Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/S9FRNcrjRTmdMm-LLAXvYapYaBE.roa
File:                     S9FRNcrjRTmdMm-LLAXvYapYaBE.roa (raw, json)
Hash identifier:          HuyaA3kKGJ7oRdIJ3VY/5JaNoWAlyWhn+i1IV+jdxp4=
Subject key identifier:   4B:D1:51:35:CA:E3:45:39:9D:32:6F:8B:2C:05:EF:61:AA:58:68:11
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0216
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/S9FRNcrjRTmdMm-LLAXvYapYaBE.roa
Signing time:             Wed 31 Jul 2024 01:29:11 +0000
ROA not before:           Wed 31 Jul 2024 01:29:11 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     18134
IP address blocks:        103.55.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul 31 01:29:11 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=4BD15135CAE345399D326F8B2C05EF61AA586811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:df:0b:98:a8:cd:05:7e:84:9a:a9:52:29:
                    e5:49:a6:3d:40:a0:59:a8:58:69:2f:8a:66:bc:bc:
                    12:cb:96:b8:aa:18:00:41:f1:fc:20:47:d7:df:d9:
                    32:97:14:b8:07:02:68:ed:b0:da:ca:54:82:6d:1c:
                    90:41:fc:2a:e7:d6:6c:0d:00:e4:8b:1f:72:6f:5a:
                    69:e6:46:d0:48:c5:1c:78:2f:7e:12:c9:d2:1b:fd:
                    44:85:73:f8:11:bd:6b:67:e7:be:97:6d:2f:e9:cd:
                    6c:32:fa:0d:41:ad:11:a5:f0:2b:2f:59:3c:b7:df:
                    d8:3f:d3:73:c3:5b:70:3d:a2:1c:24:54:e9:d5:e3:
                    59:86:48:4c:2d:87:f3:bf:26:f9:0e:83:3b:c8:f1:
                    38:1b:12:f2:d6:f0:69:01:01:cb:88:43:fc:b2:39:
                    d9:80:fc:d2:95:7a:dd:eb:c5:c3:90:c8:d1:a7:76:
                    5f:cc:e1:7a:33:08:bc:2f:0e:d1:bf:02:ff:b6:42:
                    95:c5:58:31:cd:56:e7:de:45:a3:a0:13:e3:89:97:
                    80:31:16:f3:a8:df:0a:e1:c7:5f:42:04:b1:ab:8e:
                    c6:de:26:cf:d5:04:46:50:07:49:da:83:0e:84:99:
                    d9:6a:b4:ee:01:1a:49:0e:8e:ef:52:61:6b:c0:a5:
                    9c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D1:51:35:CA:E3:45:39:9D:32:6F:8B:2C:05:EF:61:AA:58:68:11
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/S9FRNcrjRTmdMm-LLAXvYapYaBE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:72:e6:26:e1:4b:2e:3a:f4:da:96:f3:cd:10:f9:26:b5:ec:
         80:28:43:51:a3:ef:36:98:cf:d7:73:b5:3a:d5:fe:02:54:74:
         38:47:3d:a1:73:be:00:d9:d3:bd:ad:ef:af:ac:b1:5c:95:52:
         9e:aa:bf:22:0f:3b:19:d3:e3:62:7e:62:c4:6d:63:cc:3f:98:
         c5:e8:31:55:f1:d4:e3:08:0f:ae:59:c1:98:48:fd:fe:5a:59:
         e2:84:8b:af:b1:e4:5c:c9:c8:95:b1:35:58:95:8c:3f:13:c6:
         3a:89:80:e5:37:18:6f:00:45:8e:64:52:10:b8:4a:95:3e:c9:
         e5:15:86:a8:32:11:72:8f:cf:5e:74:07:26:c6:db:b8:27:9b:
         58:fd:7f:dc:8b:85:3b:24:2e:43:a6:fe:d0:de:29:ba:db:68:
         11:4c:6c:86:0d:a9:65:af:ac:d0:c4:84:43:d1:a2:bd:4e:6e:
         e9:02:bc:da:ab:93:86:1a:fa:69:4b:31:41:f6:bf:d7:45:51:
         38:2f:7b:5b:7e:27:bf:00:2b:39:d9:0c:df:ef:57:9a:33:64:
         56:91:d6:3d:0e:ed:03:47:92:e5:e5:59:c6:32:89:8d:59:75:
         a1:fb:2a:f4:a3:12:a0:13:c5:58:49:c4:c6:7a:54:a8:86:e2:
         dd:c2:bb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org