Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/jm9f4o6_r70ic3XFnuC8BE3_ixQ.roa
File:                     jm9f4o6_r70ic3XFnuC8BE3_ixQ.roa (raw, json)
Hash identifier:          C1VMqI75svWhVC6VTPCjObu8hql7bmIZJgY/bDzgCYo=
Subject key identifier:   8E:6F:5F:E2:8E:BF:AF:BD:22:73:75:C5:9E:E0:BC:04:4D:FF:8B:14
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0296
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/jm9f4o6_r70ic3XFnuC8BE3_ixQ.roa
Signing time:             Sat 31 Aug 2024 01:39:01 +0000
ROA not before:           Sat 31 Aug 2024 01:39:01 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        202.78.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662 (0x296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:39:01 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=8E6F5FE28EBFAFBD227375C59EE0BC044DFF8B14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0b:97:37:f2:44:41:7c:b1:ba:16:f5:d0:70:
                    c0:4e:7a:6a:ac:18:92:b3:c4:0c:d7:79:96:2f:74:
                    39:e7:31:c8:8e:41:2e:4a:eb:63:04:af:a9:fa:58:
                    cf:90:47:60:ed:28:ef:be:19:cf:87:59:47:79:49:
                    d4:5c:ea:8a:0d:32:0f:e8:b7:67:8f:23:aa:59:e4:
                    84:1a:10:95:33:6f:89:30:64:d6:93:67:52:2a:25:
                    28:44:69:63:1b:3a:c9:68:09:fc:74:fa:38:82:8c:
                    34:fd:64:c1:14:e0:46:58:2e:8b:18:67:5d:ef:99:
                    d2:2f:b0:5a:26:75:4f:8d:01:e1:4e:d2:74:9d:4a:
                    13:3f:e2:0c:48:fc:0f:45:45:67:10:3d:02:67:7c:
                    ca:ce:1f:89:38:1e:fb:c6:2d:3b:29:9a:21:5b:cd:
                    40:11:9f:35:09:d8:b6:b8:c0:a1:89:1c:bf:81:da:
                    0e:eb:6c:1d:72:74:30:4f:f5:03:ae:9f:b4:2e:4f:
                    09:dd:b8:fd:a6:76:e7:36:7a:b1:92:8f:57:e4:1f:
                    51:e9:15:19:5a:b9:1e:dd:e7:46:8b:fc:8a:8c:18:
                    83:f6:54:b7:45:d0:ec:cc:ca:97:09:6e:1e:f7:66:
                    d2:68:ad:76:d0:6a:8a:3b:f5:80:12:fd:c3:f2:f2:
                    9d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6F:5F:E2:8E:BF:AF:BD:22:73:75:C5:9E:E0:BC:04:4D:FF:8B:14
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/jm9f4o6_r70ic3XFnuC8BE3_ixQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:03:6f:65:a7:b7:51:76:86:8f:72:73:04:cf:ff:59:f9:de:
         ae:ba:cf:20:95:66:87:d5:e6:3a:8c:b7:f9:5c:9b:6e:08:87:
         f8:84:71:68:7d:d9:96:70:fa:26:78:ff:25:b5:93:fe:cd:cf:
         e4:e5:56:2f:b2:e7:0a:61:8f:64:86:81:24:75:2b:23:59:e5:
         62:cb:17:a6:50:20:cc:61:cb:dd:d2:0d:25:5e:c4:1a:fa:86:
         b6:73:9d:36:c5:52:1d:7f:6a:53:09:cb:4d:14:e8:6a:6c:e8:
         ce:b4:d6:11:75:c7:3c:7b:83:73:0b:ca:09:0a:7b:67:1b:a8:
         99:11:ed:f0:1a:fd:d8:34:02:cc:5a:dc:b6:ea:2c:08:8d:8c:
         cd:6a:3b:e9:25:87:8d:29:b7:73:3c:1e:85:b9:ce:ae:32:6d:
         47:43:36:7a:3e:50:59:22:68:ba:dc:a1:9f:6f:34:80:70:64:
         a0:28:5b:dd:17:e5:35:c4:fb:46:11:f9:5b:1c:ad:38:c2:7c:
         3c:a3:69:a9:2a:a3:90:b3:18:de:6d:3d:92:b7:7b:2e:57:78:
         f5:3f:db:e6:50:5f:01:0a:32:2b:8f:5e:56:68:8c:ff:58:c1:
         a8:af:f9:61:11:2f:f9:95:b0:79:4e:80:0a:51:5e:b5:4b:cb:
         13:6b:d1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org