Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ioXiJU8gXOf92KuImlXLab5rmmY.roa
File:                     ioXiJU8gXOf92KuImlXLab5rmmY.roa (raw, json)
Hash identifier:          oJKfpZI3ufIWWZnjdK24TnrPeAacx3XHHOWSvWRVpbM=
Subject key identifier:   8A:85:E2:25:4F:20:5C:E7:FD:D8:AB:88:9A:55:CB:69:BE:6B:9A:66
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0279
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ioXiJU8gXOf92KuImlXLab5rmmY.roa
Signing time:             Sat 31 Aug 2024 01:38:50 +0000
ROA not before:           Sat 31 Aug 2024 01:38:50 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        113.52.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:38:50 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=8A85E2254F205CE7FDD8AB889A55CB69BE6B9A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:cc:1f:6d:3f:0d:6e:96:17:6c:55:0a:81:
                    ba:fe:ec:b7:6e:61:30:a4:8c:b3:42:1e:bd:43:85:
                    5c:fd:ef:a1:ab:fb:5c:a3:61:04:af:63:ae:1a:60:
                    0d:ff:e0:4f:18:83:16:1b:0e:79:6e:f4:00:44:18:
                    e3:e2:3a:78:e7:ee:64:5d:64:b5:5b:7a:14:b9:2f:
                    9b:10:62:7b:1e:49:ec:18:be:99:52:e0:7c:1a:4f:
                    97:18:c1:d0:9f:4e:bd:ae:58:84:35:5a:64:ec:84:
                    3a:3d:25:85:a4:bd:96:7f:29:a7:07:26:d4:2f:1e:
                    66:99:97:a1:fd:a0:df:c6:0e:47:af:f6:5b:ae:e4:
                    e8:84:73:35:6e:76:b8:39:f8:14:56:be:16:94:e0:
                    89:77:e1:e3:bf:6b:6e:02:ad:ab:7f:55:61:cd:52:
                    b9:e9:1a:31:35:02:80:ee:d1:11:ce:19:9c:90:5e:
                    76:90:a5:eb:58:89:26:b7:93:fc:d6:96:4b:38:f5:
                    03:41:a6:50:2a:e1:66:9e:94:a9:fc:ae:ee:d9:5a:
                    a4:05:fb:3d:1c:1a:f3:3c:b4:b8:8e:5d:c7:f4:da:
                    e8:f6:c0:e3:0e:be:8c:52:f6:85:86:5f:1d:6b:fc:
                    f5:e2:b6:e8:9e:03:11:11:52:54:d7:38:0e:a5:47:
                    1f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:85:E2:25:4F:20:5C:E7:FD:D8:AB:88:9A:55:CB:69:BE:6B:9A:66
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ioXiJU8gXOf92KuImlXLab5rmmY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.52.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c4:a7:66:8a:bb:84:66:ef:b4:0c:63:f3:4b:7d:4d:08:7d:96:
         cf:ec:60:68:00:ca:5e:74:59:35:07:86:b2:81:08:19:f4:58:
         1a:8d:dc:5d:ce:06:a0:69:da:85:dd:78:da:d9:72:0f:b1:47:
         8a:e0:36:f6:5c:ab:0b:73:66:6e:d4:00:77:df:7e:33:0c:93:
         ff:b2:e9:77:ee:74:8b:c2:89:61:42:3e:26:5b:b6:24:3d:d9:
         ca:58:46:42:80:37:27:c2:2a:93:da:d8:16:e0:85:b7:62:ab:
         fd:5f:af:c3:1b:c7:d2:d8:cd:be:87:9a:2d:69:c6:f7:8c:f3:
         59:d8:80:10:2f:ae:22:bb:3a:d2:31:88:ce:00:23:6b:5e:e8:
         c1:db:d3:6f:e1:a3:c2:3b:cb:f3:d0:e1:3e:29:0e:b7:06:5d:
         e9:21:e3:b4:f4:47:0e:97:e8:6c:3f:81:83:7f:39:c7:29:3a:
         d7:d3:6a:71:23:46:55:6a:d6:8e:0f:d7:80:04:11:e5:00:30:
         78:2e:bb:56:2f:f4:c6:18:ef:c3:91:58:9f:5c:0d:56:65:b1:
         6d:59:da:ca:d1:d8:d6:ee:30:25:bc:31:25:5d:6d:58:04:6a:
         a1:54:3f:49:bc:ff:c5:0b:68:dc:b9:a7:3a:7a:82:f8:ca:1c:
         14:6d:a9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org