Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/vM2C6qXudWL6cLywLvBorbETCgk.roa
File:                     vM2C6qXudWL6cLywLvBorbETCgk.roa (raw, json)
Hash identifier:          F049YIbyGX7kSFbR8wKqVimRbh0A+KBSOVqaWtMTl4A=
Subject key identifier:   BC:CD:82:EA:A5:EE:75:62:FA:70:BC:B0:2E:F0:68:AD:B1:13:0A:09
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02A8
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vM2C6qXudWL6cLywLvBorbETCgk.roa
Signing time:             Sat 31 Aug 2024 01:40:45 +0000
ROA not before:           Sat 31 Aug 2024 01:40:45 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        219.113.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:40:45 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=BCCD82EAA5EE7562FA70BCB02EF068ADB1130A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:49:9f:87:d4:04:ce:cf:17:54:41:1d:a8:88:
                    04:8f:ba:eb:1a:f1:86:fb:26:46:97:3d:04:2f:b4:
                    c8:3c:1c:71:c2:54:ae:24:71:f8:8a:3e:26:21:11:
                    d7:18:e9:75:87:81:ac:6d:2e:1b:2b:90:90:d8:4f:
                    2d:32:8c:be:9d:9f:94:35:ea:ef:af:32:29:c6:ca:
                    a9:20:7d:c3:46:ed:73:64:3c:4f:8d:f7:1b:fa:eb:
                    a5:94:94:11:68:30:31:f1:ab:6f:ef:f4:2c:6e:e9:
                    c4:4f:75:b7:94:ff:56:1f:49:95:ec:b0:65:e6:15:
                    9e:f1:dc:cd:b3:b7:2e:a8:f1:60:9d:b1:3b:9e:c9:
                    9a:87:a1:77:f7:dd:af:f5:f0:61:04:83:52:28:24:
                    50:1b:a4:75:32:5c:fb:bd:52:d9:e9:9d:87:6f:d7:
                    c8:86:ce:6f:53:19:7b:06:33:76:19:57:bd:3e:c8:
                    56:22:1d:54:c7:d2:04:6b:4f:1b:2f:6c:34:15:ef:
                    06:80:51:2f:d8:ff:c7:80:0d:a3:c1:bf:c4:34:b9:
                    1f:ab:7a:38:22:b6:c7:02:10:ce:1e:1b:71:1a:3d:
                    98:63:3c:de:96:0b:92:0f:2e:ea:ec:ab:16:f7:b1:
                    27:10:e0:db:df:fa:3e:a7:74:f6:79:a3:10:ed:f1:
                    29:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CD:82:EA:A5:EE:75:62:FA:70:BC:B0:2E:F0:68:AD:B1:13:0A:09
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vM2C6qXudWL6cLywLvBorbETCgk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.113.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:d8:d8:5a:27:0c:90:c7:aa:e5:82:10:01:c8:b1:88:00:
         99:7f:02:36:54:98:9d:64:67:ea:7f:68:20:9e:63:b6:93:c5:
         c5:1d:fc:f8:b4:af:07:19:30:a9:72:38:07:20:5d:8a:f9:e0:
         a6:15:06:f6:6e:ef:ad:6a:56:b7:50:2e:2e:70:e0:6a:92:10:
         0e:32:e9:7a:8c:30:d1:0c:9d:d0:d3:f8:48:4a:ac:df:ba:cb:
         0d:77:cc:0e:c5:31:85:23:90:42:88:a8:3b:61:d6:8d:fa:85:
         4d:12:80:5f:35:5c:fc:97:14:f3:1f:a1:ca:13:46:51:bb:28:
         1f:37:94:88:65:a8:4d:b1:68:6f:00:d1:d2:70:62:db:11:30:
         5e:8e:03:95:37:c2:7f:69:3d:9f:72:88:a3:53:a9:89:dd:20:
         2e:99:32:1b:a2:d8:e9:f0:ad:b6:a8:fe:0c:d2:11:3e:ac:be:
         71:57:6a:d5:30:c3:cd:54:e1:05:4f:07:d1:45:ad:7a:68:25:
         28:ac:91:b9:59:fa:d5:35:6c:54:ae:24:de:90:34:99:c0:d3:
         fc:65:b6:29:eb:91:6c:83:41:88:67:7c:ab:28:cc:ba:a6:83:
         de:e4:fc:96:c8:63:05:ef:e3:d4:a8:44:6a:c6:10:48:f5:17:
         86:fe:9f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org