Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/_AFUR19mKOq7SDXQqzHsHEbim6o.roa
File:                     _AFUR19mKOq7SDXQqzHsHEbim6o.roa (raw, json)
Hash identifier:          LgeSsDL9KF4GuvDil12QpsPUVpy3Vhucd9q0c8gdoEI=
Subject key identifier:   FC:01:54:47:5F:66:28:EA:BB:48:35:D0:AB:31:EC:1C:46:E2:9B:AA
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       028C
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_AFUR19mKOq7SDXQqzHsHEbim6o.roa
Signing time:             Sat 31 Aug 2024 01:38:57 +0000
ROA not before:           Sat 31 Aug 2024 01:38:57 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        180.149.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:38:57 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=FC0154475F6628EABB4835D0AB31EC1C46E29BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:a5:73:ca:8f:c1:d5:e3:32:ce:ee:07:74:
                    c1:9f:fa:25:9c:e4:d9:ad:11:e2:ad:38:43:a1:a9:
                    c4:ae:92:2c:0c:e0:0a:42:ce:95:e1:44:0b:0c:62:
                    b3:d7:c5:86:c2:7e:04:7c:0b:80:1c:36:0f:f8:1d:
                    52:ea:df:dc:15:ab:b2:64:66:e5:bc:9f:e7:79:fc:
                    af:35:96:73:eb:a9:cc:8e:ab:7c:3c:8e:ef:30:06:
                    a1:6e:d0:cd:73:ee:e7:cd:41:8a:b2:c9:87:00:2a:
                    f4:9a:26:68:a2:c5:53:e0:97:f0:0f:2e:23:7b:18:
                    45:51:b7:5b:19:d9:6f:5b:aa:ec:5e:39:f2:5c:55:
                    f4:12:0a:28:e3:21:59:97:57:6e:64:d0:f0:24:97:
                    e1:80:1b:54:d4:18:81:14:a6:b8:3f:e5:4d:e0:4a:
                    ff:fb:25:9f:d4:2e:9d:c2:36:ce:bb:14:1e:4a:5b:
                    29:6e:65:1b:3e:6e:e0:cf:34:11:2e:5a:d5:fa:b1:
                    28:27:a4:79:47:88:74:c0:8b:d2:0a:f6:4f:49:63:
                    a9:05:f9:1c:2d:6c:d4:4e:67:8d:a3:39:8d:e1:4c:
                    39:6c:7a:8f:f1:c2:7a:f2:a8:91:e7:a5:0a:d4:1a:
                    02:06:93:5a:b8:e5:cb:69:15:7c:96:aa:a3:9a:6b:
                    83:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:01:54:47:5F:66:28:EA:BB:48:35:D0:AB:31:EC:1C:46:E2:9B:AA
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_AFUR19mKOq7SDXQqzHsHEbim6o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.149.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         db:5e:c4:47:ba:0b:f3:cf:d3:e5:47:8e:c2:03:8b:4d:4d:b9:
         1c:4b:d4:48:ad:5c:b5:0a:5b:6b:32:e9:08:13:25:2d:2a:7e:
         eb:74:8a:48:d7:ef:03:a6:f9:b4:f1:77:83:39:62:fa:6d:e3:
         c9:ee:84:9f:98:08:b1:9d:07:18:8b:65:38:5d:af:6c:b8:b8:
         c0:99:0a:0a:61:3a:2b:ca:79:f7:db:42:44:18:21:a5:55:ad:
         00:81:88:ec:ed:91:56:ad:4a:0c:6f:40:f2:5f:12:d6:84:91:
         f2:ef:62:1c:44:56:a5:ab:f6:0f:ce:6a:8b:ee:d3:f1:55:c1:
         eb:73:e1:2c:ba:f8:99:e3:cf:f9:2d:e9:ee:5f:29:ef:b9:d6:
         7e:2c:13:81:8d:e8:a0:6c:ef:16:a8:9b:fe:fb:09:38:57:85:
         d0:6f:84:95:13:d5:db:98:ae:d2:d7:16:df:e7:cd:35:c7:ac:
         a8:84:21:a2:1f:49:28:4e:bf:0c:46:4b:f8:62:ef:b5:4a:e8:
         db:b1:9b:48:b8:31:90:e9:b0:b3:96:89:72:02:96:da:0d:fd:
         30:e3:11:1a:93:aa:c6:68:6f:98:3f:dd:f7:b1:19:17:e2:86:
         9b:c4:52:32:fb:d4:f4:c4:37:6a:fd:f0:8d:3b:48:7a:22:e2:
         de:b0:a6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org