Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/z29cUg4ZdDQHnquCCL-GfU18ig8.roa
File:                     z29cUg4ZdDQHnquCCL-GfU18ig8.roa (raw, json)
Hash identifier:          OE3K/DA8BT64G0PRkcS4JQC3RqP4mmV52p66gbu1Bxg=
Subject key identifier:   CF:6F:5C:52:0E:19:74:34:07:9E:AB:82:08:BF:86:7D:4D:7C:8A:0F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02A7
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/z29cUg4ZdDQHnquCCL-GfU18ig8.roa
Signing time:             Sat 31 Aug 2024 01:40:45 +0000
ROA not before:           Sat 31 Aug 2024 01:40:45 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        219.112.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679 (0x2a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:40:45 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=CF6F5C520E197434079EAB8208BF867D4D7C8A0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:3f:23:35:13:c8:35:51:d5:0e:d7:7a:67:
                    46:0a:8e:47:57:fe:05:f5:be:ef:26:1f:28:58:aa:
                    a6:05:01:a0:25:fd:b5:32:0b:7b:f9:a1:ff:07:a1:
                    e3:07:1f:03:94:ab:5d:77:1d:54:aa:a8:57:96:7e:
                    fa:f6:fb:e6:17:cf:d7:ed:1c:8b:c5:31:43:41:40:
                    9f:df:f0:53:fa:9d:fc:f6:1f:87:02:99:b5:89:d1:
                    34:64:54:ee:0a:49:c8:96:3b:0e:07:69:6f:84:b6:
                    a2:7e:67:44:d5:ae:c5:d1:32:75:89:18:76:3e:b0:
                    66:10:dc:03:08:50:90:89:60:b6:7c:6e:14:54:2b:
                    7c:4d:35:f4:79:01:50:eb:4c:62:2c:c2:e0:df:0c:
                    9b:36:b4:b2:8b:f8:f0:9c:fd:89:c3:08:1d:21:ee:
                    21:07:69:15:a1:78:94:0a:51:c2:8e:00:d7:35:0b:
                    d4:5e:31:fc:70:3a:96:e1:93:1a:b2:a1:c0:a4:e4:
                    c8:32:15:7f:c5:ff:d0:30:da:c8:d6:7f:40:53:c2:
                    1e:20:f8:c5:13:26:84:f5:10:8e:fd:6b:85:72:84:
                    a0:69:e4:64:30:f1:eb:78:19:41:0b:21:6b:9a:4d:
                    88:f1:30:9a:f9:03:75:7d:28:a0:16:f7:1c:c6:1a:
                    fb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6F:5C:52:0E:19:74:34:07:9E:AB:82:08:BF:86:7D:4D:7C:8A:0F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/z29cUg4ZdDQHnquCCL-GfU18ig8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.112.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2d:b0:00:5c:5c:7e:9d:59:09:6b:db:36:13:b6:f8:94:30:ca:
         1b:fe:4d:01:4a:cd:47:41:39:97:00:32:9d:3b:e7:43:9f:20:
         8f:a7:6d:d0:83:b6:14:23:df:72:55:53:41:94:3a:c8:57:ae:
         ac:14:eb:7b:48:73:10:ff:d5:8b:99:bb:77:22:07:33:91:6c:
         c5:4e:d5:9e:d9:50:dc:65:86:7d:0a:a6:65:79:8b:8b:56:a2:
         39:31:1b:e0:96:bf:a7:c1:66:3c:f9:58:17:bc:49:7d:1e:a9:
         84:05:bf:a3:97:af:9c:ef:fa:03:e8:3b:06:db:ef:86:2c:24:
         a7:c9:51:91:57:8c:49:f3:c1:a8:c8:7f:66:86:55:a1:47:f7:
         55:66:f9:53:96:89:84:c4:b3:3b:1a:49:56:2e:d2:ca:84:7c:
         2b:70:0c:c1:21:a1:0f:e6:f5:7a:39:58:1e:25:3d:ca:e2:3f:
         00:71:59:c5:03:8a:c9:54:28:5b:73:11:bb:8f:8f:1c:69:e5:
         0f:55:12:f3:62:24:87:48:96:18:c6:9c:77:b2:f8:53:b5:ab:
         20:28:34:a5:cf:fa:06:9e:e0:fe:92:a7:4e:c1:a0:da:eb:2c:
         d7:96:14:8c:af:98:d0:50:bb:d7:c7:a4:61:c4:0c:13:ae:20:
         a3:10:26:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org