Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/gR3tJ_5uVN1wKeb43Ffyi0ccRi0.roa
File:                     gR3tJ_5uVN1wKeb43Ffyi0ccRi0.roa (raw, json)
Hash identifier:          OfJwkGJSDF+8d8BDisxhLVmmAFNpsb6fr/wqfhm6x2M=
Subject key identifier:   81:1D:ED:27:FE:6E:54:DD:70:29:E6:F8:DC:57:F2:8B:47:1C:46:2D
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0233
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/gR3tJ_5uVN1wKeb43Ffyi0ccRi0.roa
Signing time:             Sat 31 Aug 2024 01:33:26 +0000
ROA not before:           Sat 31 Aug 2024 01:33:26 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        110.93.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:33:26 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=811DED27FE6E54DD7029E6F8DC57F28B471C462D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d2:86:0b:d6:10:05:af:98:88:c4:5c:1b:a5:
                    a7:65:4e:3a:8b:bd:a9:30:b5:58:b7:b0:53:a8:a9:
                    da:d0:d8:46:83:0a:09:80:d0:53:4c:da:26:2f:24:
                    17:88:03:48:e6:45:f6:4a:1f:91:d8:ce:c8:a3:c9:
                    d9:e2:e2:04:00:72:da:11:60:51:e9:9f:ec:4e:b0:
                    57:7f:06:54:c8:0d:fa:28:4e:75:39:e5:6f:fd:15:
                    f8:0c:f2:9d:31:fc:88:85:54:da:1b:32:1f:78:49:
                    79:b7:2a:b0:97:5b:b3:90:97:01:dd:d8:42:f9:68:
                    62:47:a7:d3:e6:23:e9:b9:bd:c1:f0:ec:ae:f0:59:
                    11:ce:94:df:0e:cf:a1:60:a3:57:f5:d3:a2:79:18:
                    5f:45:c4:16:24:d5:99:fe:b5:64:27:c6:8c:05:ce:
                    85:b2:0e:7e:25:9c:d8:cc:5f:37:c1:36:05:dc:1b:
                    91:e2:b1:9b:20:25:8f:6c:85:d4:f3:16:e3:47:36:
                    45:f0:81:4c:39:9e:45:ba:0d:3c:85:f6:7d:00:14:
                    5d:9f:9f:dc:76:3f:ff:88:46:c1:ad:8a:b7:70:6b:
                    6c:fa:78:d2:28:b0:ce:21:9c:a4:8c:af:ba:51:e8:
                    52:fb:ac:03:ea:16:dc:bd:8d:45:97:77:a9:47:73:
                    f6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1D:ED:27:FE:6E:54:DD:70:29:E6:F8:DC:57:F2:8B:47:1C:46:2D
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/gR3tJ_5uVN1wKeb43Ffyi0ccRi0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.93.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         de:39:95:62:8a:9d:70:5d:36:1c:04:cb:41:13:71:5d:88:a2:
         11:7d:be:ca:a5:74:ac:3d:60:d6:1f:a8:f6:e1:6a:59:da:2f:
         61:97:d2:32:2c:c0:2a:94:78:aa:f1:0a:7f:ba:b8:c1:77:23:
         5c:ae:a2:db:4c:c0:22:c9:d5:25:a1:c6:9d:4f:22:39:79:0b:
         94:cb:d4:ff:3e:f3:73:49:ed:e8:cb:f5:f5:fe:31:aa:c8:1f:
         28:fe:7f:5e:4a:f8:86:c8:32:b1:b3:f9:fd:ae:c6:30:06:dd:
         88:d4:4e:6d:23:50:be:b0:2e:34:46:58:5e:30:79:fa:a9:ba:
         5b:9b:0d:58:b8:68:43:9c:39:1d:98:65:34:e2:b5:45:ae:b3:
         c5:1b:69:89:5a:86:0d:26:8b:cf:3b:d1:af:ac:7b:c5:db:47:
         86:f4:d5:78:5b:c7:91:b6:93:3e:bd:8d:2d:a7:01:d9:56:71:
         8c:0f:bb:5e:ad:55:56:d9:93:35:94:fb:1e:1f:4c:91:d8:5e:
         55:08:b7:59:f1:b4:6a:06:96:28:09:01:a2:a4:b0:86:43:84:
         a7:cf:d8:b0:5b:a3:6d:6e:e0:ae:0f:27:bd:bc:40:06:2c:b8:
         0a:1c:27:82:78:10:c4:67:5d:62:88:9b:42:47:ec:3f:0f:52:
         62:6a:45:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org