Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/NC-AmUJ5VogHoODx7ldgy3qvFaE.roa
File:                     NC-AmUJ5VogHoODx7ldgy3qvFaE.roa (raw, json)
Hash identifier:          JkLLJg60BdX0hEKTm1N/g4d94Iwwv6SKBusPf3XZPtY=
Subject key identifier:   34:2F:80:99:42:79:56:88:07:A0:E0:F1:EE:57:60:CB:7A:AF:15:A1
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02B9
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NC-AmUJ5VogHoODx7ldgy3qvFaE.roa
Signing time:             Sat 31 Aug 2024 01:42:53 +0000
ROA not before:           Sat 31 Aug 2024 01:42:53 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        58.85.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697 (0x2b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:42:53 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=342F80994279568807A0E0F1EE5760CB7AAF15A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2e:81:23:de:8b:19:77:be:9a:c4:12:81:8b:
                    aa:54:a9:5e:c8:c0:39:0e:4e:a9:cc:ba:f4:7b:ef:
                    e2:4f:46:cf:a5:da:92:ff:7b:bc:96:f4:40:77:7d:
                    b8:a1:7a:0d:13:64:c9:92:07:88:f8:42:0d:48:f2:
                    2c:45:73:78:87:c3:03:ce:88:f7:64:29:8d:3c:27:
                    06:cc:7f:9e:c4:f2:50:16:12:47:56:58:ce:44:ba:
                    d1:b6:ba:96:b6:74:dc:5c:4f:e6:83:bb:2f:14:63:
                    d6:15:ab:ab:d2:28:31:44:93:14:29:d0:ce:e0:29:
                    ac:ae:c2:69:c8:17:38:e3:3e:8b:80:9b:c0:18:b6:
                    ec:34:70:9e:30:d4:63:ff:dc:52:55:8d:c0:3b:d8:
                    71:9b:03:87:6c:66:3d:eb:54:ff:0d:5a:82:c2:bd:
                    68:8a:6a:12:58:13:fe:43:38:fb:62:a8:3d:04:7c:
                    14:5f:52:36:a1:05:97:94:b0:4a:84:9c:93:f4:37:
                    cd:93:82:68:a3:cb:5b:b7:20:05:dc:07:d4:38:6d:
                    27:7b:4d:5a:f1:5d:fc:e5:31:5b:34:ed:d5:c8:9a:
                    a0:02:7b:ce:e5:10:61:a0:7f:d5:da:28:00:32:f1:
                    a5:72:d2:4f:e2:8f:b5:be:36:ea:56:13:95:39:de:
                    38:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2F:80:99:42:79:56:88:07:A0:E0:F1:EE:57:60:CB:7A:AF:15:A1
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NC-AmUJ5VogHoODx7ldgy3qvFaE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.85.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:6d:79:e7:aa:f8:18:50:24:65:cb:78:56:65:f0:7d:59:7d:
         7c:58:71:7a:f6:a3:e1:60:65:c3:f5:2f:64:71:8a:2c:95:bc:
         46:f3:c7:69:e4:16:2e:1b:1b:13:a7:b7:45:70:cf:dd:b6:f5:
         6c:e6:30:22:d4:fa:24:81:aa:01:bc:bd:54:f9:a0:9c:93:01:
         f5:f4:4c:3f:5c:65:22:69:84:6c:a3:31:a9:75:d2:0a:18:ca:
         19:bd:0c:fa:c6:f0:83:18:a7:af:fc:18:5b:cb:6f:1d:d8:52:
         38:72:ba:7f:da:c9:1f:6f:de:03:90:01:b9:d7:82:54:13:ab:
         a4:bb:98:bb:f7:d1:1c:cf:71:88:e4:82:e9:41:6c:c3:ec:81:
         85:c2:40:e9:d8:2a:16:31:e5:0c:84:12:89:df:9c:aa:4d:8a:
         ed:29:4e:99:0b:c8:fb:84:d6:62:b0:db:87:d9:41:2f:be:0f:
         1d:7e:96:ff:58:c4:80:e7:36:4c:e3:b9:db:1e:25:66:1c:36:
         c6:5b:a5:cf:c9:c1:1d:2c:5b:16:d2:23:68:92:d9:bd:e9:7e:
         88:80:c3:0c:4f:5e:17:cd:da:98:5c:26:54:ba:e6:3b:07:e9:
         25:2b:ab:e0:67:6b:40:d4:27:da:19:17:55:d5:92:b5:2b:1d:
         71:a9:20:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org