Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/oUbRmXJIPjLT2vx-Hpx-wxujQFk.roa
File:                     oUbRmXJIPjLT2vx-Hpx-wxujQFk.roa (raw, json)
Hash identifier:          AvzNvvqbOj7FxLZn+UPPR+wSFlFvoabr5dZfHxU1E6w=
Subject key identifier:   A1:46:D1:99:72:48:3E:32:D3:DA:FC:7E:1E:9C:7E:C3:1B:A3:40:59
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02E0
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/oUbRmXJIPjLT2vx-Hpx-wxujQFk.roa
Signing time:             Sat 31 Aug 2024 01:44:40 +0000
ROA not before:           Sat 31 Aug 2024 01:44:40 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        118.86.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736 (0x2e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:44:40 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=A146D19972483E32D3DAFC7E1E9C7EC31BA34059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:c6:69:2e:ba:de:f7:3e:c3:b3:82:b8:a0:
                    d8:c1:44:c3:90:53:56:14:c5:cb:bd:3c:8f:db:cb:
                    ad:d0:15:3e:58:26:ac:48:4b:8c:23:78:be:80:2f:
                    68:01:a6:a7:b8:4a:1e:c8:29:7d:50:13:53:1f:f9:
                    b4:b0:f9:5e:6c:f6:26:b2:0b:a8:e5:0f:01:77:f1:
                    42:78:7e:f2:11:af:1b:0b:a7:f9:bf:4b:c6:da:bf:
                    5e:30:b1:ce:67:cc:9b:25:87:4e:31:b0:52:b4:15:
                    06:9e:80:67:ab:e5:f1:a5:48:bf:f0:34:39:f3:43:
                    91:cd:1d:83:cc:79:f0:a2:d3:7b:18:18:11:a0:10:
                    8e:4c:02:a0:d0:b8:93:99:66:f2:ff:d4:23:67:60:
                    75:fe:ff:b9:90:06:6f:e3:93:c4:56:e7:14:f4:37:
                    28:5d:ac:a5:44:cb:30:03:18:db:e1:01:cc:b1:69:
                    70:6c:c6:e5:55:17:67:45:3a:47:9f:e7:68:6a:20:
                    14:8a:cd:09:55:6a:06:f4:04:fe:54:e6:a6:65:1c:
                    78:1d:cd:ac:2f:08:67:97:6c:c0:a4:de:87:9e:91:
                    b6:83:84:61:5e:55:11:6a:99:83:dc:ae:7b:14:ca:
                    7e:54:73:2e:12:04:3f:c6:42:90:2d:59:40:34:77:
                    1d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:46:D1:99:72:48:3E:32:D3:DA:FC:7E:1E:9C:7E:C3:1B:A3:40:59
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/oUbRmXJIPjLT2vx-Hpx-wxujQFk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.86.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         33:be:d6:a1:8e:eb:4a:43:ec:49:de:79:74:37:9c:fa:99:f2:
         a5:29:4d:88:45:53:4b:36:b2:e7:a7:ba:84:ef:f3:c2:62:21:
         f4:5e:a2:57:f4:51:9d:e5:06:68:9a:63:ac:1b:10:66:b0:8b:
         88:97:95:65:b1:a1:ab:2d:ca:31:c8:dd:be:1e:a4:72:b2:e8:
         72:0b:b5:a6:10:9f:0f:63:03:91:9d:2e:91:07:c3:d8:07:9b:
         1d:ac:cc:e5:62:a2:9e:cd:01:09:f7:07:4d:54:87:19:62:ff:
         e0:8f:22:67:44:2f:56:c7:41:e1:9c:70:3f:c7:80:89:77:81:
         fb:45:08:d4:ed:85:55:25:5e:b8:ec:25:62:b0:48:1f:d5:64:
         2f:b4:4d:68:55:e4:d8:63:f5:f4:64:4f:76:39:6b:49:4d:2d:
         48:82:5a:f8:30:9c:9c:40:69:bb:10:7c:c6:99:4b:59:d0:7c:
         b1:81:17:29:cd:12:73:16:7c:ea:62:19:ed:84:c5:0a:e2:69:
         ae:95:15:b4:8c:e6:88:d1:bb:6d:28:46:b8:cd:84:43:78:48:
         c5:7a:a4:67:37:a3:f1:7e:30:5f:17:d2:5d:ad:ae:ef:a2:12:
         b5:ee:68:a2:35:34:8b:01:75:2e:df:6c:b7:3b:46:e3:67:10:
         d6:f8:42:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org