Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/m4Zx0gq_c2p853hCzaIkuk65J0s.roa
File:                     m4Zx0gq_c2p853hCzaIkuk65J0s.roa (raw, json)
Hash identifier:          OUDHW51/JErObW3TCyNrKeDENubIkQ0sKv8hPEudHxk=
Subject key identifier:   9B:86:71:D2:0A:BF:73:6A:7C:E7:78:42:CD:A2:24:BA:4E:B9:27:4B
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02D1
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/m4Zx0gq_c2p853hCzaIkuk65J0s.roa
Signing time:             Sat 31 Aug 2024 01:43:04 +0000
ROA not before:           Sat 31 Aug 2024 01:43:04 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        218.220.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 721 (0x2d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:43:04 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=9B8671D20ABF736A7CE77842CDA224BA4EB9274B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:c9:76:d8:b5:38:09:98:15:a3:6c:51:e3:
                    fb:13:2c:28:b8:83:c0:d2:28:e4:cf:d9:0e:dd:d3:
                    3e:bf:03:ba:cd:95:7c:e0:27:24:7b:8d:74:72:a3:
                    56:39:c8:0a:6a:0d:4c:1c:45:08:fd:53:9e:28:14:
                    a7:24:62:a1:f1:79:ff:28:36:e7:36:84:fe:41:a9:
                    6d:3c:fe:28:a5:ca:32:90:bf:9b:f0:06:f0:fd:b2:
                    9f:9b:24:19:e3:d6:de:4b:6e:05:2e:60:0a:67:ee:
                    1c:0a:ea:5f:50:a8:03:08:11:a4:a2:2f:6f:9f:66:
                    da:88:70:d5:8a:3e:a2:1c:37:03:99:a0:b0:8c:7a:
                    49:1c:42:13:27:3d:ca:57:10:a3:07:8a:a5:d7:9d:
                    44:52:aa:53:b8:e6:25:b9:5b:bc:e2:46:a4:72:dc:
                    5b:70:15:ec:60:bf:a6:27:64:ce:06:8c:87:d4:8b:
                    37:3f:02:e5:95:2b:89:85:99:7d:cd:ad:f2:6a:2b:
                    37:dd:61:12:de:f4:1f:33:04:cf:c9:0b:30:c1:2f:
                    f0:42:b2:53:6e:7b:7d:35:af:9d:c7:9a:4a:7a:70:
                    d8:ba:94:e5:c7:a8:de:ec:26:2a:48:ec:a0:22:2f:
                    b7:dc:c9:4f:52:87:46:6c:e7:cf:d6:ef:58:5f:12:
                    75:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:86:71:D2:0A:BF:73:6A:7C:E7:78:42:CD:A2:24:BA:4E:B9:27:4B
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/m4Zx0gq_c2p853hCzaIkuk65J0s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.220.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a1:a6:cb:c5:9b:5f:2a:7f:5c:4b:5b:7f:15:82:d0:88:ed:f3:
         46:82:ef:24:20:c0:39:7e:6a:ca:9c:48:df:cc:e1:df:b4:69:
         8f:cb:c3:11:04:9f:87:06:51:8a:67:e0:c9:e1:26:87:0d:42:
         97:85:3d:f5:e4:21:4c:bd:ab:19:61:15:ee:75:6f:28:d6:78:
         8c:19:2e:a8:c5:28:dc:1a:64:d1:8a:c7:3c:5b:9f:ab:15:c6:
         c3:d0:3a:dc:98:68:ff:ef:37:3a:ee:f6:d5:e9:27:b7:93:3d:
         1b:da:1d:bc:73:80:70:8e:fd:f5:36:72:80:12:40:1c:95:22:
         9e:9c:c1:9c:bf:1e:97:94:0e:37:e5:5d:32:f0:03:2b:73:6b:
         a5:09:b7:2a:ab:ff:e0:85:5e:db:d5:24:33:21:a7:33:fb:b9:
         04:02:3f:bc:2e:ba:ff:47:e9:81:c6:b0:82:5f:ef:ae:9a:c7:
         b0:e5:aa:74:8e:49:8e:4a:78:b2:85:0c:d1:58:65:29:97:40:
         61:25:6d:4c:bf:02:90:54:db:d0:c8:21:c1:86:af:73:32:f7:
         9b:da:dc:7f:5c:4d:f7:46:40:64:4c:63:57:2e:41:6a:f7:7e:
         a3:11:aa:2c:71:1f:38:53:e2:00:52:53:0b:04:cb:7e:3c:9d:
         df:bc:e9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org