Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/0OS82VwALkYwViaG1Lu5CjrG-Q8.roa
File:                     0OS82VwALkYwViaG1Lu5CjrG-Q8.roa (raw, json)
Hash identifier:          gAj90FsdLWOUBGpVxWlLhSgynd52DpZ0PMtT7iMuyFk=
Subject key identifier:   D0:E4:BC:D9:5C:00:2E:46:30:56:26:86:D4:BB:B9:0A:3A:C6:F9:0F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02AB
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0OS82VwALkYwViaG1Lu5CjrG-Q8.roa
Signing time:             Sat 31 Aug 2024 01:40:46 +0000
ROA not before:           Sat 31 Aug 2024 01:40:46 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        219.117.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:40:46 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=D0E4BCD95C002E4630562686D4BBB90A3AC6F90F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:fa:d4:25:11:5a:b9:36:ca:c5:5e:3a:e2:68:
                    0d:64:0e:90:2d:15:63:66:0f:fc:6f:94:d2:80:65:
                    da:51:4f:1c:71:75:cb:ba:c9:7d:e1:52:db:f0:66:
                    6e:b5:e6:d3:23:1d:b2:0d:9b:bc:f2:8c:85:e1:95:
                    09:f6:91:c6:63:1d:bd:0f:35:6f:1d:9c:ae:cc:87:
                    6a:c0:0e:42:e6:67:dd:fe:b4:72:60:fa:ce:f4:ea:
                    2b:15:11:7b:cd:fa:47:da:20:c4:68:ec:60:c6:c4:
                    1c:62:56:a5:a7:cc:dc:e4:ee:48:90:01:25:9c:b8:
                    b7:45:2f:2e:5e:1b:12:7f:d4:66:70:e4:b8:fd:c9:
                    ec:96:0f:1d:24:92:0c:9e:0d:80:2a:c0:f0:15:2a:
                    3e:53:2c:ac:b1:4e:cb:84:e6:95:d0:ae:70:db:40:
                    2c:7d:2b:30:f8:aa:2b:f3:12:08:bd:e3:cf:c8:ca:
                    8e:05:d7:d3:76:86:cc:9f:24:93:17:22:fd:e5:3d:
                    bb:b5:88:35:0b:78:e4:0a:ee:e0:3b:63:5f:6b:58:
                    c9:ca:d9:76:3c:ad:0e:bf:9b:ad:12:63:95:ac:4d:
                    ea:50:62:82:31:e1:24:db:b7:3a:ce:51:40:0f:50:
                    92:85:2c:d8:fb:98:bb:7b:53:a0:5c:7f:60:13:89:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E4:BC:D9:5C:00:2E:46:30:56:26:86:D4:BB:B9:0A:3A:C6:F9:0F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0OS82VwALkYwViaG1Lu5CjrG-Q8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.117.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c7:17:b7:db:72:23:da:6a:60:b6:d5:4e:f8:7a:9f:56:ae:89:
         19:5e:0d:27:77:2d:c0:8f:fd:c8:4d:b6:88:a1:fe:af:cb:99:
         ea:7b:75:ae:f3:47:13:1b:8b:af:b0:7b:38:2d:a6:39:3b:c1:
         f5:99:1a:e1:2e:75:8e:2d:35:15:4f:da:ef:d9:a7:a5:04:b0:
         a9:c5:dd:e4:53:b8:2a:e1:e1:2c:27:b2:b3:c3:2e:76:bb:f2:
         b0:e3:57:8d:d7:7b:e5:18:4c:da:1a:b9:b3:61:35:d7:62:33:
         65:1d:b0:ca:01:91:59:36:58:e9:ff:03:8d:c1:0b:56:5b:57:
         06:ea:0b:c0:e6:74:5b:40:c6:77:32:ff:7b:3c:61:35:96:dd:
         56:60:20:64:a5:84:dc:fd:4c:1a:63:2d:af:20:4e:c0:64:27:
         d1:67:7b:20:82:ce:67:cd:95:59:5d:10:0f:78:39:f0:7f:3b:
         18:af:ed:fc:00:5c:8b:24:1f:4a:b4:f6:b7:c3:7e:0c:15:ca:
         cc:0b:ee:63:56:bc:50:83:7d:50:18:72:2f:4c:a4:3e:18:58:
         66:ea:70:46:d7:4d:3e:ca:d8:ce:c3:3a:34:da:bc:b1:7c:49:
         8b:d0:d3:02:df:54:61:5d:a4:62:00:e7:00:68:ed:15:68:42:
         5d:31:c3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:57 2024 by rpki-client on console-ams.rpki-client.org