Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/VcNrFmQAPiq0LHy73x4cbuEIiKk.roa
File:                     VcNrFmQAPiq0LHy73x4cbuEIiKk.roa (raw, json)
Hash identifier:          R+2dDLa+MR63/UwFcmhyjJyPVkSX6tId341hqCpEqbg=
Subject key identifier:   55:C3:6B:16:64:00:3E:2A:B4:2C:7C:BB:DF:1E:1C:6E:E1:08:88:A9
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0262
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VcNrFmQAPiq0LHy73x4cbuEIiKk.roa
Signing time:             Sat 31 Aug 2024 01:36:46 +0000
ROA not before:           Sat 31 Aug 2024 01:36:46 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     24276
IP address blocks:        114.69.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610 (0x262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:36:46 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=55C36B1664003E2AB42C7CBBDF1E1C6EE10888A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:ae:b3:48:59:f8:6a:98:63:d9:91:fa:9a:
                    04:98:01:fd:f0:68:97:72:d9:fc:ec:f5:9f:d9:7c:
                    b9:77:2b:55:c3:b7:61:6e:7d:b2:89:7b:39:19:84:
                    d5:ae:6f:b2:af:60:b3:98:14:45:24:b0:27:0d:53:
                    03:44:66:b7:d5:0d:42:44:2e:b4:bf:33:de:0f:bb:
                    da:95:af:06:f1:e4:e5:9e:ba:c7:5b:3c:0e:3e:eb:
                    3f:4c:18:bb:57:30:31:c4:9b:71:2e:9a:ba:4e:47:
                    e3:22:0b:d4:fc:bb:34:27:f8:c0:e7:ed:58:aa:56:
                    ce:d3:4a:b6:38:fc:8e:43:79:79:f3:73:64:83:7b:
                    e1:00:30:4e:d1:97:b0:1d:e3:d6:c4:3c:7b:ca:f9:
                    7b:09:58:37:41:b6:57:27:f9:35:cd:0f:87:17:86:
                    14:76:80:1a:6c:32:07:09:d9:24:11:02:52:4e:83:
                    21:e9:a6:68:b9:27:cc:49:22:6f:c4:f3:e3:a4:4e:
                    aa:f7:bf:04:da:17:c6:ad:25:9e:83:77:ca:ce:0a:
                    a9:3f:25:93:2b:7a:3f:91:f3:ed:85:87:70:e7:9c:
                    a2:3c:43:19:b0:85:8b:19:cb:7d:73:cd:3d:56:08:
                    53:f6:e7:f6:9e:a3:14:2b:ea:21:6b:29:0d:6c:cb:
                    61:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C3:6B:16:64:00:3E:2A:B4:2C:7C:BB:DF:1E:1C:6E:E1:08:88:A9
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VcNrFmQAPiq0LHy73x4cbuEIiKk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.69.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d6:3d:83:80:71:13:e5:c5:9d:26:f3:85:da:78:c7:82:7c:4f:
         05:c7:15:42:3d:a3:94:74:d5:f7:98:45:54:d6:5a:94:0c:7a:
         b4:3c:25:be:f5:e1:c3:66:ea:69:a6:c7:5f:9f:f8:ee:9b:a2:
         a2:cf:aa:25:0d:c2:a2:21:bb:ad:45:69:d2:e2:21:e0:63:22:
         29:1c:8f:04:37:ca:b9:c5:38:c1:76:13:39:c9:0f:87:2c:2f:
         69:d3:4f:a2:7b:59:52:6c:8b:11:8d:38:60:52:b9:27:93:05:
         80:ff:3c:50:7e:c8:b6:78:22:e4:a0:06:9f:33:9c:f9:53:17:
         b7:b0:05:13:79:39:4f:44:e1:95:09:28:10:69:d8:ba:25:e5:
         28:a0:1f:aa:3e:5d:c6:e1:b5:9b:aa:f9:a0:10:0d:6b:37:66:
         78:9e:2b:a7:5a:da:df:c2:80:18:fb:d8:c3:8d:26:3c:e0:52:
         8f:c2:05:e3:0c:44:01:02:76:9d:0d:f0:c7:0e:8c:64:23:dd:
         a8:ee:ad:25:75:42:aa:18:f8:57:48:3b:db:4e:d9:36:18:55:
         ca:ff:d4:aa:d9:07:97:de:0a:bf:09:6c:b7:07:c0:40:4b:0f:
         ff:93:d9:2a:af:42:8d:2a:4b:ab:c2:30:89:bb:d6:a1:0a:2d:
         8c:b8:58:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org