Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/rXazuNm28VTcymuJk21fMIQMdOU.roa
File:                     rXazuNm28VTcymuJk21fMIQMdOU.roa (raw, json)
Hash identifier:          6QJbbIuArojJJ+jJRKYTFdmTd9qxp1MCn6zSvCFcyAY=
Subject key identifier:   AD:76:B3:B8:D9:B6:F1:54:DC:CA:6B:89:93:6D:5F:30:84:0C:74:E5
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0282
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/rXazuNm28VTcymuJk21fMIQMdOU.roa
Signing time:             Sat 31 Aug 2024 01:38:54 +0000
ROA not before:           Sat 31 Aug 2024 01:38:54 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        114.198.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:38:54 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=AD76B3B8D9B6F154DCCA6B89936D5F30840C74E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:16:5a:6d:05:78:52:61:8b:89:f7:cb:4a:a2:
                    fb:84:2e:ff:f6:56:5d:52:dc:1b:83:90:dc:3c:75:
                    b8:58:ca:e0:76:ad:ce:82:84:74:89:a2:df:b6:fb:
                    c7:e1:5a:e5:2e:10:69:c6:6f:36:fc:84:5a:c5:8d:
                    fd:3a:0f:fb:0b:8f:de:38:81:38:32:70:6a:8e:7d:
                    5f:86:22:f1:64:bd:a0:ed:0b:66:81:2f:7a:e1:91:
                    d6:78:5d:09:6f:be:c1:9b:6c:f1:81:83:fa:31:c4:
                    2d:dc:80:74:f8:3c:34:86:7d:07:de:69:f9:14:34:
                    05:d8:c7:0e:d6:d2:dd:c2:f7:bc:a1:80:36:fb:e2:
                    47:7b:74:dc:db:a6:0d:33:29:6a:c1:31:51:ae:47:
                    b3:56:b2:7e:66:51:8c:bd:0a:35:5f:8a:32:b9:73:
                    16:da:10:6b:58:c9:2d:39:48:5a:c5:18:c1:8e:5c:
                    af:89:6c:5e:ce:b5:92:47:a6:ee:1a:b9:04:9f:bb:
                    cc:15:d0:ad:37:76:6e:bf:55:3e:a3:8e:1d:ee:79:
                    ef:22:e7:31:a3:5b:14:85:d3:f6:39:98:4c:5e:41:
                    53:7c:d4:87:b9:a6:d2:aa:d9:7c:e2:2b:e0:5f:29:
                    d2:3e:6a:0f:cc:55:96:48:10:01:3d:86:46:55:7f:
                    be:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:76:B3:B8:D9:B6:F1:54:DC:CA:6B:89:93:6D:5F:30:84:0C:74:E5
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/rXazuNm28VTcymuJk21fMIQMdOU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         79:30:6e:fe:95:ee:49:e6:b6:85:29:f3:11:17:df:17:2c:28:
         3c:df:04:5b:2c:ba:ff:99:f5:b3:05:b0:cd:60:a6:ca:34:b3:
         ac:d5:2b:7d:e9:ee:3c:0f:e5:00:a0:6a:80:81:e1:b7:f5:1e:
         64:e2:55:1d:5a:83:45:c3:b3:d4:fa:26:29:49:32:85:ed:ff:
         80:5d:91:70:01:56:54:5b:23:6e:54:20:80:37:13:fb:62:fe:
         7e:67:4b:0b:cf:c3:25:8d:99:f1:d0:9a:e6:66:ba:d2:28:0c:
         ea:0d:ad:d4:47:15:09:20:72:0b:8c:f5:27:e6:2e:95:0e:04:
         1c:7b:0c:17:f3:18:1a:65:78:b6:3c:d0:ec:25:9e:ac:b9:40:
         5d:db:66:dd:3d:38:5c:5b:27:c9:c6:aa:7b:34:28:cf:d6:ab:
         57:dc:f0:f7:7c:24:9f:93:bf:e8:ed:cc:ff:90:11:94:9e:98:
         fb:b1:bf:9f:db:92:66:9e:af:80:91:ac:e0:fc:ca:a5:4b:2b:
         50:85:b8:7f:2b:8c:a7:46:19:db:18:5b:3c:90:3b:f5:da:bf:
         df:1c:17:02:da:ed:bf:c7:38:9e:b3:b5:06:70:7a:d5:a2:cd:
         2e:51:43:63:99:c3:30:81:97:81:a4:6e:b0:81:8a:a5:b5:a1:
         3b:4d:20:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org