Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/sIRKZY4y0zjYgel_V7LlY3lOpS8.roa
File:                     sIRKZY4y0zjYgel_V7LlY3lOpS8.roa (raw, json)
Hash identifier:          GBAhaacGZwkK7l1Di89DKP4NRLV4siTevCCGz3h7Qa4=
Subject key identifier:   B0:84:4A:65:8E:32:D3:38:D8:81:E9:7F:57:B2:E5:63:79:4E:A5:2F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0219
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/sIRKZY4y0zjYgel_V7LlY3lOpS8.roa
Signing time:             Wed 31 Jul 2024 01:29:13 +0000
ROA not before:           Wed 31 Jul 2024 01:29:13 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        111.125.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul 31 01:29:13 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=B0844A658E32D338D881E97F57B2E563794EA52F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:88:a7:72:39:d5:78:e9:f6:9a:be:36:c8:
                    ce:01:07:8e:10:ff:0a:56:57:25:e4:08:59:83:f6:
                    87:0b:a8:5e:e7:69:5a:98:ce:f7:42:a8:b6:04:70:
                    1f:73:6c:87:01:a4:4a:b0:48:4f:89:7e:8a:0b:aa:
                    ce:f4:b1:54:1f:f8:93:77:c2:3d:4b:38:1f:e0:5c:
                    9d:7f:d9:7c:1c:e3:78:46:64:cd:a7:da:c0:e1:ba:
                    01:cc:f8:1d:ad:29:bb:f4:20:e5:e3:0f:9c:9d:6d:
                    b3:77:80:f4:ae:46:16:36:be:17:b6:e6:34:9e:41:
                    07:ba:54:5e:b0:0e:bc:80:32:a6:76:e6:a7:80:18:
                    bf:d6:45:4c:c0:b3:15:90:f2:ec:ae:8f:4d:19:85:
                    b5:45:fd:54:f2:1f:77:99:a2:07:a0:63:64:c9:00:
                    9b:cf:a6:6a:c9:73:f2:95:81:eb:2d:d1:9f:3d:1a:
                    07:f7:07:6a:3d:e7:7a:d6:d2:41:25:12:ec:49:04:
                    cb:0f:05:4a:13:06:c3:89:59:ee:7f:29:38:a9:05:
                    0e:1d:2b:a3:10:0b:6e:46:8e:14:5b:21:f1:ad:82:
                    f5:1c:6e:df:2b:75:48:54:63:37:3d:e2:21:b4:e2:
                    07:88:09:8c:b8:5d:33:8a:35:fc:5e:b0:f8:df:7c:
                    20:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:84:4A:65:8E:32:D3:38:D8:81:E9:7F:57:B2:E5:63:79:4E:A5:2F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/sIRKZY4y0zjYgel_V7LlY3lOpS8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.125.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:1a:62:02:d3:db:64:df:8e:dc:83:c4:63:a4:93:37:9b:f8:
         00:d0:c8:01:7f:e0:1c:ad:c3:4c:f9:e7:78:ec:14:8a:33:ed:
         04:96:90:e0:e6:85:7c:87:4b:d2:e8:7c:b3:c4:2b:2e:ec:2a:
         a1:08:28:9d:82:9f:2a:12:2c:79:14:11:16:4a:3f:92:59:a3:
         7c:3f:b6:52:83:d5:a1:7b:99:ef:70:b1:4c:e0:88:b2:85:75:
         37:2d:20:fd:77:73:60:79:c4:a4:30:49:22:d1:fa:39:e5:97:
         86:45:33:75:4e:59:d0:70:2b:d3:05:75:62:e2:b5:45:a7:0e:
         29:55:c6:f8:ad:e8:04:44:cf:03:dc:64:15:31:d1:4c:94:00:
         d0:2e:16:51:7c:4a:04:f5:dc:e3:63:41:b1:5e:ff:8e:8c:b2:
         97:3e:68:98:96:1e:f4:17:c3:bf:f9:11:37:c5:f7:39:59:4d:
         54:f5:e9:cb:79:b0:d2:e0:39:78:e4:cf:c2:6f:26:2b:a6:b8:
         b8:7b:97:85:d0:fd:78:ef:c1:41:20:bb:a2:c1:6a:7d:96:31:
         ad:29:04:74:75:6e:ab:e4:86:a9:47:7f:b8:b7:ee:cb:3b:05:
         9c:06:ef:e5:d9:dc:85:5c:79:93:7f:ca:8c:d3:b2:43:eb:cd:
         9e:1f:61:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org