Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/QjTVV_GB4eF-THXg7KAUXH5Tl-Q.roa
File:                     QjTVV_GB4eF-THXg7KAUXH5Tl-Q.roa (raw, json)
Hash identifier:          fbrOiWrFoi70tGml1FqZ2vcBmSaRlEIuLGJNxGJMB4I=
Subject key identifier:   42:34:D5:57:F1:81:E1:E1:7E:4C:75:E0:EC:A0:14:5C:7E:53:97:E4
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02B0
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/QjTVV_GB4eF-THXg7KAUXH5Tl-Q.roa
Signing time:             Sat 31 Aug 2024 01:40:48 +0000
ROA not before:           Sat 31 Aug 2024 01:40:48 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        220.208.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:40:48 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=4234D557F181E1E17E4C75E0ECA0145C7E5397E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b4:82:52:4f:ff:db:02:70:6e:ca:ad:f8:4e:
                    c4:4b:18:1e:df:6a:cb:40:e3:84:5a:46:56:9a:0b:
                    ba:f2:09:12:54:6a:1a:90:d8:ba:10:7a:4c:5d:29:
                    21:64:4c:dc:ee:41:eb:5b:b8:34:f3:c6:10:9e:17:
                    00:48:54:6a:09:d0:3a:0d:5b:64:52:32:2f:76:a2:
                    2a:93:ef:71:02:25:0d:31:06:fa:65:69:dc:a2:5d:
                    34:62:2d:59:4c:12:28:ee:c2:b8:82:cf:bf:91:28:
                    3a:b3:2d:58:35:7f:63:36:90:f3:76:3e:a1:12:2a:
                    ba:13:2a:85:f1:6e:d3:73:c6:e4:f6:24:00:1c:ef:
                    8c:59:47:72:24:60:be:6d:04:b7:7b:2f:07:41:60:
                    1b:d5:6a:9b:0e:ba:c5:3d:e9:8d:3a:4d:3c:36:fe:
                    c9:40:2a:fd:60:17:fd:e2:79:01:c0:35:83:7c:d3:
                    1b:48:4e:a8:33:42:91:a7:78:81:89:10:37:35:36:
                    70:9b:61:81:f6:6e:40:7a:3f:2f:e2:6f:75:e0:7b:
                    b0:1b:38:62:e3:11:f4:e0:5e:12:61:bc:40:e4:49:
                    4e:0a:ec:d1:16:68:8e:20:dd:bc:27:ad:37:76:00:
                    21:2a:0c:1d:c2:00:1d:9e:bd:d5:02:62:b1:93:f9:
                    d3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:34:D5:57:F1:81:E1:E1:7E:4C:75:E0:EC:A0:14:5C:7E:53:97:E4
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/QjTVV_GB4eF-THXg7KAUXH5Tl-Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.208.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ca:30:5c:ca:76:1b:20:ea:31:11:3c:30:68:08:fa:56:bb:ce:
         38:a7:e3:f9:8c:a0:60:6a:e9:3a:4e:c5:11:df:cd:0e:49:b3:
         c9:e4:f1:85:73:38:db:d2:32:98:fb:95:ad:8e:46:92:8e:89:
         e8:00:eb:fb:b0:a7:f7:6a:bf:c8:b1:5c:e3:2a:55:f5:2f:71:
         8a:5b:d1:97:09:7f:d4:f7:01:17:7b:7b:d3:ec:02:90:c1:32:
         3c:9b:b2:4e:c4:bb:7e:f2:79:cb:45:c9:39:71:4f:23:e5:ba:
         a3:15:6d:20:7c:47:78:5d:bc:8d:b9:a8:28:fd:63:8f:99:8a:
         7a:f5:d5:48:f3:f5:ca:4e:9d:91:62:e7:9a:f2:3a:aa:b4:5c:
         22:b8:cf:3e:69:1f:0e:da:1a:01:8b:79:d0:d2:d1:aa:67:d6:
         30:d1:d4:01:11:bf:60:b3:74:e0:d2:82:a9:81:f2:48:55:a4:
         3b:00:0c:f0:24:cd:8f:75:ca:5b:ce:e2:8c:3c:0b:9d:fa:fa:
         ac:cb:1d:9e:48:f9:7a:62:c6:40:7f:48:11:17:4c:1d:be:38:
         83:35:b3:78:47:3e:2e:41:00:86:17:37:dc:30:6f:f1:03:81:
         ef:b5:0c:9a:38:83:95:db:68:4f:8a:77:7b:1b:d8:0e:53:d1:
         7d:6d:c9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org