Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/JcgggwVmkPJ3Pe7_PaeVW_jTM7U.roa
File:                     JcgggwVmkPJ3Pe7_PaeVW_jTM7U.roa (raw, json)
Hash identifier:          vSqfQNjJicYR/RDGtdkScm5LMwuJ1NsYtjeou5xX1t8=
Subject key identifier:   25:C8:20:83:05:66:90:F2:77:3D:EE:FF:3D:A7:95:5B:F8:D3:33:B5
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0270
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/JcgggwVmkPJ3Pe7_PaeVW_jTM7U.roa
Signing time:             Sat 31 Aug 2024 01:38:46 +0000
ROA not before:           Sat 31 Aug 2024 01:38:46 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        110.92.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:38:46 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=25C82083056690F2773DEEFF3DA7955BF8D333B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:9d:e4:62:dc:5f:44:3b:d1:e4:bb:68:97:3c:
                    0f:db:3c:22:c0:1a:b2:91:bf:21:c5:81:8c:8c:70:
                    ad:5d:63:bc:0b:a1:57:83:71:ef:7d:4f:5e:1d:03:
                    a5:ff:d2:0b:5d:fc:7f:1d:5d:fb:01:f1:3c:13:d1:
                    f5:bb:45:27:b4:f9:8f:8e:fb:d0:e8:63:98:63:f9:
                    84:c8:a8:7b:bb:94:7c:6f:d6:da:1a:35:3e:e9:cb:
                    58:95:f8:92:e4:d4:67:98:2b:94:71:d9:4a:c7:11:
                    a8:fc:3d:66:b7:ea:f8:de:dd:e3:ac:10:2d:a8:51:
                    7a:61:a4:43:c5:ac:58:f4:f1:e5:4f:ee:55:88:68:
                    32:b0:73:f4:e1:31:eb:a5:8b:ae:33:9a:e8:07:e0:
                    69:1f:45:75:b6:28:ae:31:2d:9b:7b:e9:9d:06:ac:
                    dc:11:f5:1a:d5:4c:45:db:85:99:9e:0d:ba:02:25:
                    c6:4f:47:27:ac:96:72:d7:46:ce:16:d4:25:20:8a:
                    a8:6d:30:6e:00:50:c8:06:5d:62:2b:0d:31:c2:22:
                    60:d9:e4:a4:87:13:8c:ba:0c:58:48:2d:a5:cb:34:
                    b5:2f:cb:29:4e:0d:a6:a2:52:8e:5d:34:7a:9a:24:
                    55:0f:f4:93:8c:ef:51:87:1f:05:03:bd:14:f8:1c:
                    4e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C8:20:83:05:66:90:F2:77:3D:EE:FF:3D:A7:95:5B:F8:D3:33:B5
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/JcgggwVmkPJ3Pe7_PaeVW_jTM7U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.92.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bf:83:00:58:0d:9a:77:3f:fd:e2:3e:06:28:69:3b:b9:3f:e4:
         f0:9d:14:53:a2:72:8c:7c:93:43:f5:95:47:f0:33:c2:7b:d5:
         88:02:7c:63:3e:a0:74:99:a5:c8:7a:df:b2:0b:33:63:58:6b:
         b8:6e:e7:cd:2a:d9:12:48:b3:03:6c:d7:fc:b0:1a:a6:f8:3c:
         fe:76:4b:41:39:93:f9:44:aa:ce:d2:66:9d:99:06:08:92:84:
         7e:be:e4:d6:66:84:eb:39:2a:b2:61:76:4a:be:8a:59:60:ad:
         9e:cb:e9:0e:57:37:a4:fe:5f:fc:3c:63:9a:c0:a8:38:f4:cf:
         3c:41:45:1e:99:8a:28:7c:2b:6c:e8:3a:a7:42:ce:de:19:07:
         01:fc:cf:7f:58:dd:6d:10:86:1e:c8:c0:e5:71:b1:76:e9:24:
         e1:3c:af:19:7d:73:42:7d:a4:56:4b:e0:f5:82:9f:a1:9e:4b:
         75:75:e9:9b:cc:6c:13:cb:51:80:34:08:f9:7b:ee:ad:5f:1a:
         63:b4:79:14:5c:c0:72:0b:27:43:42:e8:2c:ce:f2:87:b9:fe:
         d2:15:7b:f3:8a:69:af:c1:61:f8:8e:b5:0f:8d:30:04:3f:70:
         b9:eb:a8:db:18:bb:6e:53:51:22:ad:97:55:92:55:a9:b3:89:
         50:a4:8d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org