Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/euEO9zgylLIQGs30wXysjw5sW_I.roa
File:                     euEO9zgylLIQGs30wXysjw5sW_I.roa (raw, json)
Hash identifier:          UgfNJGauTAaP5FnGB8pDIrYrd3d9fvf0zDx6hkoqfHA=
Subject key identifier:   7A:E1:0E:F7:38:32:94:B2:10:1A:CD:F4:C1:7C:AC:8F:0E:6C:5B:F2
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       023D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/euEO9zgylLIQGs30wXysjw5sW_I.roa
Signing time:             Sat 31 Aug 2024 01:33:30 +0000
ROA not before:           Sat 31 Aug 2024 01:33:30 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        218.45.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:33:30 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=7AE10EF7383294B2101ACDF4C17CAC8F0E6C5BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:24:42:f6:a0:99:5b:ff:c7:00:6e:85:c4:5e:
                    f4:c3:7c:48:6c:b2:c1:ac:db:0e:b7:25:c3:c4:9b:
                    14:37:89:39:d1:94:9b:77:bd:7a:ac:87:d2:d8:25:
                    38:2f:2e:0b:43:0a:62:5e:7a:b2:6d:75:c8:6e:bb:
                    ab:51:ce:1e:4f:a1:1d:9c:8c:eb:0b:bf:6b:a7:8b:
                    8b:64:b7:47:78:b1:a4:00:b2:80:61:57:2a:21:8d:
                    f7:52:c3:55:ea:32:a7:aa:ee:b2:b5:f0:03:12:20:
                    24:a7:e9:ad:40:35:82:f5:4b:ac:40:2d:98:df:58:
                    2b:a4:be:a4:5b:9a:6e:29:5b:12:8a:a9:a5:da:ae:
                    d6:ea:2f:f2:57:4a:5d:99:b2:ed:e5:43:72:12:f4:
                    8f:36:bb:71:bc:2f:eb:d9:da:7e:f6:7c:84:31:85:
                    61:19:60:a6:cb:c5:44:5a:2a:12:7c:fb:37:bb:c9:
                    da:04:64:7b:48:13:ec:78:eb:9d:86:ea:e4:b7:dc:
                    d2:e9:d7:af:ff:c0:49:32:2f:47:03:a7:15:8c:18:
                    4f:2f:e8:a4:2d:c8:63:74:16:e6:ad:4a:84:1e:a5:
                    af:ea:f7:05:83:ea:5d:29:00:3d:44:ff:80:78:0d:
                    e9:c9:e4:0a:6d:79:4c:60:51:b5:84:55:5e:97:21:
                    a4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E1:0E:F7:38:32:94:B2:10:1A:CD:F4:C1:7C:AC:8F:0E:6C:5B:F2
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/euEO9zgylLIQGs30wXysjw5sW_I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:37:76:28:55:00:46:2c:a6:22:31:06:25:b9:92:d9:e1:1b:
         fc:33:4e:3d:90:01:b0:d7:2e:33:ed:66:5c:28:6e:1e:81:03:
         0a:bc:4c:86:76:a0:1e:54:2f:e6:a2:81:24:05:e2:d4:48:89:
         dc:ee:f6:9d:14:9a:33:7f:eb:ee:90:cd:4d:c9:43:13:3f:39:
         93:89:99:cc:e7:ab:d8:21:e4:07:e9:21:9f:63:aa:56:1d:17:
         64:90:f7:db:af:c4:af:c7:a8:d3:2d:31:db:4f:85:01:72:77:
         69:4e:25:11:ab:1e:07:2a:77:08:12:14:bd:30:20:9e:5f:49:
         9e:31:b5:0a:c1:98:14:02:20:20:dc:5f:74:5c:7b:27:74:94:
         3e:b6:50:08:43:b8:64:84:06:ba:f7:2c:fb:74:a7:e0:f6:1b:
         4e:84:9d:95:22:1c:e2:39:61:e7:e5:92:a2:4f:a4:db:5b:f2:
         c7:7b:0f:54:be:e8:c3:66:9b:a1:5d:86:08:f4:29:87:e6:d8:
         8d:2f:c2:0a:5d:f5:a2:16:1d:5a:6f:54:c3:3d:41:ee:05:17:
         f0:21:3f:42:d4:8c:df:96:e1:13:ef:2a:b3:8b:22:4a:b3:41:
         67:79:19:c5:e9:0b:e1:d7:30:e2:f3:6d:33:18:43:6f:93:13:
         e5:d8:c1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org