Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZgKBAxduKiYLwDkQ1CyTaG0481s.roa
File:                     ZgKBAxduKiYLwDkQ1CyTaG0481s.roa (raw, json)
Hash identifier:          8XKZDMsIaimbjzq1KOfAzMs/W5pZ37YQPU+3wQ1EY1Q=
Subject key identifier:   66:02:81:03:17:6E:2A:26:0B:C0:39:10:D4:2C:93:68:6D:38:F3:5B
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0284
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZgKBAxduKiYLwDkQ1CyTaG0481s.roa
Signing time:             Sat 31 Aug 2024 01:38:55 +0000
ROA not before:           Sat 31 Aug 2024 01:38:55 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        115.42.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:38:55 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=66028103176E2A260BC03910D42C93686D38F35B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f5:be:06:49:c3:c4:e5:d0:00:88:e6:67:e1:
                    6a:87:df:52:8b:c2:a9:e5:82:72:52:9f:cd:d3:28:
                    8a:76:d7:28:06:d4:86:38:80:ed:77:a1:76:e4:d2:
                    e1:f1:f2:61:6e:7a:8c:89:15:f5:db:5b:ee:f8:9a:
                    f5:b6:54:23:d1:b3:63:99:fb:fb:73:76:12:61:b8:
                    0d:51:7b:02:42:d5:30:18:93:26:e3:6c:c1:c4:be:
                    45:54:26:06:82:29:00:cd:19:df:53:fb:89:4d:f5:
                    b0:8f:3b:50:0d:39:be:a1:77:7a:27:3a:91:5e:a4:
                    09:35:9f:ce:0e:7a:46:87:78:17:e8:ab:fe:83:f1:
                    63:ec:e8:61:83:5f:81:31:b0:1b:6a:00:c6:7e:98:
                    a2:eb:b4:d9:2b:c0:7e:19:f2:1f:92:78:cf:20:99:
                    51:cb:3d:74:dd:2b:1b:e1:f1:61:91:69:07:55:82:
                    31:35:51:c6:e7:fa:c8:5b:aa:81:62:74:34:e9:f9:
                    6b:5d:b3:c8:9e:d1:01:80:78:0e:a4:2f:c7:ba:da:
                    85:fa:0c:53:73:15:98:17:c6:1f:49:10:ad:dd:32:
                    74:38:a2:8f:c2:46:59:28:ed:05:b8:a4:16:ea:a5:
                    2e:22:79:c9:04:74:5b:11:48:e3:c4:4b:69:6b:1f:
                    9d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:02:81:03:17:6E:2A:26:0B:C0:39:10:D4:2C:93:68:6D:38:F3:5B
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZgKBAxduKiYLwDkQ1CyTaG0481s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.42.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:35:95:86:96:0c:34:8f:72:43:bd:87:a7:de:a4:4b:51:41:
         bf:19:11:9a:69:00:fb:a3:75:dd:c0:2a:87:bd:63:ed:18:52:
         7b:d6:7f:16:4f:24:08:21:ed:d4:b6:b1:28:05:4a:7f:69:66:
         7a:cb:f4:ec:83:29:f0:08:99:50:4f:cc:55:4d:75:8f:b2:fa:
         ce:e2:ac:d6:0d:f3:f9:8e:09:5a:16:9e:3d:b3:8e:c7:69:f8:
         ac:4f:ae:7f:8f:cb:b2:44:be:69:8c:24:1f:fe:05:7e:35:eb:
         54:b6:ee:fa:15:c6:19:43:c0:1a:5e:5a:88:3b:28:8b:e1:6c:
         e5:68:1a:d4:60:25:d1:59:ff:b9:b0:20:47:30:69:fa:e5:a2:
         29:69:59:27:6e:c4:2e:2f:e5:01:24:79:3f:75:17:50:c6:be:
         c0:7b:35:00:59:ec:3a:66:4c:3d:12:62:90:67:f8:f2:bc:f2:
         97:2c:69:93:0a:e7:ca:b6:d3:de:2b:7f:06:08:00:3b:bd:a0:
         7e:8f:b6:9e:fb:ac:25:f8:11:8f:b3:08:02:b9:0a:50:4c:11:
         68:1e:71:39:80:8d:f0:22:06:5e:80:d6:ba:77:11:65:29:70:
         7d:cb:58:72:e4:02:2d:1b:a7:89:30:13:cb:63:61:05:21:76:
         13:11:42:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org