Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/s6EyscUIto-SpkcpmbM-qsOSUGg.roa
File:                     s6EyscUIto-SpkcpmbM-qsOSUGg.roa (raw, json)
Hash identifier:          vRoBuDOwo8cfMbv72JsnGCmoY4wQAGMW4E27CKt44J0=
Subject key identifier:   B3:A1:32:B1:C5:08:B6:8F:92:A6:47:29:99:B3:3E:AA:C3:92:50:68
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01FF
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/s6EyscUIto-SpkcpmbM-qsOSUGg.roa
Signing time:             Sun 30 Jun 2024 01:29:48 +0000
ROA not before:           Sun 30 Jun 2024 01:29:48 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     4721
IP address blocks:        203.114.248.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jun 30 01:29:48 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=B3A132B1C508B68F92A6472999B33EAAC3925068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:68:43:4d:76:a6:07:d4:42:ca:ad:4c:d6:4a:
                    f6:00:e3:f3:44:b2:6c:ac:78:d2:1b:3d:3c:9e:5d:
                    23:33:fa:af:64:36:f2:46:55:b1:dd:f4:d5:3f:37:
                    d6:8a:e1:59:bf:24:9c:c9:34:df:b5:1a:93:4b:28:
                    89:16:54:22:6d:ab:e1:68:6f:04:49:9d:df:95:16:
                    ac:69:d6:ff:f8:be:1f:ac:27:31:6b:04:34:88:7c:
                    c0:f1:0f:8a:e2:b5:3a:04:48:30:a4:0c:10:90:b6:
                    41:7a:64:db:fc:00:e1:bb:24:fc:31:7d:1f:fe:a2:
                    5d:6f:cc:c3:47:fd:5a:00:c1:43:9a:98:49:11:14:
                    6d:a9:b0:9f:37:39:43:3f:80:db:32:94:83:51:0c:
                    14:c9:86:a3:04:a7:0f:c8:8c:3e:72:5d:02:99:a0:
                    9d:6b:b4:6b:a6:4d:6a:f1:df:f8:5d:ba:ca:24:3a:
                    bc:4a:52:24:dd:1f:d7:c4:51:71:4d:76:fb:c5:d0:
                    1a:b9:4e:de:8a:c4:84:f8:a4:90:ef:7d:a6:19:73:
                    c8:4c:be:c7:9f:70:af:bf:f6:83:0a:76:93:1e:78:
                    a6:5f:2e:5f:cb:e1:96:4f:23:dd:37:af:ca:5c:04:
                    48:9e:a1:f8:68:cb:d0:9c:38:b6:d3:ed:3c:08:f8:
                    22:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A1:32:B1:C5:08:B6:8F:92:A6:47:29:99:B3:3E:AA:C3:92:50:68
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/s6EyscUIto-SpkcpmbM-qsOSUGg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.114.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:0b:68:cb:b2:69:2e:78:9c:8c:79:60:cf:3f:63:b8:13:4b:
         63:38:77:db:63:7f:bf:15:7a:15:0a:73:11:29:72:72:97:dd:
         96:9a:77:0f:c9:b1:b8:d3:64:75:9c:5e:93:50:e3:2d:c9:14:
         75:37:e7:48:5d:02:0c:0d:21:39:79:d0:8b:c6:22:40:76:41:
         18:be:18:28:72:39:59:5b:ac:4e:27:83:f8:3d:5a:17:a5:20:
         a4:22:31:b7:a2:f0:ba:41:b3:e9:c0:3c:11:d4:b8:98:af:23:
         0d:fa:48:ec:98:df:d9:04:eb:88:13:70:a3:54:0e:51:47:b3:
         ee:a9:17:b1:a2:1e:72:03:a2:f5:e0:b9:16:d6:10:15:eb:78:
         80:30:c7:22:55:73:d4:3c:fe:cb:f1:a0:5c:ae:3f:a7:44:e6:
         1f:c4:e0:57:86:9d:d3:4e:87:be:e5:bf:14:6f:ea:9a:7c:38:
         d2:58:06:e8:9b:65:d6:cc:10:f2:ca:59:42:e5:87:e5:d1:93:
         a1:f7:4e:29:38:0c:85:78:21:37:cd:c3:ed:41:f0:a5:f9:42:
         39:e6:cf:fa:f3:c5:3b:57:36:b5:b9:73:8f:03:ac:5e:f3:af:
         e9:07:23:a4:d0:cc:2d:d1:70:22:24:8d:f6:1b:96:91:f4:38:
         ab:c7:fa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org