Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/fNErgL9Us7AlmofqbuY40_WFUWg.roa
File:                     fNErgL9Us7AlmofqbuY40_WFUWg.roa (raw, json)
Hash identifier:          tgIGOPgZHKD2mkz8cItKguSLvGX/mILnZWTCp6aO8us=
Subject key identifier:   7C:D1:2B:80:BF:54:B3:B0:25:9A:87:EA:6E:E6:38:D3:F5:85:51:68
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02A3
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/fNErgL9Us7AlmofqbuY40_WFUWg.roa
Signing time:             Sat 31 Aug 2024 01:40:41 +0000
ROA not before:           Sat 31 Aug 2024 01:40:41 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        211.19.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:40:41 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=7CD12B80BF54B3B0259A87EA6EE638D3F5855168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d6:2d:c4:6d:90:10:ed:e5:43:06:1f:09:ef:
                    6a:f1:68:fd:9f:d7:be:81:f4:c2:92:6c:94:36:6a:
                    dd:f2:ec:c6:f1:85:6a:87:11:5b:b2:26:01:43:aa:
                    3e:0d:85:d8:04:e5:69:b8:41:e9:e5:35:fc:57:ce:
                    a1:cb:50:f9:cb:f1:cd:ea:af:98:31:59:34:d6:3e:
                    e6:ba:48:fd:06:d4:63:cf:e4:0d:26:d1:ba:bf:81:
                    78:2f:e1:a0:7e:af:c7:a1:f7:88:8c:02:23:bf:e7:
                    48:5a:f8:58:12:b1:03:64:fd:31:f8:9c:78:80:79:
                    ac:db:de:00:3a:ef:e6:93:41:0e:5b:3c:e2:19:df:
                    85:bb:b3:f3:46:24:0e:cf:d4:01:92:b2:77:f4:cd:
                    89:d2:9c:13:e2:35:8a:38:16:5b:97:ff:ae:35:06:
                    cc:fa:be:98:a5:1a:67:66:cc:b8:49:ad:5b:c8:15:
                    82:cd:37:5e:8a:82:88:a8:82:1a:30:77:58:1d:b2:
                    83:ea:10:8b:90:ea:bd:fa:e6:5b:71:45:ab:98:90:
                    f5:50:32:a9:15:c0:e9:92:c5:1f:47:57:5c:86:a7:
                    16:12:13:80:24:78:dc:43:6b:7b:fc:2a:e1:c2:59:
                    94:d2:55:a2:de:eb:11:5d:4a:10:b3:3d:c8:bb:a5:
                    fe:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D1:2B:80:BF:54:B3:B0:25:9A:87:EA:6E:E6:38:D3:F5:85:51:68
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/fNErgL9Us7AlmofqbuY40_WFUWg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.19.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ce:61:bb:0b:df:6d:ea:62:cb:2a:59:a9:32:71:ed:f6:70:22:
         fc:cd:9d:d6:c7:fe:db:ad:56:ae:59:8e:1a:d9:d8:04:85:ac:
         84:c4:6e:7d:b5:d2:b4:37:49:83:c5:d4:9e:07:32:05:c2:e6:
         8d:d7:34:31:fc:c8:4f:c5:d8:5a:3a:31:0d:55:0f:5e:2b:07:
         52:66:3d:27:d0:da:1b:72:6e:35:e7:87:74:f9:11:4a:70:32:
         29:d1:23:f7:c7:f8:2f:d5:07:89:fd:e5:c2:49:43:01:ba:7c:
         06:3a:1a:59:2e:9d:50:42:8a:b7:80:b2:c3:35:21:46:20:23:
         07:8a:f9:fc:57:fb:bd:8d:bb:1e:c4:ea:83:a4:c4:6b:1e:01:
         db:15:20:00:41:f8:5d:ea:92:9e:ae:20:99:15:71:e5:29:0f:
         18:f7:7d:52:51:ce:43:05:f5:dd:eb:3f:f7:ff:b1:16:d4:94:
         cf:03:48:40:c9:e7:fb:84:13:2e:d8:b1:77:4c:9d:fc:fb:ac:
         67:d3:fb:84:95:da:06:3b:60:05:e2:6c:89:24:44:64:0f:65:
         9e:d1:fe:d2:93:c1:1f:11:c0:0a:fa:90:3e:f9:85:82:6e:04:
         e1:c2:61:91:e8:40:60:18:f4:19:e9:49:99:57:24:8e:49:f4:
         53:d5:7c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org