Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/mIrAW4oD8wJU7bDi1vMm0XEoUnk.roa
File:                     mIrAW4oD8wJU7bDi1vMm0XEoUnk.roa (raw, json)
Hash identifier:          2cIWTsSKFYkTGkXngVM1daxL0NRHY269iBzFll2QKrw=
Subject key identifier:   98:8A:C0:5B:8A:03:F3:02:54:ED:B0:E2:D6:F3:26:D1:71:28:52:79
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       016E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/mIrAW4oD8wJU7bDi1vMm0XEoUnk.roa
Signing time:             Sun 01 Oct 2023 01:34:22 +0000
ROA not before:           Sun 01 Oct 2023 01:34:22 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9617
IP address blocks:        61.115.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:22 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=988AC05B8A03F30254EDB0E2D6F326D171285279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:13:92:47:5c:bc:45:a0:7d:27:1c:e6:94:8c:
                    ff:12:8c:38:22:63:0b:82:ab:39:7d:9a:9d:65:d5:
                    5a:17:89:f6:66:75:f4:e6:02:0d:1e:0b:43:17:53:
                    28:ca:07:f8:9a:34:0f:23:3b:50:7a:56:14:97:10:
                    21:8b:1a:84:98:05:6c:8f:20:5f:6f:6c:9d:af:1d:
                    1c:ed:29:c6:fa:84:58:35:12:42:6e:a8:7b:82:2a:
                    4e:ab:28:3d:91:33:80:54:c3:2e:a2:55:c9:fb:a9:
                    96:d3:d8:da:3c:6c:5c:91:98:da:a5:1f:f2:32:7c:
                    c8:de:26:2e:fe:c6:8a:25:e3:0b:82:d3:20:b4:72:
                    71:64:3f:6b:65:a9:51:7c:c2:07:1b:c4:0f:23:38:
                    b1:a1:df:47:6b:08:31:20:46:a1:a6:67:84:aa:0b:
                    2f:76:d0:cf:40:3c:f1:cc:bc:8e:1f:f1:e1:ba:62:
                    51:49:1c:3d:6e:a1:3a:11:af:a7:cd:92:0c:bb:ea:
                    ac:e2:3f:10:02:61:b5:b8:74:63:1c:44:35:61:8f:
                    30:53:12:49:0e:13:9c:e6:0d:fe:9a:5c:e9:3d:64:
                    69:a4:e3:08:3c:d2:62:e3:ff:6f:39:89:21:52:3d:
                    38:0a:1e:82:c6:46:75:22:2a:4b:16:79:cf:ab:0b:
                    92:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8A:C0:5B:8A:03:F3:02:54:ED:B0:E2:D6:F3:26:D1:71:28:52:79
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/mIrAW4oD8wJU7bDi1vMm0XEoUnk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.115.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c1:3e:0a:ec:ff:4a:46:c1:b4:d2:ea:dc:27:3f:98:98:9c:ba:
         d2:37:77:59:ca:a0:9d:c4:1f:00:b0:50:5b:c4:ae:ab:2c:bb:
         e6:7c:12:6c:e5:c7:84:5a:b3:37:fe:b9:60:88:da:0d:8f:0e:
         e7:7e:c9:79:29:60:9d:f5:ef:21:0a:8e:a2:49:7d:7d:83:5b:
         c2:48:8f:d9:ea:b1:85:c4:64:6e:af:a2:81:54:76:6e:45:5e:
         05:27:ea:b6:3a:d5:b7:83:35:c0:cf:33:c2:c3:0a:72:14:ce:
         4b:e5:c4:2c:c7:87:fb:36:85:ea:da:3f:3c:56:38:dd:dd:de:
         bb:b9:c4:b0:a4:28:b3:06:40:27:53:58:f8:22:cf:45:99:f9:
         53:90:1a:80:b6:a7:d5:69:fc:55:66:be:86:ba:85:7b:8d:ab:
         b7:96:37:3e:a5:33:01:d0:04:59:da:a3:ac:18:cd:a9:47:05:
         81:02:5f:7c:88:ce:30:bb:cc:6d:95:dd:eb:36:04:1c:c1:8f:
         2d:9a:f6:c9:be:2a:8f:a8:87:58:62:d1:3d:b8:e4:e5:3e:f3:
         26:58:84:3f:ad:72:a1:8a:f0:39:d7:a3:2b:9f:81:60:d9:34:
         29:09:56:34:11:1d:0f:3f:47:33:09:0e:36:b1:9c:eb:b4:71:
         5b:72:6b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org