Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/gL6nf-FxcAsuOuuHpLlJidX3k2Q.roa
File:                     gL6nf-FxcAsuOuuHpLlJidX3k2Q.roa (raw, json)
Hash identifier:          YU2iQIaMGaFakeFPhkT6ql+yUDhGqZ6ZsLj8CC788vc=
Subject key identifier:   80:BE:A7:7F:E1:71:70:0B:2E:3A:EB:87:A4:B9:49:89:D5:F7:93:64
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0210
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/gL6nf-FxcAsuOuuHpLlJidX3k2Q.roa
Signing time:             Wed 31 Jul 2024 01:29:09 +0000
ROA not before:           Wed 31 Jul 2024 01:29:09 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        203.153.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul 31 01:29:09 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=80BEA77FE171700B2E3AEB87A4B94989D5F79364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:35:2c:e6:57:72:2a:9a:7c:d3:3b:53:ba:33:
                    d8:6e:d2:38:ce:5d:38:8e:31:58:c7:58:94:f7:c0:
                    e2:0a:c0:92:69:60:36:7c:81:e2:e6:a3:2e:fa:99:
                    31:1a:36:8a:2a:c3:f4:1d:15:0f:ee:6a:b9:17:0a:
                    8a:a4:52:d4:38:90:a9:01:fd:80:c4:26:a8:6f:df:
                    1c:8c:58:a7:1b:5c:08:5d:56:b5:51:9c:1e:13:2e:
                    0b:d7:22:f4:2d:92:8f:3b:6e:e0:9a:3c:96:15:92:
                    ab:55:a0:97:a6:0b:30:41:4e:4d:d7:b0:83:6a:4d:
                    4f:48:00:d6:ec:ea:2c:49:48:d7:a4:9b:3b:86:eb:
                    48:27:af:80:e6:71:b2:f8:9e:cc:6c:dd:20:3c:2a:
                    6a:5f:c0:1e:32:0d:ff:ae:47:e9:0d:c8:03:c7:d9:
                    0f:07:80:c5:b8:03:68:08:63:81:1d:7b:53:60:75:
                    a9:00:26:1e:28:f6:15:b0:cb:dc:5c:77:c0:d8:03:
                    35:d4:73:9e:16:f4:54:07:ec:b2:01:88:7b:42:ae:
                    4e:22:f9:bd:10:6f:6b:b9:ee:65:66:34:e2:ef:c8:
                    74:06:18:09:9a:90:52:11:de:b4:09:c0:b7:ec:36:
                    3e:35:bc:d9:13:17:70:cd:7e:ed:88:5a:d7:5b:f9:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BE:A7:7F:E1:71:70:0B:2E:3A:EB:87:A4:B9:49:89:D5:F7:93:64
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/gL6nf-FxcAsuOuuHpLlJidX3k2Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.153.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:58:57:8a:c7:9f:03:3c:12:b3:20:08:1f:22:e2:91:dc:fc:
         77:2c:a7:93:09:19:c9:72:35:8e:d7:12:8e:f4:19:e4:96:8c:
         88:dd:c6:b9:b3:9f:e0:b3:40:b3:c4:ff:c3:a1:aa:22:06:10:
         bc:4e:8d:dc:dd:2f:0d:e8:31:44:a4:d9:cc:f6:ae:39:59:b3:
         92:f6:74:1f:54:e8:58:92:a2:5e:04:04:8e:1e:92:e9:c2:19:
         03:26:58:83:95:85:9c:11:b1:c7:8a:98:15:0f:6b:d9:8a:0a:
         7f:53:5f:bc:1c:4d:7e:23:a8:37:63:3e:49:1a:51:ff:46:70:
         1f:d4:c3:55:bb:5d:31:af:89:86:07:dd:8c:19:e6:49:09:ba:
         74:90:f6:01:99:09:36:b3:41:7f:65:09:6b:3a:db:35:19:f4:
         8d:94:28:36:7d:18:ce:b8:3a:75:3e:87:a6:7b:26:47:07:37:
         27:20:67:09:cf:2d:7f:89:6d:2c:9d:7f:fe:6c:41:47:9f:b2:
         38:fe:17:2f:55:7a:e4:2f:ac:6b:7d:e4:13:6e:8c:f2:b2:7b:
         fb:08:bb:e9:f6:cc:16:93:78:34:ca:f1:4b:5a:c0:ec:6d:3f:
         3d:01:07:e9:bd:04:5e:e2:97:ed:ef:e0:a1:ab:2f:a8:f7:38:
         d2:f3:46:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org