Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/0ETTxcug_mjesQlLtY92Jx4ZB4E.roa
File:                     0ETTxcug_mjesQlLtY92Jx4ZB4E.roa (raw, json)
Hash identifier:          /V30H1NLsW0/68rs3/HaGYi9QSD6eEDs1pF3+EfPJbQ=
Subject key identifier:   D0:44:D3:C5:CB:A0:FE:68:DE:B1:09:4B:B5:8F:76:27:1E:19:07:81
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       024F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0ETTxcug_mjesQlLtY92Jx4ZB4E.roa
Signing time:             Sat 31 Aug 2024 01:36:37 +0000
ROA not before:           Sat 31 Aug 2024 01:36:37 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        117.53.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:36:37 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=D044D3C5CBA0FE68DEB1094BB58F76271E190781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:28:fc:b9:90:0f:98:bb:24:4d:64:92:e6:
                    82:89:44:e2:e0:24:3a:f9:b2:f3:8d:40:db:e0:9a:
                    7e:53:43:3e:e9:51:3b:ac:ad:d0:aa:34:05:73:f9:
                    8a:1d:04:da:32:31:8d:b6:29:be:3b:ff:d0:dc:b2:
                    57:fd:c0:3b:f6:a1:32:36:c7:83:f1:fd:88:20:9a:
                    2f:fb:6f:05:61:08:69:59:32:3a:ae:05:ee:36:e5:
                    26:7f:3f:25:12:c9:fa:9a:7f:34:f4:44:cf:0e:4d:
                    1d:36:7a:51:f4:f1:d4:5f:30:8b:87:e9:5e:7a:9b:
                    60:ea:7a:1e:ab:25:64:46:51:4e:a2:ea:1a:42:67:
                    84:a6:66:b3:49:53:3b:fe:3c:4b:b3:94:09:4a:78:
                    04:5f:85:74:40:cc:6d:69:69:38:c9:da:9a:af:e2:
                    8d:e1:40:ab:64:a9:bf:4c:b6:1b:92:d2:fe:e8:fe:
                    85:e5:f8:03:6d:c0:dc:76:35:18:27:11:09:3d:8d:
                    d6:77:41:31:13:ff:0d:0a:27:1f:97:45:b5:2c:e5:
                    63:79:80:8f:d9:e4:35:85:e0:b5:91:84:dd:2b:d9:
                    7e:45:7e:73:6c:30:1a:5f:ef:bd:e6:05:cc:20:31:
                    18:0c:c8:14:57:99:99:fc:09:81:3d:c8:6a:cf:d9:
                    99:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:44:D3:C5:CB:A0:FE:68:DE:B1:09:4B:B5:8F:76:27:1E:19:07:81
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0ETTxcug_mjesQlLtY92Jx4ZB4E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.53.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:68:c0:d3:07:da:e1:c8:17:c5:96:0b:28:07:92:63:42:dc:
         08:65:f5:5f:b7:ae:ee:11:f4:8d:b8:67:71:92:6b:20:40:d8:
         b6:c0:b8:a0:9a:e4:dd:30:7a:3e:9b:21:dc:56:91:58:ee:95:
         67:c9:82:e3:4d:9e:32:16:58:2d:b1:7a:d3:6c:37:b0:29:51:
         97:28:19:85:1e:03:c3:1e:c8:f1:8b:00:0b:42:60:45:c6:32:
         44:22:d0:2d:f1:4c:b1:3f:c8:7a:bf:01:6c:16:c0:5f:63:e2:
         de:6a:b9:6f:46:8b:44:da:b3:38:f7:f4:e5:a7:1b:49:b3:77:
         66:c2:e5:76:a8:d0:ca:bd:31:76:65:de:3c:21:db:3b:a2:34:
         23:90:ff:fd:c5:10:ab:dd:47:3a:c8:92:a5:87:21:ce:24:06:
         3d:ee:12:67:56:f6:ad:c5:ca:db:3c:86:ba:c4:4e:24:a7:2e:
         84:6a:7a:c1:e8:53:94:fb:86:d7:be:bb:06:2d:39:9c:ab:d5:
         bd:36:0b:74:a3:ae:11:94:28:4c:6a:67:0d:ae:0f:ca:2a:bb:
         9f:94:1b:0f:63:83:78:10:aa:e7:72:f5:12:f2:b4:c8:81:a1:
         f4:a0:45:67:e0:e9:ca:94:e7:3b:19:72:26:b9:80:3f:dd:00:
         26:fe:55:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:57 2024 by rpki-client on console-ams.rpki-client.org