Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/juui58OP5dP5caKCm3p_EDoLGf4.roa
File:                     juui58OP5dP5caKCm3p_EDoLGf4.roa (raw, json)
Hash identifier:          5pCDT27Bu6BeOuPJtqor3Lfe8mIr0tt1Sm4DiscXx8M=
Subject key identifier:   8E:EB:A2:E7:C3:8F:E5:D3:F9:71:A2:82:9B:7A:7F:10:3A:0B:19:FE
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       021E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/juui58OP5dP5caKCm3p_EDoLGf4.roa
Signing time:             Wed 31 Jul 2024 01:29:15 +0000
ROA not before:           Wed 31 Jul 2024 01:29:15 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     23788
IP address blocks:        103.192.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul 31 01:29:15 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=8EEBA2E7C38FE5D3F971A2829B7A7F103A0B19FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:e2:9c:de:d3:f9:8f:4b:c8:19:f9:22:b5:
                    bd:6d:cf:c7:02:e7:1c:c6:3e:f0:7a:60:e9:2e:e0:
                    a3:35:78:1e:77:5a:f7:a6:20:1f:61:ed:9a:95:54:
                    d4:69:f3:ed:0b:1b:1f:b6:78:56:30:62:9e:27:62:
                    d3:62:0b:db:f4:20:45:0b:47:31:a2:c9:b2:fb:e2:
                    6c:42:04:59:1b:33:6e:ba:b8:ec:92:7b:2d:ce:cc:
                    c1:99:e6:bf:3b:98:a4:aa:8d:ac:3f:aa:32:b1:34:
                    ed:d4:96:ec:59:5b:47:24:22:05:e3:4b:7a:ba:62:
                    55:f1:4c:ac:88:0a:fd:fd:d3:e0:ed:9f:f9:03:87:
                    a0:53:aa:49:8c:fc:3b:d5:44:ed:3f:65:f3:a3:ac:
                    12:02:b2:cd:2a:4a:61:44:e9:cf:79:63:f6:05:0b:
                    75:9b:cb:24:81:31:f7:f4:76:95:1e:92:c5:eb:d5:
                    1f:12:d1:18:70:c5:1a:2c:37:8d:07:78:59:e4:c7:
                    68:67:11:04:f7:f5:7c:fb:47:5b:e3:09:96:ee:1c:
                    d0:90:03:1b:da:8e:2d:18:2f:09:2c:40:6a:2b:1a:
                    88:9e:71:52:76:e4:57:a1:1d:03:4a:5e:6f:cb:d1:
                    d6:f1:63:f5:01:f5:9d:0c:e0:b3:0c:1f:3a:e9:e3:
                    28:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EB:A2:E7:C3:8F:E5:D3:F9:71:A2:82:9B:7A:7F:10:3A:0B:19:FE
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/juui58OP5dP5caKCm3p_EDoLGf4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:ef:a6:a4:17:20:b1:7b:24:bb:0e:df:c9:44:ae:c3:d0:16:
         9b:a4:2e:07:b2:cf:7f:43:e9:69:7e:98:08:a9:3a:b3:f7:59:
         00:fb:0a:af:d0:29:e4:57:1c:ef:f9:99:1f:02:14:c1:63:f1:
         bf:9e:a9:9f:4b:67:28:f3:14:62:eb:0a:df:78:d1:2c:ef:1f:
         e9:ce:3f:80:71:71:87:9b:3c:f7:6f:df:90:83:f4:34:1b:0f:
         5f:d8:d7:94:e5:d8:d8:fd:6d:65:cd:90:ac:ae:cb:0f:31:e8:
         b7:d3:a4:07:c9:c6:96:36:69:dd:a9:df:39:b3:77:27:16:a0:
         f5:20:e6:51:5e:2e:ec:21:8e:7e:e2:73:1f:11:be:f4:9b:5e:
         9f:49:9f:86:be:6d:0d:fa:11:14:63:97:d9:d5:f4:1f:7a:f6:
         76:be:bb:6d:64:bc:e0:87:5b:c3:32:ea:4e:27:57:ee:1b:c4:
         48:66:08:0d:a2:9d:25:e9:ad:0d:6a:ea:79:13:b5:11:b5:34:
         01:22:4e:c4:35:7b:4c:10:8b:db:68:02:a8:ca:8d:d0:99:22:
         c5:59:84:60:01:c7:48:44:a4:a9:c7:08:33:7f:34:75:77:62:
         74:ab:f2:4b:66:84:7c:02:ac:09:8c:04:8a:dd:17:07:48:a3:
         30:ef:b5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org