Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/YXgYDfXuNoBnwCy5vx4b5vtyN70.roa
File:                     YXgYDfXuNoBnwCy5vx4b5vtyN70.roa (raw, json)
Hash identifier:          PRPphRY6CBsb3DlDGI84CSdQpSi0I83bws6ilTUjsOs=
Subject key identifier:   61:78:18:0D:F5:EE:36:80:67:C0:2C:B9:BF:1E:1B:E6:FB:72:37:BD
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0261
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/YXgYDfXuNoBnwCy5vx4b5vtyN70.roa
Signing time:             Sat 31 Aug 2024 01:36:45 +0000
ROA not before:           Sat 31 Aug 2024 01:36:45 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        202.157.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:36:45 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=6178180DF5EE368067C02CB9BF1E1BE6FB7237BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:53:8d:5b:d6:34:56:ce:df:43:c7:8a:40:
                    e1:cb:57:1b:24:6c:fa:13:42:a8:20:0c:44:36:d3:
                    29:fa:4b:5e:86:a8:cb:f4:05:7e:8e:37:5c:c6:73:
                    c5:d1:20:a2:97:28:95:b2:78:ea:9e:48:b6:db:bd:
                    d0:ca:77:8c:02:a1:50:62:66:56:2a:03:39:0e:68:
                    82:1d:a6:6f:2a:d9:9d:c7:bc:6e:c6:7d:6a:5f:31:
                    7f:9d:69:de:91:ad:de:b9:b0:40:6b:27:30:e4:d3:
                    e9:64:63:bf:a5:42:82:e1:06:3e:e8:52:33:6c:0f:
                    0e:53:91:3c:71:d1:6d:ec:37:63:d7:3c:5c:54:34:
                    17:9a:52:e3:8d:bc:49:29:99:5d:d6:14:09:c4:cc:
                    d7:a8:9a:9f:f8:8a:5f:14:e9:dd:a5:0f:39:29:0c:
                    0a:f2:e8:0e:65:85:e5:6f:14:fe:df:59:98:0e:ac:
                    94:df:f5:ad:4f:fd:1b:ca:78:bf:57:d7:27:07:98:
                    17:b1:41:f8:32:06:af:0c:4e:4c:21:c4:fa:82:46:
                    66:8c:98:68:fb:d3:be:41:8f:40:d7:5c:95:26:9c:
                    7a:02:16:a2:b2:91:f9:3a:a0:85:a1:7c:5d:28:88:
                    e5:e2:4f:94:0c:b5:5c:0f:d8:e4:79:d2:59:08:cd:
                    28:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:78:18:0D:F5:EE:36:80:67:C0:2C:B9:BF:1E:1B:E6:FB:72:37:BD
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/YXgYDfXuNoBnwCy5vx4b5vtyN70.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.157.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         91:63:60:73:6f:38:3d:88:ce:28:79:70:02:4f:6a:53:5c:33:
         dc:25:c3:c0:31:26:94:cf:0a:ad:fc:e3:29:a4:fa:d3:72:cb:
         23:af:b2:60:13:1f:7c:af:42:dc:cc:20:91:7f:81:72:78:1b:
         ea:07:ee:bc:97:2c:70:12:98:e1:e0:3d:c0:f6:67:b8:66:49:
         e8:11:fe:74:ef:08:20:61:e9:a9:41:1b:27:ec:02:b8:9f:83:
         ba:fc:c4:fe:bb:03:6c:d0:f8:44:72:a9:2f:e7:51:c8:42:98:
         f8:ed:b4:13:02:10:9e:cc:c4:97:7a:68:eb:aa:e1:6a:74:db:
         f8:98:be:e9:b8:6f:74:3a:94:65:ac:bd:24:99:06:a1:8c:94:
         77:de:87:c7:4a:25:70:d4:e8:96:4a:f7:ef:30:14:3b:15:1a:
         85:c1:1e:a2:aa:65:59:62:5f:55:7e:d0:c0:9c:84:1c:ed:c4:
         38:9e:a8:27:c2:25:7c:d4:af:ee:50:b6:ec:58:a6:d4:98:dc:
         49:4b:d5:81:0c:60:c5:b9:be:6b:cb:42:23:05:c2:04:b6:74:
         9f:3b:fd:3d:21:87:27:0f:bc:f2:41:b5:04:f5:b2:6f:42:e1:
         9e:3b:06:25:f2:1c:25:cb:a3:0c:49:05:56:7f:78:27:c7:9e:
         72:5d:ee:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org