Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/m3Uj3_j9GiyfqKdBP2VBveMy8JU.roa
File:                     m3Uj3_j9GiyfqKdBP2VBveMy8JU.roa (raw, json)
Hash identifier:          6MNbEnenx0v2GvTgEokvXx3sy8HMGY6rl8/apoy1AiE=
Subject key identifier:   9B:75:23:DF:F8:FD:1A:2C:9F:A8:A7:41:3F:65:41:BD:E3:32:F0:95
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01B7
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/m3Uj3_j9GiyfqKdBP2VBveMy8JU.roa
Signing time:             Sun 01 Oct 2023 01:38:14 +0000
ROA not before:           Sun 01 Oct 2023 01:38:14 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        219.124.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:38:14 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=9B7523DFF8FD1A2C9FA8A7413F6541BDE332F095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:60:9d:66:26:95:ec:c1:43:3a:0a:2f:ad:06:
                    0d:69:08:af:f7:5d:9a:74:28:4d:ce:f5:e3:fa:b4:
                    fe:b0:45:a9:a7:22:2b:22:98:eb:df:b7:a0:66:4e:
                    81:ef:88:29:26:72:f3:ba:9d:7d:04:87:87:7c:0f:
                    e3:97:a0:88:13:c4:b4:c4:33:d9:0a:12:49:4a:2c:
                    cf:2a:42:28:2c:f6:07:fb:e3:b1:a4:b7:f7:82:14:
                    be:fd:a8:5c:4e:d8:e0:04:95:73:51:d4:00:b7:48:
                    91:71:a0:0f:40:90:a0:bf:ec:b7:d6:10:d3:42:71:
                    d8:74:12:69:c3:51:fe:3b:4c:40:fa:06:3d:1a:06:
                    99:24:c2:70:5a:4e:72:7d:ad:26:ec:2b:bb:06:e7:
                    c8:60:4e:de:6e:3a:7a:00:03:c3:63:eb:bd:50:0a:
                    9d:2f:d5:3a:be:94:c3:f2:e2:0f:c4:97:1e:04:77:
                    6d:cc:e7:de:3c:b4:b9:e0:77:f1:2c:4e:02:ea:a8:
                    ef:d8:82:1f:97:fd:95:6e:32:66:5f:37:29:36:b4:
                    5e:02:c6:cc:59:51:8c:95:c8:81:f4:1e:31:b1:44:
                    04:00:1b:8a:3e:a8:dd:ce:d3:4e:f5:b7:06:3e:d4:
                    81:de:dc:03:84:d7:54:c1:86:ad:33:bb:bf:df:c2:
                    02:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:75:23:DF:F8:FD:1A:2C:9F:A8:A7:41:3F:65:41:BD:E3:32:F0:95
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/m3Uj3_j9GiyfqKdBP2VBveMy8JU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.124.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bb:0c:20:da:c4:86:6f:3b:16:44:d5:64:2f:0a:4d:a8:f6:ac:
         98:9c:8d:e4:b2:e0:b2:e0:5a:b7:22:a0:15:79:44:e2:d8:dd:
         d3:47:64:2c:ed:b1:c0:97:76:54:51:de:f5:cf:c3:5f:06:7e:
         ff:9a:f9:f1:e7:5c:d8:5a:db:52:24:2d:00:8d:45:88:5a:0b:
         ec:ca:31:fe:62:66:91:47:7a:59:25:d6:4e:e3:29:46:f1:66:
         d2:e5:a3:26:13:d6:8c:c3:cb:19:f3:cc:56:51:e7:e2:45:14:
         2f:0e:a1:5b:45:72:b2:d5:84:ed:82:86:e8:b7:d7:7b:7c:1a:
         dc:23:ed:eb:0d:dd:47:fa:9a:f5:3b:eb:9c:aa:8e:df:e5:8c:
         19:da:1e:68:ef:93:af:39:37:3c:a1:31:21:fa:62:5f:06:6d:
         80:ef:53:c6:14:21:50:5c:a2:71:5f:d8:4c:da:2f:e6:c8:01:
         21:9b:95:f0:33:4a:d5:c7:02:dd:12:61:a9:44:99:39:f0:aa:
         53:29:eb:49:75:37:e6:50:9f:87:ed:52:08:e7:04:da:f3:b9:
         70:c2:18:f0:f3:15:b6:2a:8b:61:7f:c5:22:cf:59:1a:1c:b9:
         f9:13:7c:08:41:13:da:40:79:18:19:56:d6:cf:7f:63:74:6f:
         05:b4:9c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org