Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/_nA__gVUuhsQ5M8YQHbAG5VkaHE.roa
File:                     _nA__gVUuhsQ5M8YQHbAG5VkaHE.roa (raw, json)
Hash identifier:          XCSUUrmB/CjMSeVcXmwRrJcH6nxlUexmHF/FdzKTsug=
Subject key identifier:   FE:70:3F:FE:05:54:BA:1B:10:E4:CF:18:40:76:C0:1B:95:64:68:71
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       026F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_nA__gVUuhsQ5M8YQHbAG5VkaHE.roa
Signing time:             Sat 31 Aug 2024 01:36:50 +0000
ROA not before:           Sat 31 Aug 2024 01:36:50 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        110.4.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:36:50 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=FE703FFE0554BA1B10E4CF184076C01B95646871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:77:90:d6:43:a7:db:0d:d7:12:51:3f:1c:
                    d8:39:66:21:69:b9:e3:d1:7d:13:e5:e1:f2:34:a8:
                    b9:79:be:47:ea:55:2d:4d:4c:a0:8e:cd:de:f7:04:
                    e5:e7:23:87:9d:21:e6:e2:24:e0:85:6e:f1:e2:94:
                    f5:69:dc:ad:87:6d:a3:f3:98:b9:e0:0a:84:bf:da:
                    f0:a0:1e:32:68:ef:be:82:dc:4e:d7:cd:29:80:9c:
                    de:b3:e1:7d:e3:11:36:de:47:45:02:a7:f9:c6:00:
                    4b:24:89:1b:f1:22:fe:db:42:6c:53:3f:1c:98:57:
                    01:bb:1e:cb:8d:e5:ca:9b:88:80:24:e5:71:8a:11:
                    0c:65:ef:43:7e:cb:55:c4:45:8b:76:de:eb:d8:55:
                    b9:46:2d:98:e9:16:71:63:4f:19:1e:ab:a6:04:ef:
                    c3:ef:b8:57:cb:76:1f:57:7d:bf:02:a3:de:f7:b4:
                    6c:8e:a6:12:3f:14:0e:4e:08:c9:e8:92:ab:bd:45:
                    3f:44:e8:d9:ba:e9:ec:16:2c:a4:b2:cd:69:cd:55:
                    04:05:b3:e3:53:dc:53:f0:fc:c6:71:22:44:29:01:
                    29:15:d1:83:7a:09:33:5b:50:0a:ea:0c:a9:e1:d2:
                    c4:db:60:ae:f0:f0:9b:28:30:6e:df:40:b4:5c:32:
                    8f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:70:3F:FE:05:54:BA:1B:10:E4:CF:18:40:76:C0:1B:95:64:68:71
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_nA__gVUuhsQ5M8YQHbAG5VkaHE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.4.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:e2:f3:2b:7d:e4:1d:e0:44:ff:74:b9:f4:d3:95:24:8e:03:
         db:62:3a:ac:22:30:78:0a:ac:30:72:4c:30:df:59:c5:05:6a:
         56:61:de:35:56:71:16:a1:70:c1:18:ad:a2:b5:92:50:bc:cf:
         a8:5f:b6:bc:4e:29:64:b7:2a:74:4e:aa:2f:2f:f1:a0:25:bf:
         fb:73:bf:cf:b0:8c:99:59:36:36:66:b5:9e:a2:f3:66:6c:29:
         5c:6c:08:dc:2b:d8:a7:5c:99:4b:a0:0b:c2:18:3a:81:09:4a:
         d3:34:91:14:68:51:e8:f7:6f:79:c2:6c:45:a4:c4:4c:27:36:
         3c:48:cd:18:c2:ed:be:03:d5:81:ac:10:54:27:08:bc:96:a6:
         4a:ad:be:3a:5e:35:44:93:c2:00:19:cd:2a:4f:ec:69:24:7e:
         8b:60:32:a2:17:df:34:91:8a:47:66:01:7f:4c:d6:c0:90:25:
         35:3b:b2:61:dc:b3:83:cf:97:11:26:14:d0:8b:c0:83:46:6f:
         cd:74:68:8a:f2:dc:16:bd:cf:dd:46:cf:d9:e1:73:fd:50:f4:
         54:35:99:a3:07:b1:91:f6:d7:1d:4c:65:86:22:1c:45:52:59:
         dd:2d:da:30:4a:f9:47:fe:a2:bb:ff:23:fa:00:24:97:3b:f5:
         82:58:aa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org