Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/i9G0HbtlGSgWa_u7tiP7KaqAGuY.roa
File:                     i9G0HbtlGSgWa_u7tiP7KaqAGuY.roa (raw, json)
Hash identifier:          XiAYMtcj7DFLsi2jAYTDiQUuirBD7VoYx+zmX2i64c0=
Subject key identifier:   8B:D1:B4:1D:BB:65:19:28:16:6B:FB:BB:B6:23:FB:29:AA:80:1A:E6
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02BF
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/i9G0HbtlGSgWa_u7tiP7KaqAGuY.roa
Signing time:             Sat 31 Aug 2024 01:42:56 +0000
ROA not before:           Sat 31 Aug 2024 01:42:56 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        61.192.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 703 (0x2bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:42:56 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=8BD1B41DBB651928166BFBBBB623FB29AA801AE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c0:f3:b8:5a:89:77:03:9a:30:0e:5e:81:bf:
                    ea:da:cc:ea:16:af:12:01:5f:f8:0c:43:5e:fe:30:
                    74:5a:40:a4:10:dc:6c:7a:e4:0c:34:01:b7:f6:38:
                    cc:08:9f:bf:e2:d2:56:19:66:fa:52:e7:fa:55:78:
                    cd:68:f5:bc:15:4a:66:5f:7f:35:ea:d1:86:7e:11:
                    a2:56:90:70:f8:03:31:4d:fb:40:4e:0d:3d:a2:60:
                    10:27:b8:4d:8b:7b:dd:22:7d:03:5f:dc:52:b1:30:
                    0a:9e:95:72:d0:cb:8c:d1:8b:3d:a4:3d:b9:77:5a:
                    4f:e7:5d:8f:04:a6:5b:24:f3:c4:55:4c:77:e9:8f:
                    53:87:32:8e:99:2f:0d:7a:f6:f7:02:fa:12:33:23:
                    fc:09:94:7f:45:f9:b9:ff:43:cf:5f:c4:c8:58:a3:
                    f4:df:f6:c8:a4:37:b0:7d:3e:c0:16:2d:4e:28:d5:
                    fe:0b:f5:ad:ca:55:ba:1a:f2:4f:ed:51:96:4b:dc:
                    3a:5d:7b:b2:b4:db:03:09:bd:7f:fa:d9:ed:0f:29:
                    3d:3d:0f:81:75:8c:28:2b:52:86:80:c7:c9:16:6b:
                    19:96:cc:84:95:cf:3c:a5:1f:9a:a1:0c:9c:8c:19:
                    08:24:ac:35:8f:8a:e8:48:2d:0e:bf:c6:c3:90:b9:
                    28:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D1:B4:1D:BB:65:19:28:16:6B:FB:BB:B6:23:FB:29:AA:80:1A:E6
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/i9G0HbtlGSgWa_u7tiP7KaqAGuY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.192.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         e9:0f:74:14:4e:63:4b:63:db:f4:66:ab:02:88:7d:c2:b9:b1:
         cb:ee:ed:7f:9b:44:9d:61:4f:b6:fc:b0:c2:2f:76:12:51:cc:
         eb:f4:2c:77:0d:e2:a0:f4:d7:cd:55:11:ae:33:bb:03:e8:16:
         c0:05:c4:55:8f:6a:06:d3:97:de:28:e3:e5:17:86:b6:ff:3f:
         eb:19:32:98:79:88:1c:0b:f0:22:64:18:77:32:c2:8e:bd:4f:
         86:3d:9c:d5:40:13:bb:9f:fd:b2:c2:ce:53:b0:b3:b4:c8:c4:
         78:de:5e:ef:12:92:9b:46:9a:fc:b5:cd:c6:39:d9:2c:39:e6:
         97:4e:57:87:22:c3:f2:11:26:a2:86:b3:d9:cb:ae:e8:71:12:
         c3:fc:c6:5e:e3:eb:19:75:fa:cf:38:8c:9a:e3:16:02:a4:07:
         4d:17:2e:ef:3a:f6:a7:80:4c:99:93:dc:6e:2a:1e:0f:08:58:
         3b:8c:e8:05:c2:f6:56:58:e3:55:ee:23:1b:eb:91:5d:9f:d0:
         0d:91:a8:d5:ce:cd:37:a5:8d:a3:81:1a:c2:f8:bb:46:90:d7:
         31:6e:01:f1:be:da:c6:64:d5:35:8c:8f:51:d0:60:00:76:ce:
         87:97:78:94:7d:a9:81:1f:b3:ec:22:c7:71:da:0e:86:cd:f5:
         71:af:eb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org