Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/encVZ49gLZ49t430a8svY0YtQvk.roa
File:                     encVZ49gLZ49t430a8svY0YtQvk.roa (raw, json)
Hash identifier:          JcC8VLdgM8/fWZDEWoUirwVEnpMCJ2+6LdNxhuiKjH4=
Subject key identifier:   7A:77:15:67:8F:60:2D:9E:3D:B7:8D:F4:6B:CB:2F:63:46:2D:42:F9
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02C9
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/encVZ49gLZ49t430a8svY0YtQvk.roa
Signing time:             Sat 31 Aug 2024 01:43:01 +0000
ROA not before:           Sat 31 Aug 2024 01:43:01 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        125.4.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:43:01 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=7A7715678F602D9E3DB78DF46BCB2F63462D42F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1b:26:d3:87:b5:6b:5b:a3:ba:41:3f:e1:c7:
                    9e:b9:2d:e1:54:f5:a9:df:ef:88:78:49:5a:29:91:
                    33:7b:9d:ef:d9:97:02:81:e6:b0:c9:79:6d:d2:a7:
                    69:28:c3:3b:5c:28:c1:6b:c0:20:63:64:03:e3:f0:
                    bf:38:33:9e:61:a8:2a:7c:09:38:c0:ae:f5:1d:f2:
                    9c:a6:01:fb:1e:45:cb:88:d4:c1:71:9e:a4:61:ba:
                    94:c3:35:d9:96:f8:14:3c:99:af:c3:ff:ed:79:e1:
                    89:46:07:59:5c:c4:6a:47:20:6a:d7:7a:ca:7a:c1:
                    f6:aa:84:fb:c8:c2:0a:b7:60:8f:5d:10:f2:c9:30:
                    0e:6d:ce:93:1c:07:2d:92:52:17:e0:7a:fd:9a:43:
                    ff:a9:72:d2:86:2c:a0:23:46:44:9d:e8:8f:05:ae:
                    b2:f1:9d:3a:a8:aa:2c:4b:b1:ca:15:04:72:74:f9:
                    cf:a6:ac:df:7c:a3:4d:0f:ad:57:c2:a4:d6:69:6e:
                    28:59:3a:c3:e9:71:36:47:3f:e0:fb:fa:09:ee:ee:
                    6c:78:0d:7d:2c:88:b0:b2:4c:3f:7c:f1:93:2c:40:
                    7e:df:6b:b4:b0:9b:e5:f1:59:6e:8d:68:d3:9a:11:
                    29:b4:a9:b4:bc:49:26:89:9e:59:55:5a:cd:bd:4a:
                    79:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:77:15:67:8F:60:2D:9E:3D:B7:8D:F4:6B:CB:2F:63:46:2D:42:F9
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/encVZ49gLZ49t430a8svY0YtQvk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.4.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5a:92:18:78:f6:ac:5c:4d:1f:f7:fa:39:ab:cb:50:fe:89:cd:
         03:77:3e:85:fe:1f:30:e9:95:f8:e9:4d:e7:62:a9:5c:06:bc:
         83:15:37:fb:e9:4f:6f:22:4f:4b:fd:d1:bb:0a:50:79:24:1c:
         13:9a:25:2a:7b:54:69:77:7d:50:0e:c9:f5:a1:fc:e1:d7:a8:
         15:98:3f:fe:e1:b4:37:4c:7d:db:08:db:15:f3:8b:6c:98:42:
         70:f3:5f:15:42:5b:a7:88:64:a4:d3:61:df:3d:2c:63:f6:07:
         23:c9:62:43:19:f5:79:a8:4b:38:ff:7d:9a:b3:59:f3:ea:b7:
         d6:b2:2b:1c:7f:15:69:e5:ba:f4:5f:0b:4f:8e:43:a6:a8:44:
         4f:c2:dd:6f:11:ba:75:82:eb:5b:1e:95:ae:c3:d0:2b:3d:3c:
         61:56:8a:02:43:82:9c:93:7e:12:e8:08:b7:d3:38:d7:b4:d3:
         18:93:c5:b8:08:d1:2b:cd:bf:70:c2:c9:39:3c:0c:1a:a6:0b:
         2f:58:78:db:b7:b5:51:46:b9:8d:58:a7:11:8e:c5:88:1d:a2:
         b8:93:d6:2b:dc:67:d5:63:aa:61:22:ec:bc:d2:5b:f6:51:eb:
         91:07:bc:a0:c9:ae:e0:d8:d3:e4:bb:b3:cb:f4:0e:0c:17:d3:
         4a:00:cb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org