Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/6lrG2CAAY6xLvzWh-uS2RkDH9Fg.roa
File:                     6lrG2CAAY6xLvzWh-uS2RkDH9Fg.roa (raw, json)
Hash identifier:          OjFTwFi4EbwcTUKzYmbjMn03Z7RqON3dH7DnxEeIsys=
Subject key identifier:   EA:5A:C6:D8:20:00:63:AC:4B:BF:35:A1:FA:E4:B6:46:40:C7:F4:58
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02C6
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6lrG2CAAY6xLvzWh-uS2RkDH9Fg.roa
Signing time:             Sat 31 Aug 2024 01:43:00 +0000
ROA not before:           Sat 31 Aug 2024 01:43:00 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9617
IP address blocks:        122.196.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 710 (0x2c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:43:00 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=EA5AC6D8200063AC4BBF35A1FAE4B64640C7F458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bd:36:41:4c:e1:6d:70:fb:19:5e:0f:46:0b:
                    f5:81:5b:e0:75:77:bc:ab:1b:82:73:7a:19:85:3c:
                    1c:69:dc:15:fb:5b:50:ea:86:43:15:be:ca:bc:fe:
                    2e:48:1a:dd:f2:18:14:50:86:70:79:10:7b:29:10:
                    31:7d:d3:ff:82:85:ad:e0:19:f1:87:1e:45:ad:41:
                    94:b8:e6:71:b5:59:00:d1:c1:c4:2d:86:8a:90:1f:
                    96:66:c5:34:02:45:de:3d:28:29:15:10:15:5b:9a:
                    84:f5:88:5a:60:45:24:30:ba:9e:bc:ce:a2:09:32:
                    d2:a6:9f:06:d4:a0:34:5c:1d:84:e8:19:e0:80:7d:
                    01:05:bf:3a:1b:d0:9d:82:31:be:b3:40:84:2f:79:
                    69:b4:82:49:f9:88:ef:f1:f5:8e:f6:aa:0e:12:63:
                    16:73:40:7e:0c:d7:34:e4:95:9c:f1:a8:ef:34:c6:
                    53:9b:33:8d:d9:f9:cf:4f:34:8a:cc:27:e5:0b:39:
                    ad:9f:b5:3f:a8:e5:99:9c:24:e3:67:bd:0b:5b:de:
                    d6:a1:64:67:38:f9:9d:a4:db:84:18:3f:a7:37:76:
                    43:80:f4:17:97:df:86:b9:3c:5c:42:50:af:be:fd:
                    8a:87:76:18:79:57:2d:c3:20:0f:64:af:8d:26:62:
                    87:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5A:C6:D8:20:00:63:AC:4B:BF:35:A1:FA:E4:B6:46:40:C7:F4:58
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6lrG2CAAY6xLvzWh-uS2RkDH9Fg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.196.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         17:14:f7:93:6c:b6:74:6b:9b:02:f2:27:31:57:85:73:4a:f0:
         be:f3:dd:76:fc:aa:09:c2:e0:55:c9:b7:08:68:69:ea:a0:61:
         a2:99:d2:e5:5f:b9:67:62:e0:9d:ba:58:2d:9b:e9:39:8f:dd:
         39:8c:ca:8a:7e:6b:bc:a5:48:8a:ca:48:25:b7:dd:27:d7:3a:
         4e:52:8c:28:a7:53:22:75:67:34:e4:b3:b8:a5:a2:93:99:3c:
         18:a2:97:5e:83:23:4a:5f:b1:9c:eb:79:70:93:01:91:57:e8:
         9d:b6:66:c7:a9:16:ab:58:26:57:76:4a:48:47:00:49:fb:a3:
         53:b9:c5:59:72:eb:2b:5b:6d:e9:8c:40:9a:f7:25:9d:31:8d:
         a0:ed:29:73:ad:e1:62:9c:b1:92:91:60:93:9d:52:37:fc:29:
         07:3d:ec:dc:59:d4:d9:cb:29:b3:c5:fb:bd:a3:42:17:1b:fd:
         71:72:0a:16:ea:b9:ff:76:a1:a1:54:87:d0:e3:f4:2e:a4:70:
         ba:0f:34:d7:bf:f0:11:0a:4d:d3:89:70:85:f9:da:cd:73:86:
         2c:d7:68:75:a9:b7:39:f5:0c:36:26:36:ac:51:9e:3d:95:44:
         50:8d:bc:d2:d1:e8:10:e7:95:f8:c3:21:b6:c8:39:bf:3c:be:
         1c:6e:70:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:57 2024 by rpki-client on console-ams.rpki-client.org