Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/CysOZGWrT-rPUMLJ3eqNbdRmHew.roa
File:                     CysOZGWrT-rPUMLJ3eqNbdRmHew.roa (raw, json)
Hash identifier:          pFQHDufwAQ95Wzf1KXhlG/km7xdv1gZcEcwe/pzMM7I=
Subject key identifier:   0B:2B:0E:64:65:AB:4F:EA:CF:50:C2:C9:DD:EA:8D:6D:D4:66:1D:EC
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0259
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CysOZGWrT-rPUMLJ3eqNbdRmHew.roa
Signing time:             Sat 31 Aug 2024 01:36:42 +0000
ROA not before:           Sat 31 Aug 2024 01:36:42 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        175.111.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:36:42 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=0B2B0E6465AB4FEACF50C2C9DDEA8D6DD4661DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:23:f8:4e:47:c3:a3:6d:e7:01:52:42:d3:02:
                    d2:9b:78:09:fc:bf:14:cd:d3:28:c2:6d:1f:40:97:
                    a1:a1:dc:85:30:3e:ac:b4:14:41:d6:ce:b8:30:5d:
                    0d:04:1b:d7:ef:1e:1f:e1:7e:22:87:fe:d0:84:e6:
                    d4:66:1c:f1:f9:84:6e:b5:84:2d:10:71:f9:6f:3d:
                    38:7c:72:a2:11:60:06:70:d9:7e:1f:ed:e1:d2:5a:
                    41:52:52:c4:39:7e:ec:31:f1:e9:cd:f8:55:77:d5:
                    02:5a:4b:43:3d:b4:14:ee:00:7c:27:41:ea:b9:d8:
                    77:a8:73:47:cb:e1:ca:b1:5a:3d:0a:d2:6c:3e:3d:
                    fc:8a:88:5a:b3:b6:bf:f5:96:d1:9b:48:e7:a0:af:
                    dd:32:b9:d5:ee:fd:3a:bb:5e:3e:5f:c2:43:86:ae:
                    00:aa:7e:dc:74:6a:78:a6:f7:ca:a6:3f:7d:c9:05:
                    59:07:d4:14:50:83:35:3c:be:d3:76:29:5b:6c:3f:
                    28:b6:af:a7:b7:e1:27:4e:e5:bf:f0:8f:7c:3b:84:
                    a5:69:19:6c:cf:ac:ee:6d:f3:1a:7a:48:40:37:5d:
                    9e:69:db:06:7c:8d:3f:40:ed:cb:80:db:b9:f0:63:
                    76:e9:46:72:80:11:29:99:87:06:54:e8:32:0a:96:
                    5b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2B:0E:64:65:AB:4F:EA:CF:50:C2:C9:DD:EA:8D:6D:D4:66:1D:EC
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CysOZGWrT-rPUMLJ3eqNbdRmHew.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:d6:5b:28:4a:91:c3:30:9a:b5:1d:6b:a9:95:d1:31:4a:43:
         9e:b8:9e:b8:71:0d:89:d8:c8:02:f6:33:e5:28:5e:f7:bf:7f:
         1d:17:8d:f9:98:ee:1f:db:ef:8b:95:55:f3:8e:3c:d4:f5:4e:
         d4:28:ca:a2:7e:ff:ad:9e:c1:2f:12:11:61:e0:e9:d6:b5:46:
         b0:fc:a3:bf:5d:c2:bf:36:65:90:14:37:43:4d:47:f8:08:bc:
         ba:78:10:d1:92:7d:1a:de:ec:c7:dc:97:fd:21:53:ca:1e:70:
         70:b6:d2:f0:c7:bb:9d:01:28:20:c7:76:03:21:97:e4:fe:e7:
         86:3b:54:cf:44:dd:5b:ec:93:a3:a5:a2:32:c2:d9:f1:a0:0b:
         6e:fc:f3:f4:f4:c0:09:34:f8:1c:33:2a:cb:11:3d:91:c7:3f:
         1f:63:6d:5c:3e:8d:2a:87:e7:a8:8b:c3:d6:a8:3d:04:ff:71:
         83:18:c4:dc:2f:2d:da:a8:6a:6c:c3:c8:bd:d9:37:97:08:ac:
         77:91:2c:5c:4c:25:60:54:0d:fe:83:9a:18:29:9b:19:f5:06:
         68:de:75:d0:97:be:e8:ef:47:3a:12:32:d2:fc:92:0e:b2:64:
         d6:c1:50:09:41:a9:a0:85:fb:09:51:bf:1c:6e:22:15:f8:6c:
         30:50:96:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org