Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/wM-KxTjSNHWxTZCmNJd_x2W4-j4.roa
File:                     wM-KxTjSNHWxTZCmNJd_x2W4-j4.roa (raw, json)
Hash identifier:          aqIzLcBUPtp7WDywHqzwScYF8eZf4WhY4+f1qPQfDGQ=
Subject key identifier:   C0:CF:8A:C5:38:D2:34:75:B1:4D:90:A6:34:97:7F:C7:65:B8:FA:3E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0162
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/wM-KxTjSNHWxTZCmNJd_x2W4-j4.roa
Signing time:             Sun 01 Oct 2023 01:33:05 +0000
ROA not before:           Sun 01 Oct 2023 01:33:05 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     23788
IP address blocks:        202.148.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:33:05 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=C0CF8AC538D23475B14D90A634977FC765B8FA3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1d:22:34:a7:ad:f9:14:71:3b:48:6d:ec:74:
                    b6:05:9b:f6:f7:b1:0d:07:fe:a0:72:6b:94:45:81:
                    3a:f5:85:70:c8:db:bc:5e:a3:2b:92:7a:a1:71:45:
                    3f:35:84:3b:3a:36:d3:87:86:6e:18:01:a1:6c:36:
                    bb:7b:22:39:54:e1:49:3e:4e:97:89:f2:21:ad:1a:
                    e0:b7:59:66:01:66:79:c6:00:4f:82:40:e4:e0:21:
                    be:a5:a6:c5:e7:3d:33:5d:6d:6c:4f:8d:b6:eb:7a:
                    8c:ad:36:d7:ec:a1:ef:ef:b4:5b:0a:d0:47:40:da:
                    f7:b4:e1:db:f4:1e:a2:c7:48:6e:94:50:e7:1f:91:
                    da:a0:60:b7:7a:be:9b:3e:1d:28:2f:c2:b5:36:4d:
                    fd:d8:3e:ee:eb:7b:22:92:f3:05:5a:9c:81:b4:e8:
                    c5:a0:fb:dd:7d:66:29:c4:55:21:1b:3b:fe:e0:17:
                    9f:c4:44:cc:4f:ae:9f:49:f5:80:3e:35:71:bb:5b:
                    de:cd:17:a5:15:8f:9e:08:61:36:57:9d:31:dc:24:
                    25:69:a4:8c:b7:38:f7:0d:29:c9:37:88:06:cf:04:
                    df:1f:c9:3e:c4:b3:b3:19:23:81:8e:c8:b7:02:0d:
                    c3:e3:b9:dd:ac:e4:19:28:d2:2d:83:41:4d:79:8a:
                    3b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CF:8A:C5:38:D2:34:75:B1:4D:90:A6:34:97:7F:C7:65:B8:FA:3E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/wM-KxTjSNHWxTZCmNJd_x2W4-j4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3f:3c:45:36:d2:d7:f6:35:90:99:c9:da:d8:6c:15:4f:84:48:
         d8:38:73:ac:e1:bb:85:5d:36:6f:12:5e:3f:26:0a:18:70:7d:
         3b:08:cf:a2:78:ee:d5:8b:fc:e8:79:f4:2b:ad:7f:76:c0:4a:
         70:a1:a1:9a:8b:16:d1:c8:d0:1a:29:ca:a1:11:f9:99:df:b2:
         71:d0:a6:28:e1:9a:53:89:24:a4:ad:2f:60:f8:da:07:43:0a:
         aa:92:23:d1:9d:e0:f4:a9:7c:c1:23:d7:e6:f7:db:17:bd:02:
         68:c9:67:02:df:e3:ff:79:eb:90:21:58:c5:41:09:d6:d6:b8:
         ad:b8:cd:c5:59:ec:23:ae:85:f1:80:d7:8b:49:df:8e:c6:4a:
         f2:65:43:28:0c:cd:e9:d7:20:a3:d4:d2:43:bd:b3:04:0f:58:
         29:bf:31:ec:bf:d5:f0:36:75:52:c1:01:fa:d5:3f:9e:5a:5f:
         31:a8:09:56:c0:d9:05:f9:8c:fe:4d:94:89:0b:a4:a9:51:6a:
         48:09:f9:0a:9f:f3:f8:82:4c:74:cd:ea:56:06:85:49:4c:2b:
         a1:c6:ca:cb:f3:34:1e:fe:b0:14:db:e9:f9:5f:f8:4f:7f:05:
         a4:76:0f:56:34:a1:8c:67:67:ae:97:d6:da:ba:2f:d3:44:22:
         11:1a:ff:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org