Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/dnqDxhr1M4PkZJZRO-sfTzwVlSc.roa
File:                     dnqDxhr1M4PkZJZRO-sfTzwVlSc.roa (raw, json)
Hash identifier:          qiFbcT0L7oyfFNPwEluw6zRzBgt71Oh/cNrq3Wf3hN0=
Subject key identifier:   76:7A:83:C6:1A:F5:33:83:E4:64:96:51:3B:EB:1F:4F:3C:15:95:27
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0241
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/dnqDxhr1M4PkZJZRO-sfTzwVlSc.roa
Signing time:             Sat 31 Aug 2024 01:33:32 +0000
ROA not before:           Sat 31 Aug 2024 01:33:32 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        113.197.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:33:32 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=767A83C61AF53383E46496513BEB1F4F3C159527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d2:01:55:ed:51:89:f8:cf:48:17:ad:b6:60:
                    28:b0:59:c0:79:90:ab:79:0e:a6:56:dd:38:f8:95:
                    96:74:11:11:da:dc:05:92:54:5e:15:31:b4:ca:fd:
                    0b:56:32:63:a7:ae:8a:73:96:5b:e5:7d:b5:6f:9a:
                    9a:54:26:82:4d:dd:c2:58:73:f4:72:de:70:34:6f:
                    4f:73:23:29:6a:02:bc:63:80:99:fe:0d:ad:01:bf:
                    f8:c0:f1:2e:e3:95:2b:36:e5:8e:14:03:24:4a:be:
                    62:88:51:d5:0e:01:39:bc:1c:76:0c:77:ab:a0:ce:
                    58:aa:ca:ae:50:ec:58:a3:2a:a7:65:fa:b8:2e:12:
                    21:8d:e1:f1:1b:d2:32:a7:c8:7e:a5:e9:1d:6f:80:
                    04:f9:e6:e0:e4:bc:8e:0b:03:5e:40:52:97:b2:d6:
                    bb:90:18:22:35:22:dc:17:81:ae:d9:09:cc:bb:b5:
                    db:d5:1e:4c:d3:a2:ad:32:6a:ed:38:ff:cc:10:a3:
                    52:06:1d:67:86:8a:2d:95:9e:64:72:1a:a9:28:8f:
                    eb:28:b1:dd:e7:b9:82:a3:da:0c:42:54:26:c9:08:
                    56:82:39:a7:c7:50:6d:2d:1d:9b:8c:67:31:23:22:
                    05:bd:77:9c:bd:5f:f6:61:2b:13:63:13:ed:db:18:
                    74:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7A:83:C6:1A:F5:33:83:E4:64:96:51:3B:EB:1F:4F:3C:15:95:27
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/dnqDxhr1M4PkZJZRO-sfTzwVlSc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.197.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:21:65:ad:4f:fe:16:27:0c:05:fd:04:2d:f3:14:75:bd:ba:
         c2:c4:a5:e5:1d:2d:39:52:1c:74:6b:d1:f3:f8:78:ad:31:6b:
         5d:ff:87:f0:16:90:0a:ac:4c:3d:b2:2d:9e:cf:f9:91:bc:d8:
         89:10:78:5f:7b:e0:18:7b:4b:f5:c1:5b:09:8b:3e:5d:69:64:
         34:b3:b4:8b:de:86:a9:e5:72:36:fc:96:eb:21:fd:38:a4:b5:
         46:82:7d:05:56:55:72:e5:d8:ba:73:20:42:dc:9c:8a:b4:78:
         8b:ee:6b:30:30:7b:de:c0:74:93:8c:67:7f:bd:d9:7c:03:cf:
         a2:71:6f:a9:ed:43:ea:04:ba:d6:26:d3:c8:d8:e1:6f:4a:4b:
         6e:01:40:99:3e:ba:64:45:48:34:7d:3d:7b:c6:83:0c:fd:b7:
         ba:3e:33:92:b1:d7:d6:66:9a:21:07:70:c5:76:7e:53:81:51:
         c2:27:24:db:e1:8f:93:69:97:0a:71:f3:f1:d2:d0:72:ec:77:
         80:8a:a4:ca:5f:ae:ca:f6:46:67:6e:a5:79:31:0a:6d:91:b5:
         22:5e:85:97:11:35:25:e0:4d:69:2c:da:ba:bd:bc:2d:06:5d:
         f4:fc:95:5d:85:1d:2c:f5:ec:4a:fe:09:3a:6c:1a:b3:6f:20:
         57:14:bb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org