Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/lC3Ip0pi0Jox25DUG83sKWH3YHA.roa
File:                     lC3Ip0pi0Jox25DUG83sKWH3YHA.roa (raw, json)
Hash identifier:          bdUncd574LtFTXSfekoTgZlCx3dxVyF93bxTi+AHGWs=
Subject key identifier:   94:2D:C8:A7:4A:62:D0:9A:31:DB:90:D4:1B:CD:EC:29:61:F7:60:70
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02AD
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/lC3Ip0pi0Jox25DUG83sKWH3YHA.roa
Signing time:             Sat 31 Aug 2024 01:40:47 +0000
ROA not before:           Sat 31 Aug 2024 01:40:47 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        219.117.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 685 (0x2ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:40:47 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=942DC8A74A62D09A31DB90D41BCDEC2961F76070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:41:ae:f9:01:b6:2b:b5:8e:c2:56:a0:be:5a:
                    84:b8:50:60:b4:88:c0:77:9b:28:1f:15:09:68:ba:
                    a9:58:2a:29:ad:f2:ee:98:49:c9:57:29:1e:a3:e9:
                    b5:f8:b6:f5:39:7e:bd:cd:f4:c5:76:2c:8b:3c:00:
                    79:34:64:b8:7e:b2:2f:90:cc:79:35:71:21:0b:9a:
                    6d:9a:b7:52:b6:d6:f9:23:d3:7d:ba:44:84:c0:57:
                    8c:2f:5c:53:f1:69:12:99:ef:1e:01:05:4c:78:81:
                    84:65:e0:c9:92:71:58:c4:ed:2c:46:b2:1f:d7:6e:
                    4d:3a:90:81:1c:8d:cd:e5:5c:0c:94:1d:c9:57:c6:
                    8a:76:f8:b2:d9:8c:04:7a:fd:74:8f:03:00:01:99:
                    80:12:16:e1:35:e3:03:7e:88:6a:26:b7:9a:e4:9e:
                    ba:1a:49:75:fd:7d:58:60:ed:b4:d9:d0:e7:87:42:
                    5a:a3:ee:e9:bb:4f:aa:cf:ea:a2:17:ea:a9:e2:e7:
                    5b:5a:26:f0:1b:4b:89:7c:e9:3e:03:a4:f3:62:84:
                    07:5d:6d:0a:2b:56:fd:24:b8:0d:d7:be:b7:e5:ab:
                    fb:7b:b4:b7:dd:1b:92:30:47:61:60:2e:7c:b8:7e:
                    53:5d:7f:32:01:40:c7:19:8e:18:e5:f1:28:fc:1b:
                    b3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2D:C8:A7:4A:62:D0:9A:31:DB:90:D4:1B:CD:EC:29:61:F7:60:70
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/lC3Ip0pi0Jox25DUG83sKWH3YHA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.117.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:e5:df:63:ea:2e:a4:05:18:00:49:13:5d:d8:d9:a1:b4:75:
         82:90:95:5f:f5:df:5c:fb:6c:41:d9:a4:28:09:ab:b5:7d:de:
         dd:f9:1d:25:15:0c:e8:b7:7f:7c:d9:f8:85:be:bf:3c:73:1c:
         cc:8d:d7:18:2a:02:0c:af:f1:a5:0f:62:21:bb:e2:04:88:08:
         aa:a8:d0:98:75:4f:71:6b:3b:a7:22:af:8a:4f:51:9d:81:41:
         7e:96:2d:28:68:26:bc:86:85:f4:9c:61:7d:0b:01:b6:3c:55:
         cd:dd:80:bb:4e:bf:34:d3:09:30:92:cf:82:08:ae:8e:d6:d8:
         cc:0b:a5:33:72:6a:48:67:50:5a:16:02:50:f3:e4:7f:4e:c0:
         3b:85:d3:40:56:5a:18:6a:96:54:ed:cb:24:e3:e1:9a:46:cf:
         ba:71:62:80:ee:74:6c:a3:f1:8c:04:44:62:26:a9:76:4c:9c:
         1b:2d:8f:a7:38:b8:b7:cf:8d:65:b9:f4:ba:81:fa:40:ec:a9:
         b4:fb:7e:e7:ed:34:1e:08:51:da:fd:97:49:06:6e:7f:6f:ca:
         14:32:95:b8:1f:b4:d5:45:36:9d:14:76:f4:e8:6a:70:71:fa:
         94:91:17:f5:a9:eb:2a:e5:b5:a4:d0:09:1b:f1:dc:32:29:e1:
         93:01:0b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org