Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/jEeQL8juc5-4kwFjwd0AAViuQ9U.roa
File:                     jEeQL8juc5-4kwFjwd0AAViuQ9U.roa (raw, json)
Hash identifier:          vmiAvl/dUeHfsBq6gDhZlcfXy1ctzww6yQ1N4CWZCkc=
Subject key identifier:   8C:47:90:2F:C8:EE:73:9F:B8:93:01:63:C1:DD:00:01:58:AE:43:D5
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       022E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/jEeQL8juc5-4kwFjwd0AAViuQ9U.roa
Signing time:             Sat 31 Aug 2024 01:33:24 +0000
ROA not before:           Sat 31 Aug 2024 01:33:24 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9378
IP address blocks:        61.215.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:33:24 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=8C47902FC8EE739FB8930163C1DD000158AE43D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:62:81:3b:78:4b:a7:c1:54:c3:98:1f:b4:77:
                    b9:85:fa:c0:d8:14:3f:3e:0a:51:46:be:f0:3c:8d:
                    dd:08:4e:7a:8b:8d:92:b8:e5:3f:42:1a:92:5f:a1:
                    c7:0c:0a:10:7c:88:59:ab:87:71:d3:07:61:0a:aa:
                    bd:49:77:5b:84:c4:2a:3c:57:ec:bb:6a:e5:5e:23:
                    1f:be:06:27:b1:c7:17:62:db:9d:7a:8a:c7:8f:4d:
                    8f:52:7f:5b:ec:d4:aa:2f:75:b5:ee:59:73:40:27:
                    5b:2f:02:ae:ef:48:2a:5d:78:aa:23:e8:81:9f:0e:
                    b0:59:9f:53:31:55:f2:6c:13:54:6f:15:4b:2b:72:
                    bb:ef:8b:21:f0:1e:83:db:3d:f1:07:1a:f4:79:11:
                    d8:ea:90:ab:4b:1b:c5:4e:d6:b7:71:72:7c:fa:40:
                    44:77:6d:1a:99:e5:2a:7f:38:c1:52:fd:37:67:a2:
                    53:6d:fe:81:1a:ee:b2:ac:2d:c3:d4:ba:e2:b4:2b:
                    2f:47:87:4f:fd:e7:f3:05:5c:e9:6c:17:04:b3:d2:
                    d0:54:1f:c8:06:93:bf:da:7d:16:25:97:ce:d8:06:
                    e0:c9:79:95:09:fc:88:c3:8b:f4:46:a7:47:db:c7:
                    67:67:30:a4:61:c8:00:34:ca:27:bd:ac:04:d0:1a:
                    0a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:47:90:2F:C8:EE:73:9F:B8:93:01:63:C1:DD:00:01:58:AE:43:D5
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/jEeQL8juc5-4kwFjwd0AAViuQ9U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         72:9b:9a:b6:2e:46:3d:e2:ab:47:bd:29:41:58:dc:cf:b3:a2:
         3a:9c:fb:32:56:86:f8:8f:52:ad:c1:37:c4:61:59:20:b2:6f:
         12:2c:fd:cc:ca:65:c0:07:08:4e:e5:2e:2a:f9:be:1a:25:7c:
         ae:ef:b4:9b:7c:a1:f5:a7:90:b4:b7:9f:0e:30:01:7d:44:94:
         0a:02:36:8e:11:79:41:22:b0:bf:19:23:80:95:04:01:34:bc:
         08:92:98:e5:7e:87:f8:e8:76:0e:e0:ce:d7:86:6d:d0:e0:89:
         57:3b:88:53:84:73:28:b7:87:f9:79:d9:e0:b8:a6:81:5e:04:
         8e:49:93:f7:aa:ed:ed:da:df:34:04:6f:d9:77:de:3a:f5:42:
         29:40:4b:63:55:b4:90:79:48:1f:39:a9:2e:d6:c5:16:aa:f2:
         7c:c7:51:13:7d:2b:e3:2a:2c:84:75:37:76:5f:e6:92:12:15:
         05:4c:8c:3f:cc:af:19:bb:10:1f:ab:3b:5b:3c:40:1c:a0:f5:
         c9:c4:34:ab:d1:a7:25:67:36:94:6e:4c:f3:1c:af:0e:88:a2:
         7d:7d:f9:0c:c0:8c:d9:e4:75:53:d5:36:dc:af:82:bb:1e:1c:
         37:15:5a:13:2a:e9:2d:be:ca:cd:0c:51:21:05:2b:62:0a:e6:
         9b:af:56:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org