Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/jVPqh303Bww1XGx1WuAXC6dkDwQ.roa
File:                     jVPqh303Bww1XGx1WuAXC6dkDwQ.roa (raw, json)
Hash identifier:          F9tvKmp+VsI/sKzcfSOhGEtvXJ0W+VgTkH62jsbICZU=
Subject key identifier:   8D:53:EA:87:7D:37:07:0C:35:5C:6C:75:5A:E0:17:0B:A7:64:0F:04
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       025F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/jVPqh303Bww1XGx1WuAXC6dkDwQ.roa
Signing time:             Sat 31 Aug 2024 01:36:44 +0000
ROA not before:           Sat 31 Aug 2024 01:36:44 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        119.161.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:36:44 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=8D53EA877D37070C355C6C755AE0170BA7640F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:08:3c:21:ee:39:d2:20:8e:9e:90:2e:d8:
                    0e:45:a5:e1:c8:5d:83:3a:9f:bc:a6:5c:d2:30:01:
                    54:fa:45:8d:ab:75:84:97:c1:d4:d4:23:6a:f7:dd:
                    2f:93:0c:12:1a:db:94:bf:f1:c2:12:c3:14:72:c1:
                    9a:c6:88:fe:07:07:5b:f5:36:d6:83:84:e0:e1:42:
                    60:ba:c2:1e:fa:c5:2f:a2:ba:d9:e1:b2:cb:e9:a2:
                    f0:2d:5f:bf:67:53:65:f1:b4:94:03:df:5a:5b:d2:
                    ee:5d:29:85:db:0f:fa:a1:b9:2e:0d:d7:ca:18:0a:
                    4d:fb:de:cd:e6:8d:b8:88:6b:77:4b:92:b3:30:54:
                    d4:22:94:4c:a3:95:c6:8b:2b:12:9b:b1:f2:eb:7c:
                    f5:97:4e:0e:5c:ac:27:12:99:be:2d:16:6f:71:98:
                    20:b7:fa:33:d8:e2:df:c9:96:98:b4:47:e0:f2:21:
                    58:e7:10:db:4e:c6:d9:9f:5b:03:aa:13:2c:00:8e:
                    39:15:36:31:e5:88:4f:04:da:3d:c9:0e:8d:58:f1:
                    3b:13:9f:f5:fc:53:dd:24:1a:7d:55:ef:b7:b7:97:
                    47:f3:f6:d6:2a:e2:22:67:2c:ee:0d:f9:37:53:2a:
                    b5:b5:f3:6d:2d:80:9d:6b:99:26:a7:62:6b:ea:e6:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:53:EA:87:7D:37:07:0C:35:5C:6C:75:5A:E0:17:0B:A7:64:0F:04
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/jVPqh303Bww1XGx1WuAXC6dkDwQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.161.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:d6:3a:9a:52:07:64:7a:4f:49:24:fe:d7:eb:cf:0b:e3:cc:
         70:3b:f4:95:c9:94:9b:83:86:69:fa:8a:ec:be:44:82:ba:00:
         31:e2:cd:5a:08:88:7d:d0:76:2b:d0:0b:7d:39:81:02:e9:66:
         33:d3:ae:88:a4:3a:84:85:5e:7d:24:bc:2f:f9:c1:9b:4e:d6:
         9c:8c:f8:19:7d:51:af:d2:a4:6a:21:aa:d1:5c:7c:6d:28:84:
         36:23:83:20:15:54:13:2a:3e:15:dd:02:bf:97:f9:ff:1d:80:
         51:5e:31:2e:6b:02:be:69:db:a4:68:83:1b:22:a0:dd:ca:cc:
         8e:06:2f:76:c1:0c:2b:1a:23:70:ea:cb:c8:a7:bd:a7:42:9c:
         04:92:90:3e:10:26:c6:d9:5c:0b:4b:2b:08:68:a5:f0:d6:15:
         e2:aa:55:1a:fe:5d:20:5d:f8:90:ca:4b:1c:ba:5a:06:f9:f6:
         e1:50:b9:81:14:12:4b:7e:7c:4e:df:50:3f:fd:28:b0:84:1b:
         e1:09:15:f8:34:b0:3b:1f:ae:d5:08:aa:81:be:5c:0f:e3:54:
         e7:fa:8f:9d:2d:37:e3:7d:55:11:a7:d9:7d:83:60:6b:4c:ef:
         00:1a:50:1c:a2:6d:a7:ff:80:19:60:2e:44:da:f5:7b:96:dc:
         37:7e:28:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org