77:6d:f5:0f:ca:
                    c9:5a:71:6e:f4:0b:08:13:d3:9e:6b:d4:c6:5d:2b:
                    e8:60:50:aa:1a:a5:dc:c5:96:ed:bf:8a:9c:77:55:
                    a9:ce:8a:1a:8c:e7:0c:59:99:f1:4c:4f:5a:39:58:
                    30:de:ce:a6:45:f8:33:3d:cb:e9:d4:3b:20:c8:c6:
                    33:3f:a3:53:58:9d:da:d8:27:7c:08:a6:30:5f:04:
                    0b:e1:32:8b:08:60:2e:90:d7:f8:c3:4a:f7:0a:d8:
                    e0:19:a1:61:ac:94:d1:19:9a:97:9e:c1:f8:df:73:
                    bb:28:ea:75:18:5c:33:d0:e9:67:7d:6e:dc:ae:bb:
                    f7:0a:93:98:9f:17:74:62:ea:90:25:d9:1f:b4:ac:
                    37:fa:4a:20:5d:2e:43:cc:d4:7e:6e:d1:ac:4e:32:
                    92:20:26:43:80:8a:39:0a:f6:8f:58:be:a7:0b:70:
                    86:dc:26:0b:81:c2:2a:21:dd:1c:ac:cb:a0:41:16:
                    4a:14:41:b8:b9:1f:9b:4c:ed:1e:bf:39:24:cf:d9:
                    cd:ce:f6:86:f9:f0:29:d5:fd:38:05:ca:b4:d0:10:
                    e5:37:c3:4e:84:a2:b7:11:13:b1:8a:99:10:81:21:
                    b8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EE:BB:8F:C7:60:E8:82:6A:FC:0C:A7:0E:38:6B:71:8B:1E:74:C0
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/dO67j8dg6IJq_AynDjhrcYsedMA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7a:33:1e:f5:54:3a:ee:f8:39:8c:65:86:f9:5f:27:fe:a0:31:
         e7:f0:b5:5b:fe:d2:0c:2c:33:e9:1f:cc:5f:20:e2:d4:f2:31:
         ee:f7:3f:d8:4d:48:53:83:3b:83:f8:a2:a1:a9:87:d9:64:eb:
         46:42:72:c7:5a:0b:25:20:c6:c8:c4:14:5c:f9:64:d0:76:99:
         a9:10:75:b7:73:95:84:7c:ae:69:0a:37:48:27:80:7a:26:da:
         34:ec:e7:79:76:2b:a6:5c:54:a1:04:0d:d9:49:6a:43:ef:b4:
         10:a0:68:67:1c:1d:bc:e1:13:15:6d:66:14:0a:3d:fa:0f:d9:
         71:0f:41:9c:07:4b:d8:59:eb:28:1c:22:ee:c9:b0:34:1a:ef:
         8d:49:a9:ca:c3:0e:51:43:46:2f:b8:5d:05:10:ab:78:37:4c:
         b9:a7:93:1a:4c:ab:4b:cb:81:71:60:4b:34:bc:fb:38:5c:da:
         26:36:ce:c8:10:9f:84:78:4c:de:8a:de:f5:fe:7e:a5:96:e8:
         b3:58:c2:8d:71:a1:8e:f2:b5:d6:2a:22:9b:85:86:a9:1c:52:
         7e:73:55:2a:53:f2:97:6d:8c:0c:d9:e8:ce:ff:04:de:9d:64:
         fd:fc:05:ff:d7:bf:4f:42:c2:f8:6e:9a:7d:02:11:db:e1:72:
         ee:02:a9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org