Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/l1BLDxJSYG9q6o5LaRPtwarwM7s.roa
File:                     l1BLDxJSYG9q6o5LaRPtwarwM7s.roa (raw, json)
Hash identifier:          RSodDxtQvAb+3KlGRPx5gqnUSUxM7PlfOTOwpx4HT2M=
Subject key identifier:   97:50:4B:0F:12:52:60:6F:6A:EA:8E:4B:69:13:ED:C1:AA:F0:33:BB
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02D0
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/l1BLDxJSYG9q6o5LaRPtwarwM7s.roa
Signing time:             Sat 31 Aug 2024 01:43:03 +0000
ROA not before:           Sat 31 Aug 2024 01:43:03 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9617
IP address blocks:        218.220.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:43:03 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=97504B0F1252606F6AEA8E4B6913EDC1AAF033BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3c:a6:f2:9d:82:94:84:48:41:58:30:bf:fd:
                    be:8c:1f:17:77:86:b6:d4:06:a4:83:c8:03:95:72:
                    be:98:7a:01:1d:ca:4a:83:43:75:03:b4:32:2b:bd:
                    75:15:df:62:c1:6a:4d:63:80:5f:7a:76:5a:9b:d2:
                    d0:f3:1f:07:d1:76:4f:22:91:0c:a0:b0:be:f2:75:
                    7b:39:2e:31:89:fd:8f:57:d4:e7:cb:da:74:40:25:
                    e2:db:e5:a5:40:87:e2:db:74:bf:05:b8:75:14:13:
                    21:f5:16:4f:af:03:cc:36:bc:66:d3:04:6c:af:fb:
                    1e:59:6a:9e:f4:ff:87:06:e9:52:9c:af:e9:f8:e3:
                    69:95:67:66:1d:37:42:4c:a6:d8:27:6b:bd:44:12:
                    f1:b9:6b:d9:30:bc:30:7d:b2:39:63:3c:f9:d1:84:
                    15:d3:b8:43:9b:32:34:f3:9d:fa:ce:1d:82:d9:f0:
                    d6:28:22:56:85:0e:44:f2:02:97:3d:1c:3c:b1:c7:
                    47:e2:30:74:8a:4a:cd:a8:be:eb:fb:53:14:4d:21:
                    fb:1b:fd:65:7c:9f:34:0c:92:2b:61:d8:50:ad:ed:
                    46:86:2c:fd:e7:48:5c:7c:f7:e8:84:ff:ab:a3:45:
                    63:40:23:b2:38:67:30:68:3c:96:46:f1:80:16:ab:
                    2f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:50:4B:0F:12:52:60:6F:6A:EA:8E:4B:69:13:ED:C1:AA:F0:33:BB
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/l1BLDxJSYG9q6o5LaRPtwarwM7s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.220.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         87:07:e6:24:f4:53:a6:c4:7a:0e:12:46:e0:f3:c4:dd:7b:c7:
         94:78:cd:d1:37:1e:9a:cf:a6:62:40:ff:2e:c4:05:d2:58:d6:
         4e:f1:e3:f8:43:97:d3:e1:b5:c6:4a:1f:c2:ba:a2:35:73:1b:
         29:e0:e1:a3:d2:9c:ee:20:49:f5:6f:0b:c1:89:b3:3a:11:49:
         86:85:00:96:22:08:c3:49:69:40:a8:3a:34:1b:22:50:19:ad:
         74:ba:4c:59:29:83:c0:07:f7:ca:8a:66:0c:32:af:1c:73:e7:
         03:cb:e4:82:8d:77:a5:c3:15:c3:ac:0e:fe:bd:35:44:f5:77:
         3f:84:65:cb:c3:70:ff:bc:56:c6:fe:77:9f:f0:c6:a1:6a:fd:
         46:1e:22:8a:51:e7:1f:2d:2e:90:5c:d1:41:5a:6c:2e:92:d7:
         92:8e:1a:ee:06:55:aa:4a:a8:f0:eb:c6:72:a6:5a:73:92:96:
         13:1d:49:c3:01:9a:39:7e:55:e9:bf:23:a9:ca:f6:b1:59:6a:
         c6:97:45:7c:5a:64:a8:0b:2e:ac:40:b9:d6:27:12:00:21:3c:
         e4:2d:b3:9e:9c:9a:9e:41:1e:6b:81:d5:18:1c:ed:ef:d3:e3:
         d4:d7:60:78:2f:ea:eb:83:d9:a9:f2:8b:1a:33:df:1f:34:ad:
         f3:a9:30:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org