Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/LrzMEPcUNHtKQGYGNriI-yXu60I.roa
File:                     LrzMEPcUNHtKQGYGNriI-yXu60I.roa (raw, json)
Hash identifier:          X8Uv6E0qmYmxHy2fj1OkIW5JCUHoU1x0s2Ru3bbsyXM=
Subject key identifier:   2E:BC:CC:10:F7:14:34:7B:4A:40:66:06:36:B8:88:FB:25:EE:EB:42
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       026E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LrzMEPcUNHtKQGYGNriI-yXu60I.roa
Signing time:             Sat 31 Aug 2024 01:36:50 +0000
ROA not before:           Sat 31 Aug 2024 01:36:50 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        110.4.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:36:50 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=2EBCCC10F714347B4A40660636B888FB25EEEB42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:23:ef:3a:8e:ae:a6:5c:89:65:8f:18:df:
                    67:7b:c7:d4:bb:9c:a2:63:83:b9:74:d0:54:6a:f5:
                    7d:1f:98:cd:37:ae:f9:72:b7:14:1c:3d:83:ff:15:
                    b1:d0:ba:38:4e:25:ca:66:d0:ac:2f:f2:8b:33:fd:
                    aa:02:c2:b4:fd:38:c7:21:23:f0:fd:95:f3:98:8f:
                    2c:42:c2:f6:8c:dc:38:7d:c9:a8:5f:98:69:a8:94:
                    b7:7e:a6:b2:f0:24:b6:6c:78:a2:1c:32:b8:d7:04:
                    7c:19:53:04:b6:40:74:45:de:04:d3:1e:be:d3:81:
                    d4:fb:7c:df:87:cd:4e:9c:40:09:c3:f0:87:88:15:
                    a6:e1:a8:74:60:f6:f9:44:e3:a0:ab:3a:21:fc:dd:
                    ba:d1:1c:30:70:cd:f2:a6:15:66:13:90:e9:dd:ef:
                    bd:15:43:c9:71:79:ab:bf:22:b8:96:ee:ff:61:4b:
                    eb:fa:b8:7a:62:57:cb:d7:2c:98:40:82:74:41:91:
                    b4:3e:ae:ec:d8:74:1c:b6:34:0d:65:07:9f:0c:74:
                    84:46:3b:5c:60:8d:fc:39:25:af:9e:cf:97:7a:d9:
                    3d:94:3a:6c:12:ce:1b:95:f3:24:bb:e4:ca:a8:89:
                    bc:85:e7:6f:37:32:da:59:98:d2:cf:1c:69:0d:85:
                    c1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BC:CC:10:F7:14:34:7B:4A:40:66:06:36:B8:88:FB:25:EE:EB:42
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LrzMEPcUNHtKQGYGNriI-yXu60I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.4.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:63:6c:a7:0d:6d:ec:6e:12:69:08:e9:8c:75:00:46:71:0d:
         f5:62:12:cb:15:af:b0:7d:1e:39:30:13:e1:4b:5c:d5:ef:79:
         91:0d:e4:d0:f1:48:bc:24:1e:6f:80:3a:fb:b3:90:37:cd:a6:
         02:2d:d1:4d:be:08:5e:78:56:6b:69:28:d0:df:b8:a9:8f:08:
         15:65:e3:f7:72:b1:b2:cb:59:87:22:e2:67:27:15:bf:68:77:
         2d:0e:78:b4:96:c8:2d:bc:28:d3:de:60:e6:5d:b5:bb:5b:b6:
         0e:2a:3f:75:c3:a2:fe:0c:da:c3:1d:e4:04:5c:1f:28:09:e2:
         d1:56:c6:96:01:3e:cf:a4:2c:ef:b3:6d:0f:c2:76:8d:b0:18:
         c0:0f:ff:60:47:06:06:b5:ef:75:4a:8f:d9:74:3f:9e:fd:da:
         41:fe:de:74:85:ec:ff:59:8c:5e:ec:d8:86:61:4c:03:fe:6d:
         74:c2:a1:fc:66:a4:74:4b:4c:80:54:42:62:15:40:be:f4:b7:
         d1:06:1d:2c:bc:df:a6:55:51:b1:8c:6d:7c:35:3e:5a:28:cb:
         48:5b:13:a4:51:e1:1e:90:f0:e9:89:a3:08:fa:39:8d:9e:28:
         08:4f:7a:49:48:1b:89:aa:79:74:28:28:9d:81:8a:5e:51:f9:
         5d:c0:bf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org