Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/8e0AJwjslUx6m6oXpEbjCTXC_hI.roa
File:                     8e0AJwjslUx6m6oXpEbjCTXC_hI.roa (raw, json)
Hash identifier:          ntBMdgZxoU+EFw4IughzsXQJFS1JhoxrDpbcJCGKBAs=
Subject key identifier:   F1:ED:00:27:08:EC:95:4C:7A:9B:AA:17:A4:46:E3:09:35:C2:FE:12
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       028F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/8e0AJwjslUx6m6oXpEbjCTXC_hI.roa
Signing time:             Sat 31 Aug 2024 01:38:58 +0000
ROA not before:           Sat 31 Aug 2024 01:38:58 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        182.50.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:38:58 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=F1ED002708EC954C7A9BAA17A446E30935C2FE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1c:9a:d9:e5:f0:17:3e:f0:bd:e1:49:d6:aa:
                    63:f0:b1:d8:5c:f3:4c:37:13:51:84:1b:52:8d:c1:
                    f1:04:42:54:df:77:3c:a5:a9:71:f2:51:a3:7d:a6:
                    3a:6a:21:3a:07:ce:40:b8:d6:15:57:61:40:81:5a:
                    89:28:18:3a:5e:7a:05:7f:ce:5f:ce:b8:5a:8b:bd:
                    73:41:f7:3e:69:31:03:11:6e:47:4a:37:9c:d6:2f:
                    73:f9:28:68:bc:a7:8f:d0:d4:b4:ef:ed:09:59:8a:
                    db:d6:f1:93:4d:eb:17:5f:bd:1f:1b:e5:de:dd:83:
                    aa:84:02:b3:9d:a7:65:52:5b:9d:49:4e:b8:70:54:
                    64:c7:ec:18:92:96:93:99:74:e3:56:63:cc:9e:cf:
                    a5:2a:9c:57:1c:11:ae:a4:8d:80:b5:aa:03:85:30:
                    8b:5f:ab:8c:5e:0e:01:ad:e0:26:52:8a:17:b3:49:
                    94:48:02:dc:4f:30:51:29:6d:13:99:82:e2:21:45:
                    c1:f3:45:3d:9b:57:bb:4b:72:02:53:ac:98:00:c7:
                    17:0c:2d:48:c6:d4:5f:b7:32:4a:0c:9c:d7:bd:4c:
                    63:a2:9e:1c:2a:10:8b:e7:c7:e9:ee:02:47:8a:fd:
                    55:d1:45:6a:a1:50:44:ec:d2:bb:59:59:84:ad:96:
                    ff:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:ED:00:27:08:EC:95:4C:7A:9B:AA:17:A4:46:E3:09:35:C2:FE:12
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/8e0AJwjslUx6m6oXpEbjCTXC_hI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d5:e1:1c:a3:00:f0:97:d6:6c:fc:ca:01:2a:c0:01:b2:b0:43:
         ef:47:d4:a7:db:4d:5a:32:ea:41:7f:9c:93:02:b9:a5:c1:30:
         d4:27:d9:79:ce:95:58:ad:21:8e:65:cc:20:36:7a:17:30:f6:
         ee:56:ee:31:83:f2:c6:c7:9d:63:4d:b2:38:f5:b4:71:2c:79:
         9e:82:99:b9:4f:af:b6:51:81:77:b6:f0:d6:18:9f:1c:5e:92:
         de:8b:32:50:50:67:73:f4:ff:32:cf:75:cc:5f:ff:3a:71:07:
         fa:b6:06:9a:99:9f:4f:69:d5:7a:d9:20:a8:dc:a6:f9:16:62:
         2d:f2:12:c4:06:36:e4:56:07:7c:62:7b:ab:eb:4c:80:b7:83:
         af:06:f2:da:13:3d:bf:08:5b:1d:d2:89:8e:24:3a:08:ac:3d:
         4a:55:bf:d1:28:69:a1:cc:10:d4:82:df:fc:40:0b:18:77:f0:
         0b:30:d5:94:38:07:5f:27:42:83:d7:9a:83:15:64:bc:b3:a3:
         3f:9f:7c:0e:65:20:85:d5:5d:71:f3:8b:61:5c:cc:81:7a:1c:
         67:a2:f3:3a:5e:0a:52:07:3a:51:11:2d:cb:a9:34:c9:1a:04:
         15:fc:2b:15:3d:08:21:9f:50:e8:1b:c0:b3:b5:ab:cf:bb:d3:
         3d:ac:b4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:57 2024 by rpki-client on console-ams.rpki-client.org