Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/fwr1DyEA5xAwDCMAYHuYHqe8hDo.roa
File:                     fwr1DyEA5xAwDCMAYHuYHqe8hDo.roa (raw, json)
Hash identifier:          qDOv/NPzAYY4uQD7Mk+MXr2JFBBdT2ZoJPBlhbwEm/U=
Subject key identifier:   7F:0A:F5:0F:21:00:E7:10:30:0C:23:00:60:7B:98:1E:A7:BC:84:3A
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0293
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/fwr1DyEA5xAwDCMAYHuYHqe8hDo.roa
Signing time:             Sat 31 Aug 2024 01:39:00 +0000
ROA not before:           Sat 31 Aug 2024 01:39:00 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        202.43.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659 (0x293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:39:00 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=7F0AF50F2100E710300C2300607B981EA7BC843A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:d4:59:c2:64:bd:11:f0:ac:e3:d8:95:7d:
                    a0:bb:44:c6:ff:84:68:98:e8:6f:d6:d2:9b:a9:f2:
                    0a:03:52:e8:a3:ce:56:83:68:47:f9:3f:ca:01:b0:
                    46:1a:61:a5:dc:3a:d3:21:49:cd:83:a0:16:04:d2:
                    fa:c0:01:8f:09:fc:0d:37:e5:2a:02:df:9a:84:bf:
                    51:6f:ba:3a:af:83:36:90:2b:18:21:b0:2d:c7:f4:
                    71:a6:57:8c:91:40:2e:0c:aa:87:f1:63:54:37:c0:
                    92:95:7c:d5:84:53:33:77:82:90:b1:dd:e1:6c:b9:
                    6c:45:0f:8e:79:f7:c2:8e:d1:03:52:ac:5b:e5:cb:
                    bf:ec:e3:95:17:86:a5:6f:8d:93:e7:c7:2d:98:81:
                    1a:03:12:46:e1:28:bc:a3:49:e5:c3:91:b4:b6:05:
                    55:f5:0f:ee:3e:ed:e3:c4:56:38:34:ec:93:3e:4c:
                    9d:af:41:65:1c:5d:2a:89:27:eb:1c:ff:d1:f4:8d:
                    cb:49:91:94:0a:74:44:a4:57:95:1a:e0:1a:7a:3b:
                    98:b6:a3:e3:c8:fc:00:0a:51:40:53:e4:7b:ce:fc:
                    53:ae:06:26:97:03:0e:29:e7:04:e0:07:5d:c4:21:
                    5d:c8:d7:77:e1:d7:cb:73:4c:05:68:2a:eb:89:dd:
                    1a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0A:F5:0F:21:00:E7:10:30:0C:23:00:60:7B:98:1E:A7:BC:84:3A
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/fwr1DyEA5xAwDCMAYHuYHqe8hDo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b5:4b:2b:09:a2:9c:18:16:2c:a3:7f:aa:70:80:95:15:3b:51:
         c1:92:54:c9:db:83:d1:ee:e8:d7:c1:e9:f2:72:39:27:60:01:
         db:37:e3:c4:b0:3f:99:b7:4e:14:28:ff:29:69:35:7a:19:47:
         b6:4c:d4:a2:54:b4:e0:bd:09:40:5e:5e:b6:4e:f2:6c:aa:a6:
         06:ab:4a:37:93:8d:6a:cb:c3:6f:6a:3e:70:29:5d:36:44:16:
         1c:fd:46:a8:b7:ff:1a:99:b5:99:ee:3c:40:87:41:d9:c6:10:
         5f:a7:62:2e:f9:bd:f3:8c:c4:d1:e6:0e:cc:68:59:33:25:7a:
         7e:e1:8b:49:05:f7:a1:84:72:9c:12:a4:85:c3:77:4b:9f:d3:
         6f:c4:73:3d:eb:8d:1f:4b:3b:d9:07:09:76:2a:a9:c0:80:f6:
         c3:74:e4:18:03:7b:35:13:7c:72:2e:ba:08:2c:dd:ef:e7:ed:
         27:d1:4d:c9:64:22:54:3b:a2:08:bd:5d:da:e6:2a:43:eb:3a:
         cd:65:78:61:a6:c2:b1:11:7e:85:a7:73:44:61:5e:e7:17:bd:
         cf:7b:ca:05:ab:f9:98:6c:54:ad:eb:dd:39:e4:55:9d:45:3f:
         ee:86:fe:e7:22:4f:2b:7b:22:5c:36:b7:fd:cf:bc:1c:82:bc:
         bc:f8:bc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org