Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Hbc32uXaBwwFhzwwaBQU96p5WWw.roa
File:                     Hbc32uXaBwwFhzwwaBQU96p5WWw.roa (raw, json)
Hash identifier:          Zp48SK5T7X5I0zj+xfpauWOQZ/RRUaQPHiiSfMTh7L0=
Subject key identifier:   1D:B7:37:DA:E5:DA:07:0C:05:87:3C:30:68:14:14:F7:AA:79:59:6C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0228
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Hbc32uXaBwwFhzwwaBQU96p5WWw.roa
Signing time:             Sat 31 Aug 2024 01:33:21 +0000
ROA not before:           Sat 31 Aug 2024 01:33:21 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     7686
IP address blocks:        210.228.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:33:21 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=1DB737DAE5DA070C05873C30681414F7AA79596C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2d:f2:3b:6c:39:00:a2:4d:6f:df:e4:9d:38:
                    0f:96:ce:3e:51:98:5b:7a:7d:29:57:ca:9f:f9:c1:
                    bb:7f:5e:cb:02:4e:32:10:6e:3c:7e:9e:3f:0f:68:
                    92:e8:c4:28:e9:50:04:7b:af:ee:70:48:86:ee:27:
                    57:09:d9:58:8d:a7:28:42:fc:e6:a4:8a:bf:68:d7:
                    cc:e9:08:8d:16:84:d4:84:03:75:df:bc:64:89:98:
                    4b:9e:14:b0:42:fb:b9:83:58:68:14:b5:aa:dc:4d:
                    fe:09:d8:c8:f6:dc:4e:d5:09:01:a2:89:f6:f2:0f:
                    3c:1b:cd:a5:57:39:04:dd:cb:40:4c:6b:83:3f:e4:
                    a1:d3:43:c1:5f:03:7c:79:8e:09:ef:bf:55:4b:4e:
                    d9:bd:6e:ae:ed:0c:5e:f3:8b:4e:07:a2:03:9f:3f:
                    08:f8:bd:d2:6b:ff:16:56:2c:2a:d7:36:38:59:b8:
                    bf:8b:fc:c5:fe:c1:d5:f7:fa:60:63:62:cc:79:eb:
                    d0:a1:d6:81:60:d7:c6:44:39:11:b7:50:55:d0:d5:
                    a1:b8:8f:85:64:35:ba:1a:3c:cc:01:b0:bd:10:45:
                    3e:08:30:a7:d9:8a:de:b1:82:42:b9:ed:ab:40:fc:
                    da:2f:20:d8:2f:3a:56:d3:c8:6a:9e:43:04:85:cf:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B7:37:DA:E5:DA:07:0C:05:87:3C:30:68:14:14:F7:AA:79:59:6C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Hbc32uXaBwwFhzwwaBQU96p5WWw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.228.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         63:7b:1b:33:e9:46:e5:06:d5:bd:5f:4d:ce:49:e7:dd:78:81:
         66:1d:30:86:87:7d:94:7b:72:df:b5:5a:35:32:bd:81:35:1c:
         db:15:18:89:a8:50:6e:f7:da:7b:68:fd:78:0d:20:ea:d4:ba:
         57:d4:cd:9e:85:98:17:03:23:6d:4a:7a:2e:7a:3e:64:1c:36:
         fd:75:7d:ce:f3:fe:1a:4b:d7:92:ee:2d:bd:f4:fb:5d:4b:b3:
         b9:e5:3e:40:71:a6:5e:42:ce:d0:43:6e:76:bb:ea:23:d4:26:
         2e:42:2c:05:72:7d:b2:4a:d0:8e:aa:de:74:f4:d3:32:49:b6:
         e9:7e:fd:f0:59:c9:71:9c:18:49:d9:85:42:f6:ca:3b:73:4a:
         34:9b:e3:f1:ef:53:66:6f:a3:54:e2:1f:c4:ba:ff:06:a8:9f:
         e3:a6:2a:0a:bc:41:b0:42:06:c2:85:6f:5b:0d:d5:c9:0b:0b:
         c1:a5:e9:fa:a1:39:9d:07:f8:f2:e5:9e:10:63:11:f1:8d:c1:
         bb:88:0e:fd:a1:16:db:ef:c6:70:b9:68:ca:e6:88:15:a4:14:
         b1:a2:1b:8b:ed:6e:84:69:ac:eb:1b:5f:67:3d:85:27:5f:a6:
         d7:b5:b8:74:f7:b8:47:bc:d7:3c:c2:75:f1:8b:0f:6a:cd:16:
         07:9f:e0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org