Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/NKd1FxFYpgnZhZ0aKH45za9Kwxk.roa
File:                     NKd1FxFYpgnZhZ0aKH45za9Kwxk.roa (raw, json)
Hash identifier:          NAmBY1fHabNlYPgVrS2j05icDp1VoE8QQtSCo9WbdP4=
Subject key identifier:   34:A7:75:17:11:58:A6:09:D9:85:9D:1A:28:7E:39:CD:AF:4A:C3:19
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0200
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NKd1FxFYpgnZhZ0aKH45za9Kwxk.roa
Signing time:             Sun 30 Jun 2024 01:29:48 +0000
ROA not before:           Sun 30 Jun 2024 01:29:48 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9824
IP address blocks:        203.114.248.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jun 30 01:29:48 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=34A775171158A609D9859D1A287E39CDAF4AC319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a5:d9:ea:6a:b1:01:b8:e2:88:4c:5c:67:d5:
                    96:a4:ca:cb:20:c0:f8:96:be:1c:b1:6b:12:85:47:
                    e8:9c:20:dd:c5:1b:8e:e7:35:55:96:99:14:e4:76:
                    fd:4c:cb:b2:0d:1a:88:52:c5:9b:04:94:3f:11:a0:
                    2e:eb:bf:ea:92:50:a6:8e:95:bd:02:38:cd:a5:48:
                    d1:6c:10:62:e3:d0:49:9a:13:d7:03:2f:f9:16:a9:
                    ad:a3:41:39:33:7e:c7:45:40:95:ac:12:7c:ba:c5:
                    d7:0c:7b:18:23:57:3b:c1:2d:a5:bf:eb:e7:41:8e:
                    c1:74:95:92:0b:bf:c1:e2:fb:2b:42:57:7f:43:d3:
                    71:4d:6d:8d:31:3f:ec:ed:ad:86:d6:15:5e:87:92:
                    50:4e:81:f1:60:b2:90:6c:91:86:eb:2a:97:01:cf:
                    2a:75:03:b2:e8:0b:b4:dc:bc:f4:a1:4e:2a:bc:4a:
                    20:20:f0:7a:b9:e3:37:d0:52:d0:55:da:e0:4c:de:
                    fe:43:93:bc:ab:35:40:2a:29:6b:19:cb:e2:e0:c1:
                    5e:27:29:0e:25:65:71:f6:3f:f4:bf:ba:2f:53:60:
                    03:a2:3a:24:ad:1e:b5:a1:6f:ea:aa:01:57:04:8b:
                    2a:e0:94:72:c8:45:13:46:ae:7d:80:02:f0:22:91:
                    4f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A7:75:17:11:58:A6:09:D9:85:9D:1A:28:7E:39:CD:AF:4A:C3:19
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NKd1FxFYpgnZhZ0aKH45za9Kwxk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.114.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:3f:19:8e:59:d0:82:87:0a:70:a3:86:e8:a5:a3:f0:75:73:
         62:6c:8d:ae:d2:e9:30:49:6e:c6:f6:54:e0:29:ac:9c:a1:95:
         70:5e:91:6c:3b:20:87:3a:65:5b:e7:52:85:70:84:ab:7b:a1:
         c4:00:ad:1a:0a:bf:89:f9:3d:5a:8e:9b:bb:bb:d9:86:29:88:
         38:1a:84:78:4e:36:63:c0:5b:0a:5d:e1:77:79:03:c3:81:01:
         bd:49:e4:a1:42:2d:02:e6:72:d8:37:11:72:1f:2a:30:6a:38:
         5a:83:0c:5d:40:74:9a:fb:b3:77:2b:e3:8a:d3:2e:1b:02:80:
         7f:9a:20:0c:c5:a3:bd:cf:d5:04:8a:99:e0:65:d2:f9:18:81:
         b9:b2:02:67:6d:62:a1:f9:6d:d5:9f:74:74:f7:0f:0f:99:26:
         4d:ea:f8:bb:29:96:3d:5a:ae:42:a6:12:a2:69:ba:e2:d5:db:
         4a:45:1a:f6:81:55:38:43:72:be:01:79:84:19:9f:e8:66:16:
         b6:bb:a9:78:80:03:58:db:fa:c0:44:a3:5e:ee:08:ec:cf:c4:
         7d:f8:d1:72:f1:f2:47:76:21:2e:42:42:12:81:af:29:25:97:
         78:0d:45:d7:ee:03:b7:a3:87:f6:1d:f4:38:10:a8:99:10:96:
         d2:b4:9a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org