Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/si4Jxohpwb7RFOv0niI2hbgNMkg.roa
File:                     si4Jxohpwb7RFOv0niI2hbgNMkg.roa (raw, json)
Hash identifier:          jIbUobcqJljdMlllxH7TMK8ZxgXLwRpX3XUoIgQAh5g=
Subject key identifier:   B2:2E:09:C6:88:69:C1:BE:D1:14:EB:F4:9E:22:36:85:B8:0D:32:48
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       025B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/si4Jxohpwb7RFOv0niI2hbgNMkg.roa
Signing time:             Sat 31 Aug 2024 01:36:43 +0000
ROA not before:           Sat 31 Aug 2024 01:36:43 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        202.148.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:36:43 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=B22E09C68869C1BED114EBF49E223685B80D3248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:b4:e2:af:96:d6:0e:67:96:0e:14:7a:c9:
                    62:aa:1d:f9:86:2d:28:a9:a8:9f:4f:c0:db:a0:8a:
                    7f:f2:08:44:fe:49:12:84:77:01:0e:d0:83:72:1b:
                    0d:fa:5d:57:e1:10:f3:76:b4:82:5e:31:82:ef:a3:
                    90:63:4d:57:5b:f1:ee:03:c6:c6:43:40:c2:94:ce:
                    83:f3:ef:ad:9c:7a:db:76:12:d6:78:cf:c4:8f:8b:
                    0d:26:5e:44:4e:2a:af:ac:af:d7:90:8e:45:bf:0f:
                    9c:78:19:d2:1f:cd:d2:3d:28:99:dd:80:94:c9:17:
                    30:21:5f:6f:e2:d7:64:1c:4e:72:14:ee:13:25:dd:
                    7a:b5:e8:29:20:1e:76:07:28:71:3d:4e:f4:5d:d7:
                    c0:75:1b:2a:bc:30:ab:66:aa:40:14:a4:cc:0a:30:
                    60:bd:83:07:bc:b0:11:dc:46:f4:77:34:8f:21:22:
                    dc:56:97:7e:f7:54:12:24:d3:31:92:bd:99:db:02:
                    33:dd:50:45:49:64:3d:4e:31:21:35:83:69:94:99:
                    40:c9:57:c1:02:d1:73:21:bc:e9:48:eb:ad:ac:de:
                    bc:b9:b9:b6:d5:c1:11:ef:b5:9e:3d:14:d4:3f:b6:
                    88:b0:64:72:3f:5c:0d:93:4c:48:52:e0:37:eb:36:
                    c2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2E:09:C6:88:69:C1:BE:D1:14:EB:F4:9E:22:36:85:B8:0D:32:48
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/si4Jxohpwb7RFOv0niI2hbgNMkg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:4e:46:d8:1c:f1:85:d0:fe:f6:02:2d:0f:d3:a9:c3:3c:5d:
         14:00:54:d5:33:78:9c:7b:11:df:fe:8e:b4:17:8d:4d:b1:5e:
         4b:9d:bd:00:27:e3:09:6a:13:16:ae:55:ca:8e:df:96:e9:7c:
         7e:2f:53:2d:90:1d:4a:a0:2c:19:06:9e:84:2d:8a:4a:c9:ec:
         cd:95:f3:43:c8:99:0f:a1:7e:07:f3:28:0e:17:3d:aa:68:44:
         e5:3b:fe:85:e2:b5:27:b3:1e:64:af:c3:a7:cf:72:cd:b0:6a:
         13:00:35:5a:17:94:5a:7f:39:61:41:fa:ea:40:2a:06:42:ef:
         d9:90:95:97:31:f0:a0:f3:68:53:f1:19:e6:af:8a:fc:63:44:
         ae:b5:07:2e:02:a6:b4:cd:36:d1:69:8e:79:f8:6f:c9:fa:55:
         d2:8a:e7:87:7a:88:e3:00:4f:29:c3:38:0a:c8:d8:2f:93:e0:
         10:39:67:ca:2d:bc:9d:bb:d5:54:e8:df:52:be:6f:37:f2:e2:
         e5:fc:99:c4:95:f7:ae:34:83:de:a8:7f:1b:3a:ad:ba:5b:81:
         2a:5a:1c:65:98:eb:b2:85:a2:b1:ac:50:5f:42:04:39:02:81:
         73:54:39:f6:d4:84:ed:d9:2f:7e:91:0a:1a:ec:1b:1c:74:d2:
         a3:03:72:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org