Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/jxCQMomnIp-opA3whxyNu4ibILw.roa
File:                     jxCQMomnIp-opA3whxyNu4ibILw.roa (raw, json)
Hash identifier:          PyS65DlZNb/aLknpotOvUqJHxzYbGkKOBKdCFTNCt78=
Subject key identifier:   8F:10:90:32:89:A7:22:9F:A8:A4:0D:F0:87:1C:8D:BB:88:9B:20:BC
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0288
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/jxCQMomnIp-opA3whxyNu4ibILw.roa
Signing time:             Sat 31 Aug 2024 01:38:56 +0000
ROA not before:           Sat 31 Aug 2024 01:38:56 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        175.41.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:38:56 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=8F10903289A7229FA8A40DF0871C8DBB889B20BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:b3:4c:5b:81:9f:da:82:3c:81:8f:34:c9:
                    63:98:ff:0f:73:00:c6:e9:5c:d7:78:e6:e3:b2:0b:
                    68:d0:00:be:2a:8f:f2:e2:75:af:b4:86:07:47:bf:
                    38:0b:44:55:c5:a1:34:f1:58:f2:58:b6:c9:5c:92:
                    c8:f1:9d:2f:a8:df:07:1b:57:3d:7a:d1:f7:ef:40:
                    fa:03:7d:32:6f:c1:e8:8d:fe:34:0b:7f:76:c9:34:
                    8a:be:32:3b:84:71:42:fc:1d:91:ee:58:28:d1:0a:
                    b9:f5:6c:dd:83:5b:84:28:77:2e:51:ca:eb:5a:8f:
                    08:2c:f0:90:da:7e:45:a4:2c:8f:6f:d4:c2:62:48:
                    63:0b:34:b7:6d:b2:bd:d0:4d:7c:66:34:9b:48:9c:
                    04:98:8c:c3:ce:96:b0:ae:61:9f:92:03:f2:5f:e2:
                    8d:8d:68:e0:1c:ff:bb:79:78:dd:f6:53:fe:b0:c6:
                    89:ea:c1:68:de:b9:14:ed:8e:1d:15:17:17:28:03:
                    ec:81:10:bf:93:95:cf:c1:0d:b4:3d:e5:bf:8f:7d:
                    d9:0e:5a:ea:0b:7d:50:be:1b:a5:7e:d4:28:41:e7:
                    9a:70:4f:aa:bf:7c:25:d8:a5:a1:2e:c6:03:e4:34:
                    a5:93:4b:0a:83:13:37:fb:44:77:19:1e:5c:82:26:
                    38:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:10:90:32:89:A7:22:9F:A8:A4:0D:F0:87:1C:8D:BB:88:9B:20:BC
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/jxCQMomnIp-opA3whxyNu4ibILw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.41.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d2:4d:1d:2e:01:f5:fb:26:0a:8a:4a:12:c6:bf:c6:e1:32:9f:
         d0:b6:6e:ce:28:74:3a:ad:6d:12:66:34:15:96:da:a3:02:09:
         14:a5:87:a5:11:b9:00:73:2c:32:cd:41:be:14:4a:7c:bb:9e:
         ea:d6:95:36:31:95:28:a4:56:d9:20:26:95:96:9d:a6:ff:ab:
         3c:70:3e:31:07:08:6e:59:6a:b9:8e:2e:97:52:87:4e:76:dd:
         ad:27:fb:61:3b:e1:fb:c4:5a:54:20:dc:5a:79:3c:ea:82:9f:
         41:cc:9f:7a:5d:80:0d:7b:07:2e:ba:94:a9:c0:ae:33:86:dd:
         90:42:fa:e9:03:c1:e1:1e:9a:76:59:ee:18:93:73:da:5c:27:
         cf:9e:8f:46:e7:6a:8e:63:1e:58:e8:8d:2b:c0:06:01:86:0b:
         5b:3e:a5:70:f8:c5:ef:f7:e8:ec:fa:a8:48:65:aa:c7:90:88:
         c2:be:0f:8a:23:88:ad:8b:c1:83:f1:11:e4:9a:c9:76:05:4c:
         b7:ab:c5:d2:25:e6:9d:7d:f2:93:f4:88:6c:05:93:89:b2:27:
         3f:64:c9:99:20:20:31:35:f3:73:af:49:9c:db:7e:3d:e1:f8:
         3b:88:70:63:d1:6b:c4:f0:9f:24:28:af:88:16:70:67:ef:80:
         7a:74:36:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org