Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/WTewSa97qJVjxLWB2q-pHl0hhiE.roa
File:                     WTewSa97qJVjxLWB2q-pHl0hhiE.roa (raw, json)
Hash identifier:          Y5DZGNoR92JKbf7mH/COwKkwQo4NIWvxJd9ClZnVsBk=
Subject key identifier:   59:37:B0:49:AF:7B:A8:95:63:C4:B5:81:DA:AF:A9:1E:5D:21:86:21
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0268
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/WTewSa97qJVjxLWB2q-pHl0hhiE.roa
Signing time:             Sat 31 Aug 2024 01:36:48 +0000
ROA not before:           Sat 31 Aug 2024 01:36:48 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9617
IP address blocks:        61.205.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:36:48 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=5937B049AF7BA89563C4B581DAAFA91E5D218621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:03:62:1a:e7:6e:2b:43:22:74:d9:34:68:41:
                    cd:67:36:79:a9:09:b3:ba:3b:21:02:68:bc:bf:52:
                    df:47:e2:9f:35:7e:ac:59:61:ac:a6:a9:bd:02:ba:
                    1e:c5:36:9d:a3:53:9f:18:83:73:3a:bc:fe:a6:7c:
                    0c:02:94:94:f1:8d:38:a5:d8:a4:1c:01:54:59:05:
                    0d:48:9c:15:09:6b:51:11:47:d0:a9:b4:e6:cc:86:
                    ef:fb:1d:b8:4a:fe:45:1d:7b:72:46:34:85:e7:75:
                    60:ec:26:83:dd:79:a8:1a:04:32:bc:e9:66:31:cd:
                    1e:02:d0:f7:ac:ad:72:ad:3a:45:7e:cd:5f:90:c0:
                    3e:5a:7c:bf:d0:42:73:99:0e:5e:79:b6:33:09:42:
                    64:cf:11:eb:41:05:29:dd:a1:07:bc:dd:41:cd:f0:
                    58:90:a2:cd:be:29:2f:a0:33:b0:b7:f4:72:d8:22:
                    c9:6a:d4:e7:82:4f:d6:2d:b7:8f:ea:ae:2b:86:c4:
                    c6:85:51:6e:87:04:d8:c4:47:58:38:32:43:e4:2f:
                    01:99:5a:92:0a:3c:e0:1c:0d:1b:f5:b3:6e:c3:0b:
                    e4:c5:f5:69:f3:81:87:67:1e:a6:6c:71:03:b9:3b:
                    b4:f9:f3:bd:db:e6:83:55:99:6e:6d:43:19:2f:95:
                    4a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:37:B0:49:AF:7B:A8:95:63:C4:B5:81:DA:AF:A9:1E:5D:21:86:21
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/WTewSa97qJVjxLWB2q-pHl0hhiE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         23:48:67:59:f9:d8:1c:fc:49:cb:fa:35:2c:98:02:17:b4:2d:
         cc:c9:da:0f:db:eb:eb:17:30:8b:dc:d3:5e:47:e6:a7:53:30:
         3e:1b:9b:4c:88:d6:7d:d2:17:5c:b7:65:e1:df:aa:ea:48:7a:
         76:00:ed:a1:b0:4a:d4:c1:6c:f5:3b:ef:f9:85:e9:e4:6e:78:
         5e:4e:03:1a:21:bf:91:0e:f7:79:d4:fe:23:cf:6a:02:f5:37:
         83:ac:8f:0b:38:dd:ff:34:0f:ec:a8:07:0e:91:9f:5e:e8:1a:
         8c:c2:48:ca:86:c8:01:67:bd:60:09:be:7a:a2:6a:2e:2e:e4:
         71:8e:7b:b6:5e:87:ec:42:0e:4a:be:5e:67:29:15:8b:7c:18:
         97:20:6f:45:6a:cf:7d:05:8d:db:1b:d9:fb:7d:63:8b:ba:79:
         f7:cc:24:f0:f9:22:42:d4:27:79:16:49:7f:c1:f7:08:1f:a5:
         c4:a3:82:dc:8c:f7:fe:9c:7d:6e:56:d6:43:5f:6a:9a:53:6f:
         9f:c1:ee:4a:92:e7:c1:a8:d0:59:0e:82:8a:65:2f:3c:4e:a4:
         cc:46:c5:e6:61:66:e4:3a:16:1c:77:b3:d1:16:b8:ab:50:99:
         b7:fb:49:39:0a:87:e6:31:3e:75:3f:18:4d:3d:6c:0f:27:f9:
         0e:b1:43:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org