Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/J8dv5I34oLKP7S3QqMmwDB9pv-s.roa
File:                     J8dv5I34oLKP7S3QqMmwDB9pv-s.roa (raw, json)
Hash identifier:          H+6b3Kvogi4RR73cpYZFWZXAAXGHfMjnkyoYfAsg3EA=
Subject key identifier:   27:C7:6F:E4:8D:F8:A0:B2:8F:ED:2D:D0:A8:C9:B0:0C:1F:69:BF:EB
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       020F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/J8dv5I34oLKP7S3QqMmwDB9pv-s.roa
Signing time:             Wed 31 Jul 2024 01:29:09 +0000
ROA not before:           Wed 31 Jul 2024 01:29:09 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        203.114.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul 31 01:29:09 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=27C76FE48DF8A0B28FED2DD0A8C9B00C1F69BFEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:07:fe:7e:94:a2:e5:0d:72:92:6e:28:62:
                    c4:e4:77:34:31:97:09:16:f2:d4:fb:30:60:d0:ec:
                    3d:f7:f8:3e:0a:a7:5c:4e:e1:ae:c8:9b:04:20:3a:
                    a7:fe:3e:5f:d2:8b:05:3e:73:90:48:a9:39:76:f9:
                    e2:e8:2b:fa:a1:af:fc:74:4b:d7:b8:13:fd:f2:9a:
                    fb:b0:a6:18:f1:ae:8e:a3:b1:7f:bc:61:33:f1:b7:
                    c4:4e:46:be:07:81:8a:19:e6:24:68:82:52:6b:bc:
                    6a:f2:ce:bc:20:2b:d5:88:ad:72:53:cf:0d:32:8b:
                    2b:4f:83:2a:37:ae:2e:2d:2b:77:57:eb:2c:91:0b:
                    fc:a1:24:a3:d3:f5:4d:85:b2:3b:15:e8:3d:85:55:
                    aa:3a:a9:97:fc:e8:55:a7:dd:4d:0d:e2:11:c5:af:
                    0e:5c:4c:c7:bf:01:90:2d:7d:92:f8:c1:d4:35:ce:
                    5d:29:f3:53:13:83:e9:3a:57:39:d5:d3:bc:db:e6:
                    ad:d1:cc:a5:bf:8f:e1:bb:4d:c0:03:78:62:6b:ff:
                    73:5f:10:3b:89:37:03:d3:0c:9b:58:3c:98:cc:bf:
                    fd:0d:fd:bf:c0:7a:75:ab:f9:36:c4:e2:b5:f8:5e:
                    a1:6f:5b:12:94:79:7f:d5:53:88:bd:1d:4c:e9:d8:
                    3b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C7:6F:E4:8D:F8:A0:B2:8F:ED:2D:D0:A8:C9:B0:0C:1F:69:BF:EB
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/J8dv5I34oLKP7S3QqMmwDB9pv-s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.114.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d2:70:67:e2:7d:93:49:10:5a:2b:7d:2f:b4:6f:51:ca:20:88:
         fd:26:ba:a6:91:81:dd:24:48:5a:2b:33:5e:13:de:b4:36:67:
         a9:e7:ab:0c:26:94:74:9b:29:4d:0c:68:3a:b1:0d:51:ae:5e:
         db:30:dc:77:16:d8:05:9d:c3:f3:5c:05:f7:10:11:8c:36:eb:
         c7:b3:a7:ba:38:06:17:e7:16:7d:e2:b4:78:86:f9:13:3c:ef:
         3d:b9:2c:cb:31:f1:ce:e9:cb:fb:11:06:9e:81:c8:58:28:ae:
         63:56:a8:2d:75:d7:99:48:53:64:62:6c:f5:68:ef:41:16:06:
         fa:50:1e:21:24:14:49:34:27:86:aa:77:7e:5d:ec:c0:6c:e3:
         ff:05:2c:7f:dc:92:98:95:d7:7b:bb:94:96:2f:92:ce:11:a5:
         80:0d:e9:47:c8:b7:cb:71:24:2d:b7:86:61:bc:e4:f4:cd:4a:
         0e:4b:25:49:fc:fc:83:60:25:89:96:75:a7:4a:07:00:e4:c3:
         2e:9a:58:50:32:b8:c0:80:04:b1:02:e8:95:4f:d3:5d:36:e8:
         8e:4a:f4:af:5f:60:c2:55:df:33:cd:4c:cd:6a:9a:4a:9f:d6:
         c4:a1:79:a7:74:62:4f:e9:c1:ef:34:c7:4a:c2:e5:56:0f:2e:
         74:32:89:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org