Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/oVEF1TS__dbAmntYQqi40gK7cvY.roa
File:                     oVEF1TS__dbAmntYQqi40gK7cvY.roa (raw, json)
Hash identifier:          uUJff9Ghp7u9VXK9t5xNHsKFOPk+wb6lxRj5wIDl5Lw=
Subject key identifier:   A1:51:05:D5:34:BF:FD:D6:C0:9A:7B:58:42:A8:B8:D2:02:BB:72:F6
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       017D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/oVEF1TS__dbAmntYQqi40gK7cvY.roa
Signing time:             Sun 01 Oct 2023 01:34:27 +0000
ROA not before:           Sun 01 Oct 2023 01:34:27 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        110.232.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:27 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=A15105D534BFFDD6C09A7B5842A8B8D202BB72F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e7:d1:fe:7b:1a:9f:f3:a3:ba:ac:e0:6b:f5:
                    a6:fe:b4:a8:cb:1f:62:7f:7d:b1:69:41:63:62:9f:
                    e5:8c:03:fc:a2:e9:fa:41:c6:99:c0:fd:29:35:65:
                    33:77:70:6b:6f:e5:dd:19:34:24:54:c1:e9:33:0c:
                    0f:a2:67:b7:73:a5:08:8a:66:31:52:56:1d:63:3f:
                    1f:36:b1:55:f6:7d:e0:a6:71:73:99:e6:49:34:e0:
                    63:94:28:0e:e6:69:ae:12:60:2f:9a:0c:83:9b:78:
                    4f:6d:08:a8:c5:87:af:a4:9f:5e:95:c6:0a:93:c9:
                    51:0d:12:94:a2:33:f3:b5:b2:a7:6c:6c:ee:2d:b0:
                    5d:cf:69:65:d6:1a:8c:7f:48:29:08:e1:5e:71:13:
                    60:34:e5:7f:19:b8:da:d2:bc:52:cc:31:59:2f:25:
                    53:b9:4f:ec:cc:1c:31:72:7c:85:43:55:92:26:c7:
                    14:a6:0d:81:9c:2a:9f:22:06:d5:28:39:0b:9d:74:
                    63:6f:83:ee:72:3a:d2:06:fe:fe:ac:3f:b9:5a:35:
                    68:85:8d:94:56:fd:6d:f2:e7:d8:84:a8:c5:0f:24:
                    72:89:f1:4b:22:6f:65:30:a9:42:67:97:a1:c7:35:
                    fc:28:15:80:48:49:6b:23:98:3d:3c:28:b5:16:fb:
                    7d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:51:05:D5:34:BF:FD:D6:C0:9A:7B:58:42:A8:B8:D2:02:BB:72:F6
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/oVEF1TS__dbAmntYQqi40gK7cvY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ad:e3:c3:4e:9d:73:c5:1b:b1:cd:2f:1f:f0:82:98:47:72:ef:
         27:cf:58:3f:70:ef:6e:8d:33:d0:1c:31:00:2b:75:34:5a:97:
         6d:50:18:68:49:62:31:d2:94:0d:b5:6d:1c:43:2e:ee:3e:ee:
         7a:0f:00:6f:0a:9f:f3:cb:0f:0d:84:ca:f7:3a:1b:2a:6d:97:
         96:8c:32:5d:d0:e9:fd:03:29:1b:53:38:3e:bc:8a:e6:b9:1d:
         27:2d:e4:71:d3:c5:bc:01:98:a6:de:5b:e6:4e:60:b2:59:a3:
         34:f5:b5:85:40:af:51:c6:f1:f3:af:f1:98:07:1a:48:01:b3:
         66:5f:8e:59:24:88:f3:b6:9f:b7:cf:b1:1b:80:b0:19:69:43:
         fd:47:d8:21:6d:35:e6:48:cc:34:4d:b5:56:1a:5a:d3:2a:f4:
         d6:f8:8a:72:74:37:21:59:51:ce:67:f8:a5:0f:d5:69:5e:81:
         ff:04:18:2c:28:65:04:82:ca:d9:55:52:fe:a1:91:aa:ab:7d:
         cb:d7:65:25:a8:c0:b2:ac:4d:32:07:0d:bc:f1:cb:2d:39:60:
         d9:1e:57:3a:f0:ea:29:50:70:66:6f:30:06:b8:d4:b2:15:a7:
         94:fd:b6:a1:93:76:c4:23:a2:a4:6d:76:7a:b8:7e:ee:67:c2:
         ae:a2:0e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org