Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/3jRggLfnEb-eP0lSxWkhfjNr07U.roa
File:                     3jRggLfnEb-eP0lSxWkhfjNr07U.roa (raw, json)
Hash identifier:          7fxyF2RsdaLBu+seQfKvfSIp7sjr32LrOKA20KY10uM=
Subject key identifier:   DE:34:60:80:B7:E7:11:BF:9E:3F:49:52:C5:69:21:7E:33:6B:D3:B5
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0239
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3jRggLfnEb-eP0lSxWkhfjNr07U.roa
Signing time:             Sat 31 Aug 2024 01:33:29 +0000
ROA not before:           Sat 31 Aug 2024 01:33:29 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        180.131.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:33:29 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=DE346080B7E711BF9E3F4952C569217E336BD3B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:12:3f:42:43:22:8f:47:67:be:04:24:23:e5:
                    6f:88:0c:ba:7a:49:bf:d6:1f:25:0f:de:0e:76:9b:
                    29:e8:ba:7c:ef:86:19:36:fb:4d:8a:d4:06:ee:40:
                    21:4b:78:94:e9:5d:49:7d:69:2a:d6:48:39:d3:13:
                    54:4b:25:d9:63:87:83:f7:0f:d9:0f:d0:19:9a:df:
                    07:5b:1d:19:0a:4c:17:13:97:8b:8d:f8:19:fd:34:
                    67:5d:bb:3e:b8:88:31:3a:e0:c4:05:7e:30:d6:84:
                    b1:1d:ba:12:ca:26:e9:56:3e:da:62:0e:ae:d2:b9:
                    4e:ba:17:67:bc:ae:04:e5:2a:08:2e:48:05:07:37:
                    1b:2f:2a:53:7b:a9:67:06:39:c6:7f:09:85:f9:db:
                    79:8c:fd:ce:34:68:be:bf:a6:1a:97:1e:33:da:d3:
                    80:05:80:a4:ba:e9:c3:ce:29:dc:60:4c:1e:1f:6e:
                    ce:df:a5:04:ab:7f:5d:de:db:fc:48:6f:ae:8b:af:
                    3c:0f:1e:4d:e3:e2:30:85:7c:f1:68:8d:f0:49:fb:
                    3c:b6:df:27:bc:f9:02:5a:67:d3:66:e8:5a:ca:16:
                    5a:b8:8f:48:71:23:49:2c:ab:86:24:65:83:48:27:
                    f5:93:6f:ad:c7:9d:9b:96:80:49:1b:27:31:f6:7a:
                    df:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:34:60:80:B7:E7:11:BF:9E:3F:49:52:C5:69:21:7E:33:6B:D3:B5
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3jRggLfnEb-eP0lSxWkhfjNr07U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:bb:7f:b9:3e:ad:d4:35:0c:f4:b0:ae:f5:1d:f3:cd:61:e5:
         bd:d7:a5:e3:31:4d:aa:97:6c:80:6f:88:95:12:d5:f5:dc:e1:
         9a:3d:83:14:31:0d:81:ef:90:e6:b3:32:5d:0c:6a:54:b2:42:
         8c:75:51:0b:32:a5:be:26:df:f9:82:28:93:af:d7:c4:1a:79:
         30:a5:8d:9e:f7:b4:0b:47:c3:7b:74:b8:2e:13:e6:44:81:d9:
         69:c3:93:6f:e1:5a:65:e7:16:1c:85:da:64:79:7c:a0:a3:be:
         3e:14:13:f4:14:92:81:34:0b:98:1c:f2:e0:32:21:0a:8a:8e:
         72:dd:e0:ef:1b:bc:b6:52:79:99:23:9b:52:b8:61:fd:c5:3c:
         7e:e0:f7:b9:f1:0d:8e:03:d2:44:27:02:6a:4d:94:cc:ff:10:
         fa:d8:3c:d9:07:85:6f:c5:d7:31:16:b0:5e:8e:54:c1:82:c7:
         95:d9:9f:58:ec:c0:8f:50:aa:c1:73:a1:a4:ed:63:19:5b:61:
         b5:f8:4b:e4:23:52:14:9f:4c:eb:2d:5a:09:f8:dc:54:3d:c9:
         be:b9:fd:d6:12:38:9c:3e:3b:e6:1b:e0:91:81:7a:f0:4f:94:
         93:1a:86:ad:59:b0:de:ea:a6:c9:59:92:b6:8c:82:55:42:a4:
         3c:5c:5d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:33 2024 by rpki-client on console-fra.rpki-client.org