Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/yVxJqJJWspNNrdlC-KuJuzf3DT8.roa
File:                     yVxJqJJWspNNrdlC-KuJuzf3DT8.roa (raw, json)
Hash identifier:          sc5UeKxS29zpnHuoyhEmANVkNIzEZVkWmGwwFP4hmlQ=
Subject key identifier:   C9:5C:49:A8:92:56:B2:93:4D:AD:D9:42:F8:AB:89:BB:37:F7:0D:3F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0253
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/yVxJqJJWspNNrdlC-KuJuzf3DT8.roa
Signing time:             Sat 31 Aug 2024 01:36:39 +0000
ROA not before:           Sat 31 Aug 2024 01:36:39 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        219.105.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:36:39 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=C95C49A89256B2934DADD942F8AB89BB37F70D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:88:f7:8b:35:c6:27:34:6d:46:10:df:68:
                    f4:82:2d:39:a2:14:01:f0:18:2f:08:57:d5:79:5b:
                    2b:41:81:c9:a5:c5:e3:3e:05:21:36:43:d1:f7:e2:
                    a5:6e:a5:e8:c0:ce:e3:71:f7:08:2b:9e:79:16:61:
                    f5:8b:12:21:66:e4:a9:0c:19:02:ea:76:e0:e3:5d:
                    07:97:ac:27:53:69:15:4a:3a:4e:84:a1:8f:4d:9b:
                    29:2c:94:30:b5:f0:f5:c5:ee:2a:a1:05:bb:87:a7:
                    02:59:77:32:47:bb:84:f6:30:e6:71:18:ee:5b:04:
                    d6:63:3e:84:e9:19:91:89:c5:08:0f:6f:7a:e8:16:
                    e6:b7:7e:49:bb:f4:aa:58:9d:4a:11:2a:c7:fd:73:
                    b2:15:bb:59:e0:ce:d4:13:73:cd:3e:f2:03:63:42:
                    5c:cb:8c:d1:c5:06:a1:f4:09:b5:7a:73:04:81:97:
                    c5:de:f9:2f:46:3e:92:48:f3:ef:5c:a9:a5:8b:57:
                    84:5a:7b:2b:d7:5a:ee:e3:66:24:6c:9b:75:97:41:
                    ab:2e:ff:f0:06:77:2a:9f:1e:3a:81:8c:0d:ca:dc:
                    e7:43:b9:1e:99:bb:07:3e:77:f4:73:53:83:6c:f1:
                    1d:89:22:b9:4d:0b:41:55:40:9f:15:d0:1e:4f:43:
                    81:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5C:49:A8:92:56:B2:93:4D:AD:D9:42:F8:AB:89:BB:37:F7:0D:3F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/yVxJqJJWspNNrdlC-KuJuzf3DT8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.105.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         79:a9:50:8d:57:1f:c0:0f:5e:01:96:38:10:c1:92:d9:d1:9c:
         1e:03:a2:2e:76:aa:79:16:f3:96:25:f5:b1:79:84:29:62:1d:
         8f:02:97:0b:38:43:64:a2:bf:74:e1:18:d3:1d:36:11:c2:eb:
         58:89:0c:5c:02:46:32:9a:d6:62:17:c2:cb:b8:80:59:dd:51:
         ac:ba:fe:d5:19:07:4f:d5:2c:02:be:cc:cf:15:47:1a:4e:2f:
         49:33:bc:d9:9f:31:ed:e2:49:75:b7:28:ca:b0:0e:b2:f9:7b:
         10:67:7d:91:17:05:a3:ab:37:77:a1:d4:19:b8:36:6e:03:ae:
         67:e5:a8:1b:83:b3:15:17:d2:8a:28:76:66:c7:30:27:c1:c6:
         6f:b1:9a:b8:6f:f1:4c:2a:4b:80:71:2f:ff:56:35:d5:f8:f8:
         cc:10:4e:50:90:64:c8:c7:dc:12:c2:69:e1:32:31:b1:95:7a:
         13:84:e8:bb:dc:88:7c:e0:bd:ad:ee:af:80:b1:e9:0b:fa:1c:
         17:91:d9:82:de:1c:00:0f:27:e0:c0:e6:9b:0b:6c:73:73:0c:
         76:40:1f:dd:c2:23:f5:90:bd:38:4c:c5:6a:49:1c:d5:33:08:
         09:63:49:03:57:64:23:4b:b7:84:7a:2d:7b:7c:3b:d1:76:8a:
         83:97:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org