Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/8WVi3skrkvxKTk4MRhpEDsB6GoM.roa
File:                     8WVi3skrkvxKTk4MRhpEDsB6GoM.roa (raw, json)
Hash identifier:          kHR+3oVB9vxstf1i9CFeummYxxcf/TrjOKBj84hvaVM=
Subject key identifier:   F1:65:62:DE:C9:2B:92:FC:4A:4E:4E:0C:46:1A:44:0E:C0:7A:1A:83
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       022B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/8WVi3skrkvxKTk4MRhpEDsB6GoM.roa
Signing time:             Sat 31 Aug 2024 01:33:22 +0000
ROA not before:           Sat 31 Aug 2024 01:33:22 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        27.113.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:33:22 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=F16562DEC92B92FC4A4E4E0C461A440EC07A1A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:25:87:e6:4c:cd:75:ae:a0:f9:d2:53:95:
                    53:db:63:56:db:a4:3e:d1:3c:81:71:0f:76:9b:fc:
                    98:26:49:de:2a:8a:14:7d:d5:e1:07:c9:c1:67:6a:
                    6b:2f:d6:b0:d7:fd:94:99:82:74:76:2d:3a:4c:c6:
                    70:3c:ec:0b:2f:be:f3:29:50:13:2b:17:21:e5:5f:
                    1a:14:ae:9a:45:cc:74:82:74:be:99:43:d6:4b:a6:
                    84:23:5b:60:ab:81:b8:78:a4:f5:05:ef:56:27:95:
                    2e:6a:08:f6:26:d1:a5:6d:7d:b7:82:0f:51:8a:f1:
                    8a:c4:f6:9b:50:cb:e0:82:7f:46:c5:71:29:75:e0:
                    61:53:c7:06:38:7f:03:29:ed:e4:9a:d2:dc:6c:c2:
                    59:5f:e3:79:2e:b8:2a:ea:9b:10:a3:c8:ba:75:86:
                    fe:2c:25:ed:15:4d:3a:48:58:79:39:69:e3:55:18:
                    e8:2c:6c:85:86:ed:34:a8:dc:f8:52:c2:01:42:2a:
                    4e:89:35:bc:b7:12:d1:a5:6d:f2:ff:17:f9:c3:24:
                    81:f4:a5:af:3f:3c:6b:d5:dc:b4:3b:46:e5:80:3a:
                    1d:2b:a8:f0:ac:1f:e3:5b:10:a3:11:04:de:f6:1b:
                    9c:c1:1d:71:69:1c:7c:8e:7f:47:3d:af:11:6f:26:
                    14:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:65:62:DE:C9:2B:92:FC:4A:4E:4E:0C:46:1A:44:0E:C0:7A:1A:83
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/8WVi3skrkvxKTk4MRhpEDsB6GoM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.113.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:3d:e8:28:9a:bd:99:18:b8:fb:34:6e:9c:7f:2f:10:82:1f:
         4b:ab:af:ab:59:51:be:62:11:38:72:6c:10:a4:2b:4c:a5:74:
         8b:2f:27:19:d7:2e:32:77:0e:ca:97:7a:e7:75:a2:f2:58:e3:
         4d:84:24:a5:fd:61:ec:53:19:b9:31:e9:63:f8:c3:a1:78:78:
         cb:8b:ba:22:be:81:f4:e5:65:82:70:d6:04:39:f7:11:cf:d9:
         1e:46:3e:0e:8e:f2:cc:25:e0:dc:40:6b:78:ad:35:b3:b1:27:
         85:41:87:87:7a:64:e1:39:e6:ce:a6:a3:66:e2:95:a7:da:a9:
         c0:e7:4a:7c:e1:44:43:d1:ac:30:90:d2:7b:60:f6:2d:99:82:
         01:69:08:b1:80:06:7a:4d:20:6f:01:d6:72:c0:f1:e8:63:1a:
         f1:b9:81:e7:89:98:a0:22:5d:95:52:b3:0e:5d:13:c0:59:4b:
         3b:88:87:2c:61:aa:f5:b7:6c:bf:88:b5:42:79:9e:43:4d:d8:
         dd:76:09:9e:fd:6e:86:6b:c8:7f:f1:19:43:bf:e4:7d:f6:c3:
         35:4b:97:b1:8a:62:b8:25:d1:32:3e:4b:d0:1f:dc:91:82:2a:
         35:19:2f:49:fc:b4:7e:0e:0d:c5:1b:9e:99:25:53:cf:b0:bc:
         3c:18:2a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org