Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/kmUSS0bFC7kszJqpPNNC8JnqH8k.roa
File:                     kmUSS0bFC7kszJqpPNNC8JnqH8k.roa (raw, json)
Hash identifier:          gU8wQ5wpL0x8wLekGz+qXuqiYmUF/4bjOXtinQHis5U=
Subject key identifier:   92:65:12:4B:46:C5:0B:B9:2C:CC:9A:A9:3C:D3:42:F0:99:EA:1F:C9
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0242
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/kmUSS0bFC7kszJqpPNNC8JnqH8k.roa
Signing time:             Sat 31 Aug 2024 01:33:32 +0000
ROA not before:           Sat 31 Aug 2024 01:33:32 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     18134
IP address blocks:        122.50.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:33:32 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=9265124B46C50BB92CCC9AA93CD342F099EA1FC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:69:ee:0f:aa:bf:b1:db:38:52:b3:c5:c2:
                    7c:1a:3d:d3:6e:ea:b0:e6:d4:06:68:19:49:b6:72:
                    79:35:87:85:f0:25:b2:3b:3f:00:aa:5c:e5:8d:7b:
                    dc:0b:c2:ff:48:b4:1b:19:69:74:59:de:ff:bb:05:
                    db:fc:c1:86:aa:85:af:41:ef:04:e1:b7:fc:0a:e7:
                    6b:97:18:65:5d:4f:95:48:21:bd:b7:1f:ca:ec:68:
                    cd:9d:1c:05:bb:f6:51:08:35:9f:1e:87:98:38:8f:
                    1b:f0:cb:da:2e:fd:6d:83:b5:b5:3d:69:65:7a:9f:
                    7a:e8:e2:69:1e:cb:60:7b:7c:76:4f:74:b9:dd:18:
                    2b:fe:b8:99:fd:23:54:e4:24:83:40:c3:d2:e8:f0:
                    39:2e:3d:2d:f3:cf:2c:ab:5a:49:ea:cc:d3:96:b5:
                    92:03:88:e5:4e:56:65:f5:54:b5:ef:b2:7c:64:ac:
                    31:d1:a1:c2:4a:87:2e:88:1c:b8:da:a2:ea:55:b9:
                    6f:3b:74:b5:cf:dc:8c:df:35:fa:9e:82:08:a0:19:
                    b4:35:f3:df:a2:8d:87:3f:81:32:9b:12:c8:4b:26:
                    27:40:72:4d:9b:48:70:87:9f:41:dc:08:5c:19:f6:
                    36:ed:7f:02:16:29:6d:e2:19:8f:8a:97:b9:2f:54:
                    fe:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:65:12:4B:46:C5:0B:B9:2C:CC:9A:A9:3C:D3:42:F0:99:EA:1F:C9
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/kmUSS0bFC7kszJqpPNNC8JnqH8k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.50.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         21:f8:a9:b9:76:b5:6a:2a:66:67:37:4a:a9:06:7a:65:68:82:
         be:2a:5a:7e:3d:32:89:9b:6f:29:13:85:38:d2:d5:d5:f9:96:
         10:84:3a:ea:c8:fa:ae:02:fa:32:c8:21:88:60:9d:f5:4d:c5:
         9a:15:5c:c1:8d:95:37:b3:5c:9f:3d:f7:b7:93:92:1f:79:65:
         fe:db:fc:43:57:25:23:bb:0b:8c:b3:13:2b:ee:39:32:bb:a5:
         d0:b6:e4:91:81:62:78:de:de:71:83:92:11:4b:49:54:df:88:
         94:e5:be:a9:77:39:ab:70:0d:e0:3c:54:b0:14:66:73:ba:41:
         a7:a7:62:cf:1c:ed:23:66:2b:4e:5d:bc:e8:94:77:e3:26:22:
         4d:a3:4a:d2:69:b7:ab:a3:c5:ac:4e:36:30:40:cb:47:29:b9:
         ee:50:60:b3:de:e5:6c:2f:24:0e:9c:c1:54:f3:a4:06:92:71:
         1f:00:26:d3:61:10:da:d1:3b:b2:44:ae:df:5e:15:00:d4:b2:
         16:c7:3e:e8:19:2f:b1:c4:d6:72:08:84:41:98:0c:e8:13:4b:
         e4:13:16:b0:54:ba:0c:90:c6:19:c7:9a:71:7c:1e:3c:e2:dc:
         81:70:e3:7f:ac:ca:ba:c8:ce:82:3d:06:cd:00:d0:dc:57:bf:
         6b:60:12:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org