Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/sbl5MgZLRn_hEfP37UrWCKgdEKs.roa
File:                     sbl5MgZLRn_hEfP37UrWCKgdEKs.roa (raw, json)
Hash identifier:          BBea6VKri8RcO+epF5Lcw/oVeAnrnlXfqtYsqQ24mzI=
Subject key identifier:   B1:B9:79:32:06:4B:46:7F:E1:11:F3:F7:ED:4A:D6:08:A8:1D:10:AB
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0281
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/sbl5MgZLRn_hEfP37UrWCKgdEKs.roa
Signing time:             Sat 31 Aug 2024 01:38:54 +0000
ROA not before:           Sat 31 Aug 2024 01:38:54 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        114.198.224.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:38:54 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=B1B97932064B467FE111F3F7ED4AD608A81D10AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:12:84:8a:2f:66:b2:45:61:b2:83:a8:74:07:
                    b3:32:45:23:f2:e2:20:1b:4d:39:54:7e:99:e8:ca:
                    95:2a:a1:3b:de:85:93:32:7f:b8:e0:06:c9:e7:7f:
                    83:2a:6a:fe:38:a9:ae:c6:e8:4c:d6:d7:9b:c6:9d:
                    20:52:1e:07:46:37:49:d8:c9:ec:aa:22:6a:f0:ed:
                    5b:b8:88:a9:89:ce:e6:ea:75:d4:2c:ab:86:ca:7d:
                    b3:a9:5b:01:2a:bb:71:dd:91:c9:e2:4c:df:1a:ae:
                    34:fe:19:97:b9:1c:6f:83:3a:bb:2e:53:a8:1a:9b:
                    57:f5:0b:fa:41:f2:b4:b1:bc:6c:97:f8:bf:8a:0a:
                    3b:25:aa:32:00:50:6b:1f:33:da:3f:2c:4b:66:8a:
                    13:a9:19:b4:8f:76:66:49:6f:2e:ba:a7:ca:03:11:
                    91:96:b9:9e:5c:82:5a:a3:75:b3:64:0c:35:50:b4:
                    a8:22:74:f8:af:7b:b8:61:de:8f:15:9d:fd:8d:7f:
                    31:7d:65:d2:1b:aa:7c:27:5b:f8:08:3e:4f:d9:f4:
                    6c:1f:62:b4:f4:19:a1:cd:b5:41:ed:29:4b:e8:8e:
                    4f:f6:b2:d7:c9:c2:4a:51:c2:84:5b:bb:00:e2:8d:
                    c4:60:b7:ad:a2:b0:e3:59:18:9d:f3:06:e7:29:ae:
                    5b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B9:79:32:06:4B:46:7F:E1:11:F3:F7:ED:4A:D6:08:A8:1D:10:AB
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/sbl5MgZLRn_hEfP37UrWCKgdEKs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         49:7c:23:50:35:97:14:36:35:a7:16:8a:63:26:ae:e1:42:9d:
         3f:ac:07:af:94:4b:fd:2d:32:d8:91:77:3b:ab:a5:12:5d:6c:
         43:4f:ae:0c:c5:c2:42:cd:b1:39:c6:a1:04:a4:04:cc:0e:22:
         d8:c8:89:8b:d9:66:69:ae:fb:bd:37:bd:2f:0f:ab:49:64:81:
         45:a7:75:41:50:9e:2e:ac:80:9c:f4:48:a2:a9:d7:f6:69:28:
         ac:8d:65:48:70:6d:f5:9d:1f:7b:a0:b1:a7:5f:e6:8d:fb:47:
         ad:fe:74:c3:a0:09:4f:e8:1d:72:30:d0:3c:29:45:f9:f6:44:
         41:32:af:98:b6:a5:89:62:e3:85:58:98:50:76:5c:af:9a:f8:
         fc:48:ee:73:14:37:cf:da:4e:06:62:2a:12:e2:c4:b4:84:4e:
         3e:54:29:87:d0:e4:6e:f7:a7:39:57:63:c6:f5:c1:a6:b1:62:
         42:c2:85:b0:a3:f9:f0:61:f8:89:ce:8a:a4:9d:4a:5f:d5:a3:
         cb:62:9a:13:a3:fd:bd:63:19:75:e4:8c:df:30:05:59:9b:15:
         89:83:e6:66:66:be:5b:ae:30:47:ea:69:89:cb:43:7e:6e:54:
         50:af:62:04:a9:30:33:cb:52:71:a0:03:b3:3a:ab:20:c8:fa:
         d2:6d:f8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org