Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/q_VfSTW1C7Z3G5cGrbRMbPkTUoM.roa
File:                     q_VfSTW1C7Z3G5cGrbRMbPkTUoM.roa (raw, json)
Hash identifier:          FDn/o1ZZVfWOpJh5C5/bhzyEZMKjL4XtNL0+HxQgiUU=
Subject key identifier:   AB:F5:5F:49:35:B5:0B:B6:77:1B:97:06:AD:B4:4C:6C:F9:13:52:83
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0125
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/q_VfSTW1C7Z3G5cGrbRMbPkTUoM.roa
Signing time:             Fri 01 Sep 2023 01:30:30 +0000
ROA not before:           Fri 01 Sep 2023 01:30:30 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     18134
IP address blocks:        219.100.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep  1 01:30:30 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=ABF55F4935B50BB6771B9706ADB44C6CF9135283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:2c:a8:57:ae:3f:88:cf:b1:93:c2:f2:4c:
                    f4:07:cf:6b:cc:ff:d6:6d:e1:3d:c1:2c:06:24:43:
                    4d:fd:3b:5f:9e:ce:b7:da:ee:5a:7a:d2:0f:85:f1:
                    d3:6f:c4:93:13:b4:29:75:50:02:b7:6b:3c:93:97:
                    10:2b:4f:cd:6a:17:92:a2:f5:91:b2:69:6b:ec:1c:
                    a2:f3:a2:5f:fa:54:0e:99:02:85:a2:1c:80:5e:b8:
                    5a:f6:7c:59:cc:cc:41:17:4f:73:cc:ac:cc:93:8c:
                    31:14:0f:0d:78:5d:79:39:72:8c:f9:6c:54:4d:9f:
                    e0:f7:9a:25:8f:a4:08:eb:9c:5c:50:72:8d:32:99:
                    00:99:b4:9b:fe:8b:1c:3c:4a:64:ed:08:8b:08:1a:
                    b0:94:15:5f:69:72:91:84:ba:62:96:58:96:3a:0e:
                    24:db:a9:5d:66:48:68:db:08:13:75:6b:6b:2f:ff:
                    44:a4:fc:45:01:88:73:4b:bf:5d:62:82:35:d3:34:
                    c9:a8:36:33:3b:51:27:44:8b:f2:7b:52:ec:ac:97:
                    dd:74:3c:6b:ae:76:ac:58:76:be:e9:ec:81:15:62:
                    d8:0c:36:ef:22:b3:c0:cd:f6:5a:3f:9c:25:e4:34:
                    c6:df:54:17:c6:78:18:6f:f8:8a:5b:23:e3:28:ea:
                    92:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F5:5F:49:35:B5:0B:B6:77:1B:97:06:AD:B4:4C:6C:F9:13:52:83
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/q_VfSTW1C7Z3G5cGrbRMbPkTUoM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d2:85:2c:59:2e:24:37:de:e5:9c:35:34:8d:93:3c:22:0e:b9:
         98:7a:5a:1a:bb:11:7b:93:c6:a6:6d:8d:03:e9:5f:0a:e5:07:
         50:8b:f4:b2:80:50:fd:70:ef:f7:c5:10:01:2e:8a:2a:f5:03:
         ff:45:41:30:2a:45:11:72:d2:20:f4:ca:05:6b:27:fb:a0:f5:
         0d:85:80:cd:1d:49:63:9a:a8:70:c4:35:24:a4:5e:f4:2d:5c:
         bd:7b:bf:bd:87:aa:c0:c1:11:8c:cd:26:1b:35:3a:a7:ef:6b:
         43:eb:84:20:d0:da:5e:45:36:18:77:f5:71:fe:e5:5e:9c:79:
         dc:ac:a4:8e:f5:81:a3:c4:b3:7c:21:3a:3b:bf:bd:84:94:51:
         1d:ec:63:ab:33:35:3a:d6:52:98:e0:86:d4:e3:54:84:00:58:
         cf:64:66:48:48:6a:7f:b7:cc:d2:3a:58:bd:8d:6e:7b:82:0f:
         f3:47:88:4b:61:ac:09:e7:59:04:57:19:3a:be:f5:da:8f:13:
         94:73:1d:a2:4d:6c:40:17:5d:20:c4:17:58:a1:9a:85:59:22:
         76:1b:3f:ea:de:b2:a9:d8:79:1c:39:8d:aa:6d:c1:95:e1:9e:
         44:62:f3:33:09:ad:b2:43:1b:dc:8f:9e:89:0a:6a:72:55:d4:
         3e:e5:ac:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org