Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/dSqjUWgZCaM9udNbevUnoy3Tk54.roa
File:                     dSqjUWgZCaM9udNbevUnoy3Tk54.roa (raw, json)
Hash identifier:          H62+qVczfQ8fGcoUwLoqP+bKHKh7yLUTG8SsvTLwpZo=
Subject key identifier:   75:2A:A3:51:68:19:09:A3:3D:B9:D3:5B:7A:F5:27:A3:2D:D3:93:9E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       026A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/dSqjUWgZCaM9udNbevUnoy3Tk54.roa
Signing time:             Sat 31 Aug 2024 01:36:49 +0000
ROA not before:           Sat 31 Aug 2024 01:36:49 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9617
IP address blocks:        211.120.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:36:49 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=752AA351681909A33DB9D35B7AF527A32DD3939E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:d1:75:57:1a:97:63:4c:19:70:88:b0:f4:
                    fd:ee:d8:67:f3:2e:4d:4f:db:1b:7d:0d:c2:0f:8b:
                    71:88:b2:ae:b8:50:8a:9c:29:87:9e:78:5f:ff:4f:
                    f3:07:7f:61:9a:70:9a:27:08:cc:47:1b:93:ae:26:
                    ec:1b:a9:3c:f4:3e:aa:78:0b:8d:c9:36:3e:9d:47:
                    89:91:48:8e:a9:fa:d8:dc:1c:b8:40:00:b8:2d:ef:
                    50:e4:77:76:4a:a7:cf:78:83:59:33:89:24:b9:15:
                    1a:ae:5a:2e:e7:4a:a1:31:dd:dd:59:3b:2d:45:12:
                    04:49:ab:20:56:50:6a:b1:e5:df:bb:82:6d:87:bf:
                    85:b1:60:aa:f2:18:9f:ab:7f:08:99:fa:93:48:03:
                    dc:88:d1:66:19:09:60:ec:1c:12:8c:65:68:90:28:
                    65:23:35:0a:9a:3c:a7:ff:5f:2c:24:0f:3d:21:50:
                    57:4f:e7:aa:eb:eb:b9:d6:c7:a4:65:d8:a1:9f:1c:
                    92:dc:bc:be:33:de:ae:18:6f:4e:24:4e:f6:69:ac:
                    cd:8b:18:4a:19:98:3e:40:a1:ac:ba:e9:7c:e3:6a:
                    57:4b:28:26:bc:85:3d:1e:80:b2:81:ab:58:38:4c:
                    67:61:05:e5:fd:66:ca:fc:a9:ad:0a:69:01:51:45:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2A:A3:51:68:19:09:A3:3D:B9:D3:5B:7A:F5:27:A3:2D:D3:93:9E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/dSqjUWgZCaM9udNbevUnoy3Tk54.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.120.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         15:f3:c5:2c:f9:6b:2c:24:c4:22:7a:54:35:a2:cf:27:3d:6a:
         e3:ed:34:04:45:d0:a3:70:e7:51:11:94:82:3c:a2:4a:e9:0c:
         ba:dd:a9:e0:fe:e2:99:96:e0:83:da:46:bd:94:01:a2:f3:6b:
         03:52:7e:7c:07:50:92:91:04:54:12:6e:70:69:38:25:e7:20:
         c0:3b:23:54:fa:f1:00:55:87:4e:f9:4a:2c:76:95:67:0e:62:
         f8:3c:27:22:2d:7c:35:f8:ed:1e:5c:a3:51:e8:ad:0a:42:4a:
         95:a1:0f:f1:83:c9:ed:20:16:6b:84:ab:59:99:69:be:2a:22:
         f0:4e:09:b8:6d:1b:29:e3:c9:13:3b:37:b7:f4:b0:38:89:9d:
         92:f4:66:a8:86:ea:50:c3:56:e6:4b:68:f8:13:ba:4b:17:4d:
         c4:ef:3c:2b:ff:21:6d:86:0c:78:9e:fe:5f:14:a6:e0:8c:07:
         a9:6f:fa:23:62:0b:b8:9d:21:59:9d:c7:fe:cd:2c:b9:c9:d5:
         fb:a9:39:53:49:d9:02:f4:31:fa:f5:7b:09:50:da:5c:76:9e:
         df:54:ba:98:94:2a:e8:35:15:16:77:b6:a1:e3:80:81:4b:4c:
         05:82:8f:1f:54:dc:ac:14:0c:d4:a4:26:18:b1:39:10:7d:cf:
         f8:27:df:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org