Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/8ixUeVHG2QCvKtldhIBv2bz6v7E.roa
File:                     8ixUeVHG2QCvKtldhIBv2bz6v7E.roa (raw, json)
Hash identifier:          RY1d9eRxs39ywyXfdvJAgMRcdSerGe/ijubY/tOm62M=
Subject key identifier:   F2:2C:54:79:51:C6:D9:00:AF:2A:D9:5D:84:80:6F:D9:BC:FA:BF:B1
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02A4
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/8ixUeVHG2QCvKtldhIBv2bz6v7E.roa
Signing time:             Sat 31 Aug 2024 01:40:42 +0000
ROA not before:           Sat 31 Aug 2024 01:40:42 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        218.219.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676 (0x2a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:40:42 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=F22C547951C6D900AF2AD95D84806FD9BCFABFB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:d7:75:a6:45:48:13:2f:05:2a:51:99:e1:
                    d5:bc:a3:a1:a3:54:f7:b2:4f:9b:54:98:00:eb:e0:
                    96:17:be:cd:ce:7e:a4:68:0c:a8:e0:8e:30:ea:11:
                    fb:aa:8b:bf:3d:b1:bf:27:81:6d:84:3e:e7:48:24:
                    8e:da:d8:55:41:eb:44:38:4b:dc:42:7a:7b:6e:b0:
                    21:49:a8:7d:b9:d4:79:3a:79:6c:54:d5:a9:5e:cc:
                    97:9b:43:b4:33:20:ab:02:02:8c:2e:76:dc:c0:63:
                    3f:57:52:e6:c0:ca:ea:fa:4b:1d:03:10:80:7d:db:
                    5c:64:2b:42:68:b4:14:28:54:28:6f:fb:61:89:62:
                    ee:43:9c:68:4a:92:39:31:6e:1a:66:9a:44:04:97:
                    1a:bd:5b:fe:2b:4e:62:d2:f3:3c:ba:71:61:27:01:
                    8a:e6:6f:ec:b9:4a:c3:00:f6:47:f9:5a:aa:6c:2a:
                    cc:39:7f:a9:19:4a:f4:ea:b8:c8:2c:40:e1:04:f9:
                    d3:d4:83:9e:d6:f1:33:c0:7a:57:0d:28:ad:40:a8:
                    6d:22:e3:66:15:c8:a8:91:e7:db:de:f3:7b:48:01:
                    f9:fc:0b:c0:58:2a:2d:fe:ca:0a:4b:45:02:94:e9:
                    55:6b:81:34:e6:33:05:48:52:6d:73:b0:23:4d:2a:
                    4c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2C:54:79:51:C6:D9:00:AF:2A:D9:5D:84:80:6F:D9:BC:FA:BF:B1
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/8ixUeVHG2QCvKtldhIBv2bz6v7E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         e1:78:f9:ce:6a:9d:7f:c6:a2:39:00:e0:21:38:31:f0:61:d1:
         67:64:bb:df:0d:bb:a0:e8:b8:77:ed:00:a7:3d:17:cd:6f:a1:
         99:d4:20:df:94:67:3d:67:55:c4:b1:0f:fa:0d:f8:df:ce:7e:
         68:39:0e:ef:8e:75:02:c1:73:07:59:22:4f:5a:43:b4:12:6f:
         f0:18:9e:94:a1:01:bb:f8:b1:85:23:fb:d6:9c:9c:5b:19:e1:
         31:26:01:ce:48:86:9d:0f:d1:17:dc:f5:4d:89:00:ab:ae:18:
         9c:b6:07:37:a4:5e:1b:41:7e:f6:31:d6:94:59:fc:b0:b9:f5:
         0d:ff:fc:46:12:cf:18:d2:76:03:7a:94:fc:5e:a7:a6:fc:6a:
         16:b0:ad:98:b1:aa:1f:0d:bf:5a:d8:5c:2b:5d:f4:e8:76:e0:
         f5:71:30:09:09:46:2a:b1:bd:ce:8e:ff:64:20:3c:34:5d:9b:
         c7:10:62:82:1b:5d:a6:a9:9f:86:05:4b:b7:a9:e0:73:12:45:
         a5:ef:87:35:bf:fd:92:df:69:aa:bc:fa:40:0b:3d:21:c1:8d:
         0b:dc:2e:46:88:6a:07:20:64:a8:a3:31:c9:65:a5:5b:ae:0d:
         a4:df:74:76:b4:fd:b1:bf:dd:95:45:b0:1f:48:d2:85:5a:aa:
         09:5e:75:f5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw
MTQwNDJaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYyMkM1NDc5NTFDNkQ5
MDBBRjJBRDk1RDg0ODA2RkQ5QkNGQUJGQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQudd1pkVIEy8FKlGZ4dW8o6GjVPeyT5tUmADr4JYXvs3OfqRo
DKjgjjDqEfuqi789sb8ngW2EPudIJI7a2FVB60Q4S9xCentusCFJqH251Hk6eWxU
1alezJebQ7QzIKsCAowudtzAYz9XUubAyur6Sx0DEIB921xkK0JotBQoVChv+2GJ
Yu5DnGhKkjkxbhpmmkQElxq9W/4rTmLS8zy6cWEnAYrmb+y5SsMA9kf5WqpsKsw5
f6kZSvTquMgsQOEE+dPUg57W8TPAelcNKK1AqG0i42YVyKiR59ve83tIAfn8C8BY
Ki3+ygpLRQKU6VVrgTTmMwVIUm1zsCNNKkxFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU8ixUeVHG2QCvKtldhIBv2bz6v7EwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxLzhpeFVlVkhHMlFDdkt0bGRoSUJ2MmJ6NnY3RS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATa21AwDQYJKoZIhvcNAQELBQADggEBAOF4+c5qnX/GojkA4CE4MfBh0Wdk
u98Nu6DouHftAKc9F81voZnUIN+UZz1nVcSxD/oN+N/Ofmg5Du+OdQLBcwdZIk9a
Q7QSb/AYnpShAbv4sYUj+9acnFsZ4TEmAc5Ihp0P0Rfc9U2JAKuuGJy2BzekXhtB
fvYx1pRZ/LC59Q3//EYSzxjSdgN6lPxep6b8ahawrZixqh8Nv1rYXCtd9Oh24PVx
MAkJRiqxvc6O/2QgPDRdm8cQYoIbXaapn4YFS7ep4HMSRaXvhzW//ZLfaaq8+kAL
PSHBjQvcLkaIagcgZKijMcllpVuuDaTfdHa0/bG/3ZVFsB9I0oVaqgledfU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:57 2024 by rpki-client on console-ams.rpki-client.org