Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/vPtrVYSlb_TJ72lnM7OaC3X0ECY.roa
File:                     vPtrVYSlb_TJ72lnM7OaC3X0ECY.roa (raw, json)
Hash identifier:          hCan4tjL1nlA6iiKsOi5PBJrtGYcH6xsYyAm/S6tKrA=
Subject key identifier:   BC:FB:6B:55:84:A5:6F:F4:C9:EF:69:67:33:B3:9A:0B:75:F4:10:26
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       021C
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vPtrVYSlb_TJ72lnM7OaC3X0ECY.roa
Signing time:             Wed 31 Jul 2024 01:29:15 +0000
ROA not before:           Wed 31 Jul 2024 01:29:15 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     18134
IP address blocks:        219.100.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540 (0x21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul 31 01:29:15 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=BCFB6B5584A56FF4C9EF696733B39A0B75F41026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3e:24:50:fd:e8:38:65:b9:ac:c7:c3:4d:f5:
                    36:4c:a9:da:10:bf:40:94:37:03:b3:5d:c4:5d:08:
                    59:75:f2:de:76:0e:b9:02:de:a1:06:b7:6a:cc:b1:
                    71:8b:ef:2e:b6:31:ba:fa:89:52:94:28:7e:a9:9f:
                    f6:99:e8:50:6c:25:a6:c8:cc:0c:92:18:7d:61:3b:
                    fa:c3:ac:c9:97:fe:07:a8:65:27:69:20:48:38:c2:
                    54:e6:e9:44:8a:1d:e6:ec:d0:5b:6a:01:ab:09:6a:
                    1f:99:92:e0:e6:94:39:f8:2e:9e:49:99:bc:e7:52:
                    e6:4d:a8:81:43:b0:cc:89:a5:d1:02:c6:49:91:83:
                    1c:b6:0a:c1:c5:08:e0:5e:a0:f6:49:30:b1:96:be:
                    b6:0c:2b:88:6e:5c:ae:71:04:b1:fc:9b:d1:1b:19:
                    58:92:aa:59:36:c0:9b:5b:32:a8:4c:ac:3c:ea:00:
                    0b:ed:22:7e:1a:0a:b9:86:96:8d:58:fb:45:14:c3:
                    5a:f2:dc:f0:bc:a3:de:66:eb:a1:4b:ae:92:64:00:
                    9a:32:9b:b9:92:f3:d8:87:eb:16:ca:a0:4d:d3:71:
                    c2:70:6e:70:e4:4e:fa:9f:7e:05:c7:ad:31:75:d5:
                    ab:64:ce:e5:ad:18:f0:a1:0e:60:9f:76:20:78:3c:
                    22:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FB:6B:55:84:A5:6F:F4:C9:EF:69:67:33:B3:9A:0B:75:F4:10:26
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vPtrVYSlb_TJ72lnM7OaC3X0ECY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:be:bb:61:63:58:fd:a8:c4:6f:80:4d:3a:29:b2:32:4c:bc:
         88:0c:be:60:00:a8:16:aa:b5:71:45:bb:ac:41:7a:76:aa:5a:
         d7:1d:b3:af:55:8a:ca:75:13:f5:72:c6:fa:0d:74:a0:cb:5e:
         4f:19:b3:89:b9:4f:b6:db:be:cf:61:94:7c:09:5f:a3:cd:ae:
         3d:79:69:d6:10:93:83:7e:b6:96:f2:d8:94:f9:ad:f3:87:87:
         90:17:86:d8:e8:a9:f5:96:a4:25:80:ab:f2:e7:57:be:48:41:
         f2:fb:9b:fa:51:8b:07:bf:72:33:27:c9:0a:a7:5a:ef:72:ba:
         41:96:b7:05:03:ed:8d:b3:73:52:8b:b8:5d:b5:2b:d4:4d:3f:
         be:d6:34:36:1d:f6:07:40:b7:2a:05:c9:30:12:1d:3c:1f:90:
         56:3d:06:30:2c:97:ee:08:32:a8:89:7d:92:44:04:12:35:92:
         01:f3:62:01:40:0c:37:84:2b:fe:85:20:1b:40:34:ca:4e:06:
         98:6e:7c:7c:13:8a:82:4f:07:0b:de:95:14:99:14:55:e5:1b:
         a8:35:93:52:01:13:31:48:e4:b2:f9:94:62:12:46:f5:fb:97:
         f6:7e:f2:9e:56:14:03:b5:ad:dd:de:73:54:1f:10:1e:db:92:
         05:e8:ab:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org