Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Ew9bb7jw5fpgmydvbwrba4NCo60.roa
File:                     Ew9bb7jw5fpgmydvbwrba4NCo60.roa (raw, json)
Hash identifier:          wvmcoNE2z3srJBn5dilPq9nzxrb88bS61S4o6CTQz04=
Subject key identifier:   13:0F:5B:6F:B8:F0:E5:FA:60:9B:27:6F:6F:0A:DB:6B:83:42:A3:AD
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0298
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Ew9bb7jw5fpgmydvbwrba4NCo60.roa
Signing time:             Sat 31 Aug 2024 01:40:35 +0000
ROA not before:           Sat 31 Aug 2024 01:40:35 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        202.178.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:40:35 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=130F5B6FB8F0E5FA609B276F6F0ADB6B8342A3AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ee:79:c0:e8:88:09:42:81:e7:5b:be:05:c5:
                    e9:e5:1c:02:96:6c:ed:17:61:0e:9c:13:3b:6b:fd:
                    ac:13:ec:73:50:f9:5e:69:11:d8:90:e1:27:0c:f2:
                    f3:21:b5:39:2b:42:2d:57:dd:85:64:78:da:90:08:
                    38:c7:07:af:e4:67:d3:87:71:c2:84:37:09:db:99:
                    7f:4a:5d:6d:d6:b7:55:05:48:aa:d2:cb:73:0d:0f:
                    85:4c:7d:7f:fe:67:71:16:14:ae:30:2c:03:62:d2:
                    cb:22:ea:5c:7c:31:7e:4b:3a:33:c2:7e:ed:dd:81:
                    fe:90:22:b6:b0:83:01:63:17:de:70:8b:a7:21:53:
                    00:d0:0f:29:61:7e:c8:fd:e7:26:4e:93:35:72:a8:
                    b9:07:ea:16:97:d5:d1:64:da:c6:c6:39:d2:04:80:
                    c8:a6:e2:63:2b:16:5e:dc:7b:1a:9d:c6:8a:ac:cd:
                    70:54:9a:8f:92:ef:86:3d:a1:87:92:de:dd:2a:a9:
                    3f:6a:aa:9f:fa:05:fa:a5:66:77:9d:73:b1:5c:75:
                    9d:26:62:d9:f6:31:9d:6f:35:97:74:98:77:b1:9c:
                    04:d8:99:83:08:db:59:13:9d:e3:8c:7b:9b:d6:79:
                    d9:8b:a9:7a:97:97:f9:8c:87:4d:c0:81:6e:f3:c8:
                    e3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0F:5B:6F:B8:F0:E5:FA:60:9B:27:6F:6F:0A:DB:6B:83:42:A3:AD
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Ew9bb7jw5fpgmydvbwrba4NCo60.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.178.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         e1:81:2e:00:e1:2a:97:3d:ed:49:24:49:c1:a5:21:3a:55:21:
         8e:4a:da:40:81:e6:c3:55:bc:be:61:01:3b:79:9c:85:ad:f2:
         a4:5c:85:71:1a:7e:9b:56:86:9a:10:6f:b1:90:c2:90:8e:9c:
         cf:86:81:f2:c1:2b:3b:32:9e:1e:74:7d:be:f6:c4:90:f4:e7:
         46:81:04:40:f9:e4:6f:46:00:d1:3f:ff:46:0e:b2:0e:3e:00:
         5b:5f:5b:d0:dc:24:2d:de:c1:63:fd:4c:92:b5:8f:f4:d0:eb:
         01:d2:c0:6e:3a:90:9f:1b:33:b2:f8:11:79:6d:b5:21:90:52:
         08:67:37:6e:e5:48:b1:96:05:e5:63:98:16:e8:29:3b:5e:7f:
         8a:64:63:33:a9:72:b9:f8:83:58:be:43:cf:af:73:53:ff:60:
         ca:46:b1:7c:23:75:36:9d:f0:9b:6c:73:0d:f9:9c:00:94:0b:
         c2:49:c5:61:78:74:32:f3:2a:c6:fa:ee:11:93:f8:8d:26:b8:
         29:b3:64:e0:7f:7d:59:1b:dc:5c:c0:08:f5:8a:c2:be:25:64:
         2d:e7:1c:f9:f9:3a:ef:1c:af:b0:1d:d7:f0:2d:03:9c:a7:9c:
         e0:5a:a4:03:6e:9d:fc:0f:26:d0:bc:4d:c8:f1:24:5f:be:f3:
         26:f1:da:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org