Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/vEVSTEs1wLH4gg4nzQM7k-X8SgE.roa
File:                     vEVSTEs1wLH4gg4nzQM7k-X8SgE.roa (raw, json)
Hash identifier:          U4QU29Zf0JxenET5keKeJ6Z00VXnanrQBbHZnC9W050=
Subject key identifier:   BC:45:52:4C:4B:35:C0:B1:F8:82:0E:27:CD:03:3B:93:E5:FC:4A:01
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0220
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vEVSTEs1wLH4gg4nzQM7k-X8SgE.roa
Signing time:             Wed 31 Jul 2024 01:29:17 +0000
ROA not before:           Wed 31 Jul 2024 01:29:17 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     23788
IP address blocks:        219.100.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul 31 01:29:17 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=BC45524C4B35C0B1F8820E27CD033B93E5FC4A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:33:e7:4e:53:d7:18:60:87:f9:37:7f:48:
                    48:70:65:7c:13:13:a8:fb:30:69:fe:b3:ee:01:42:
                    5e:f9:f3:01:5d:72:82:5e:85:60:d2:ac:8d:e7:d5:
                    1a:5c:71:53:b1:23:19:41:df:83:93:14:e5:f4:e1:
                    63:54:8c:bc:d3:32:b8:c2:c5:24:5e:2a:66:ee:1e:
                    5a:9d:ae:10:eb:f1:db:26:74:c1:38:db:4a:eb:3a:
                    e6:c9:cb:d3:69:af:17:b9:5a:5e:14:74:7f:04:b4:
                    bd:07:a6:44:da:08:bd:88:12:ad:2a:df:30:11:6f:
                    00:f7:a6:a0:15:c5:b4:8e:55:ab:e6:9d:9a:f5:a9:
                    7a:48:fc:d3:79:0a:49:3e:5c:83:d2:9f:ee:91:c5:
                    e3:11:47:96:4f:5e:c6:29:b6:a0:4d:42:2c:1c:6c:
                    57:3b:d0:9f:2c:58:a4:b0:c2:0a:6d:f2:06:e6:e5:
                    25:f5:b6:8e:25:9c:97:a2:16:c7:64:f3:c6:d1:1a:
                    3a:3b:9d:a9:2d:9f:b8:f1:ef:a8:da:7e:92:a0:5f:
                    6f:94:bf:9c:a0:79:09:80:aa:38:a7:fe:4d:f1:c8:
                    db:47:43:3a:1c:28:e3:ab:5f:b1:48:35:51:74:37:
                    af:ea:7b:b6:1f:97:94:92:1b:d9:b3:10:a0:f6:d2:
                    ac:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:45:52:4C:4B:35:C0:B1:F8:82:0E:27:CD:03:3B:93:E5:FC:4A:01
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vEVSTEs1wLH4gg4nzQM7k-X8SgE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e5:80:df:22:8c:a0:ef:f3:83:05:e7:35:57:20:cc:8b:16:af:
         f7:e0:94:d1:f1:cf:d0:36:2f:92:81:c1:f5:b6:bc:ec:45:e3:
         78:76:34:8c:2e:7e:d8:fd:9b:c6:c0:22:76:34:ca:45:3d:40:
         68:e4:fb:40:ad:26:72:2d:a8:50:69:63:80:d5:72:80:19:b0:
         8d:64:21:ce:7b:02:98:12:52:92:33:45:1b:7a:51:8a:e8:38:
         3c:40:52:d5:f5:e2:47:ba:05:ba:2d:a2:5c:74:80:14:09:02:
         8d:bc:01:46:e7:d2:b4:12:6d:1d:b7:d8:25:e6:3f:8e:40:7b:
         c5:f3:4d:b6:c0:e5:f8:d9:5b:b6:8a:7f:d5:25:6a:28:12:80:
         1b:7e:a5:57:1b:4f:d7:08:c6:e7:a7:f9:34:54:e7:7b:30:21:
         1f:c7:d5:fb:51:f6:22:c1:71:83:09:78:dc:8a:ca:08:4e:70:
         6a:65:31:6a:dc:03:11:8b:97:e0:99:a6:90:a3:56:d8:ad:83:
         96:33:5a:0e:02:0b:63:9e:17:4f:f7:1d:05:4b:8b:3d:ca:0d:
         b1:d6:cd:c6:2f:ae:0e:bc:f0:ce:52:b1:aa:65:3b:75:16:c9:
         4b:23:ec:bc:bc:cc:c0:32:33:fa:4d:ae:59:10:a5:c4:84:d7:
         ac:ef:fd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org