Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/wY1epgzaHiX9HdR6Jb9aTG7VhbM.roa
File:                     wY1epgzaHiX9HdR6Jb9aTG7VhbM.roa (raw, json)
Hash identifier:          F5KzNk2g3ZwgcONh6vAwK13/DY80p5J6dg8jT9x9AdY=
Subject key identifier:   C1:8D:5E:A6:0C:DA:1E:25:FD:1D:D4:7A:25:BF:5A:4C:6E:D5:85:B3
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       017E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/wY1epgzaHiX9HdR6Jb9aTG7VhbM.roa
Signing time:             Sun 01 Oct 2023 01:34:27 +0000
ROA not before:           Sun 01 Oct 2023 01:34:27 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4721
IP address blocks:        112.137.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:27 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=C18D5EA60CDA1E25FD1DD47A25BF5A4C6ED585B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:55:20:fb:f9:8e:44:c8:d8:3e:b8:b4:94:b6:
                    55:28:eb:99:f3:8c:6c:8c:dc:7e:54:69:fb:64:4d:
                    54:ed:ed:41:34:ca:89:b9:70:5c:58:7f:1a:07:4c:
                    3a:22:7b:0f:1e:74:88:b2:b9:fc:52:e5:9b:a9:17:
                    34:0e:e2:fe:24:7c:07:90:6d:b6:83:6e:01:11:5d:
                    47:ff:31:9e:0a:bd:df:90:f1:78:76:92:bc:7b:7d:
                    cc:a9:81:05:c9:3c:f6:1d:56:da:97:b4:5a:ec:ba:
                    39:98:86:8f:f3:25:b9:b5:c5:f3:6b:f1:49:c9:4c:
                    8a:60:eb:5f:4b:44:f5:ae:19:5a:13:89:ff:e1:1f:
                    24:05:2b:e3:34:3c:f0:b8:3b:e1:cc:be:ea:98:80:
                    38:91:b7:79:b2:cf:8a:60:f1:7b:0d:05:b4:44:a6:
                    06:2d:53:eb:9b:29:dd:51:c9:4a:e8:8b:ee:28:f9:
                    68:fa:73:d0:bb:18:1e:d0:4a:bd:68:49:bd:72:b2:
                    f5:e3:8d:33:88:72:4b:87:ca:de:00:16:5a:57:67:
                    32:ad:4f:5d:ab:cd:3c:23:65:41:20:10:22:e2:5a:
                    97:10:81:37:b5:0a:b7:71:1b:66:07:79:b7:1a:d5:
                    3f:3e:47:c6:77:bd:8d:2b:b2:53:be:67:44:67:57:
                    fd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8D:5E:A6:0C:DA:1E:25:FD:1D:D4:7A:25:BF:5A:4C:6E:D5:85:B3
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/wY1epgzaHiX9HdR6Jb9aTG7VhbM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:7a:32:d8:a8:75:62:6b:e3:81:5a:72:1d:fc:f8:aa:ad:b3:
         23:e6:71:70:66:a7:01:ac:9a:a6:9c:ca:19:01:2c:43:da:61:
         d9:12:75:a2:b3:f2:8d:89:31:c5:3d:06:f9:ee:81:ae:bf:19:
         83:1e:e8:1a:b8:11:25:97:da:c1:34:3a:22:9e:fc:f0:8c:c4:
         27:5d:3f:f7:cb:51:89:86:b7:48:6c:07:31:0e:c1:75:f6:b9:
         58:cd:3c:52:32:4a:0a:8a:7b:b6:dd:0f:94:59:6f:80:65:33:
         aa:cb:e1:52:1d:7e:b3:2c:70:57:3a:0b:c9:45:68:ba:d7:b8:
         e8:59:6c:fa:1d:1c:34:5b:f4:6d:69:d1:4a:ab:46:3c:9e:30:
         1d:65:d2:66:a6:1f:71:1b:75:0c:85:95:4b:fb:ce:bf:e5:12:
         f9:52:b7:f8:72:5b:63:80:2b:b6:5d:26:42:76:08:da:90:27:
         41:e1:99:23:18:04:8c:9a:9d:7e:8e:9a:e8:0d:13:46:61:84:
         32:ce:ac:20:e2:6c:93:55:04:62:07:88:04:f7:22:3c:99:97:
         2c:32:1f:7c:a4:19:6e:b8:b2:28:98:93:25:0a:57:b2:b8:16:
         40:44:3a:3e:b4:2d:7d:aa:b5:0f:9e:6e:59:af:19:27:68:19:
         9d:48:a6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org