Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/kSt7_iP7ND1ajnxyIOYEFY-06rU.roa
File:                     kSt7_iP7ND1ajnxyIOYEFY-06rU.roa (raw, json)
Hash identifier:          KKrE2wW/qb/bCDIYMEHYPlX3cFYOLgnqfTQYAI5IbJU=
Subject key identifier:   91:2B:7B:FE:23:FB:34:3D:5A:8E:7C:72:20:E6:04:15:8F:B4:EA:B5
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02CD
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/kSt7_iP7ND1ajnxyIOYEFY-06rU.roa
Signing time:             Sat 31 Aug 2024 01:43:02 +0000
ROA not before:           Sat 31 Aug 2024 01:43:02 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        211.124.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717 (0x2cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:43:02 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=912B7BFE23FB343D5A8E7C7220E604158FB4EAB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:1a:e4:65:55:99:f0:ea:a7:2c:6a:c2:8b:
                    71:58:da:e8:4f:5c:2c:71:36:a2:de:ef:42:79:31:
                    68:ab:8c:a7:23:5c:01:46:18:c0:df:93:73:fc:ab:
                    e3:0c:f6:12:5d:89:1e:3e:f8:21:b4:86:86:13:49:
                    b9:98:82:68:1d:63:76:b3:47:14:ed:4d:6f:3c:d4:
                    c3:23:1b:df:4b:d7:da:1c:4e:98:34:bd:4f:93:c2:
                    c9:14:25:a5:a6:93:28:a0:12:fa:3d:6a:59:c9:3d:
                    ab:a3:5a:7a:38:9a:e6:93:a8:13:f8:c8:d2:15:3b:
                    c4:a2:46:6b:84:a4:30:06:0c:7f:d3:e4:d2:32:f2:
                    8c:2c:21:54:19:1e:fa:4f:4c:55:b9:41:79:2e:09:
                    29:12:ae:98:e3:0c:52:a6:93:3e:05:6f:df:49:71:
                    7e:79:55:d4:67:b8:3c:10:86:56:9d:03:3a:78:ed:
                    63:f6:ff:02:cb:63:81:4c:39:99:33:6f:88:23:1e:
                    fd:70:b1:64:0b:30:60:5d:a9:75:41:65:78:1b:26:
                    db:b2:3f:d3:d4:ba:64:d8:6e:59:b6:d6:b7:97:5c:
                    0a:c3:21:7d:67:d9:ba:a2:62:a2:31:79:5f:55:22:
                    a3:0d:ec:f3:01:27:8d:34:e4:bb:ba:f5:86:f4:7d:
                    f8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2B:7B:FE:23:FB:34:3D:5A:8E:7C:72:20:E6:04:15:8F:B4:EA:B5
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/kSt7_iP7ND1ajnxyIOYEFY-06rU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.124.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3f:bc:a4:ee:f8:0f:0d:ad:23:bf:ce:c5:7f:f0:3a:82:ee:31:
         ad:1d:02:4d:89:2b:3c:d8:52:ae:f8:e8:0c:39:72:a7:66:16:
         bf:ec:8d:fa:17:34:93:3c:f0:04:2b:4c:01:52:78:08:0c:8f:
         ff:41:f6:fa:1d:1e:84:07:13:b0:21:90:2c:c0:31:54:f3:ba:
         02:07:eb:10:49:3e:66:2d:60:10:e6:bc:a2:8f:b1:31:dc:c5:
         ce:13:f7:c1:19:63:8e:8d:bb:d0:16:fb:2a:ad:33:f2:c7:8f:
         95:27:f9:f8:35:de:cd:f4:71:1e:b6:fb:e8:5f:28:44:9e:6f:
         e8:da:59:4e:c9:58:7a:e9:4a:49:c8:eb:fe:e6:9a:38:d0:f9:
         e8:7a:e5:3a:ee:fa:e3:90:b3:41:55:b1:f9:4c:aa:07:4a:01:
         da:a6:e2:b1:11:61:fa:f2:69:5e:18:e0:52:59:ba:ad:af:9d:
         04:11:58:59:42:91:0b:c6:d0:f5:ff:cc:b7:76:e8:25:54:bc:
         21:2d:36:28:6b:38:51:5d:33:f9:ea:a7:9c:48:84:2e:72:35:
         12:27:c2:ba:00:dd:4e:c4:90:e3:2d:78:d6:09:19:cb:68:19:
         8d:9b:9f:69:09:bb:8a:6c:75:88:62:22:7e:58:ce:63:e6:fb:
         97:96:26:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org