Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/Fsnqlf5z6qirnpcvCmf8pRCucaM.roa
File:                     Fsnqlf5z6qirnpcvCmf8pRCucaM.roa (raw, json)
Hash identifier:          IB6fK4OgI4FzbowynEdB8gudZ5XsfZyV3E1/83MQHMo=
Subject key identifier:   16:C9:EA:95:FE:73:EA:A8:AB:9E:97:2F:0A:67:FC:A5:10:AE:71:A3
Certificate issuer:       /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial:       322F
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/Fsnqlf5z6qirnpcvCmf8pRCucaM.roa
Signing time:             Thu 29 Feb 2024 01:29:50 +0000
ROA not before:           Thu 29 Feb 2024 01:29:50 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7671
IP address blocks:        219.111.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12847 (0x322f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
        Validity
            Not Before: Feb 29 01:29:50 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=16C9EA95FE73EAA8AB9E972F0A67FCA510AE71A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:cf:67:74:8d:4e:f7:ab:2c:4d:b7:ec:5b:
                    5d:63:97:e2:ec:ad:d0:d8:be:5d:18:9b:b7:50:48:
                    ad:bc:55:0e:2f:fc:c4:b9:dc:88:ad:ca:49:ba:da:
                    a5:4a:a0:96:ef:d3:28:0f:7e:ed:17:b4:ee:35:46:
                    d2:b7:07:4c:ed:f9:f6:77:3f:57:9a:2b:19:be:c1:
                    3d:17:cd:59:86:7d:15:51:e5:bf:fb:63:ec:9e:3f:
                    5d:01:81:d9:90:97:63:da:7a:45:70:1e:d6:53:02:
                    70:36:70:40:b4:bd:fe:4e:0e:ca:59:df:02:1c:1b:
                    a8:48:29:6b:ff:16:bc:05:39:4c:e6:23:27:d5:22:
                    4c:d6:44:6e:43:4a:60:76:d1:45:a3:f0:77:40:51:
                    02:44:cb:e8:14:47:2b:e5:d3:e9:93:d5:b0:fd:6d:
                    ff:52:01:58:32:81:da:ff:0e:86:e1:8e:cd:18:88:
                    b0:79:ab:2e:7e:06:85:65:e2:40:3a:d8:d5:d7:23:
                    0a:0c:62:88:6c:f1:3b:0e:08:41:bb:65:01:e1:1d:
                    99:71:73:04:23:63:41:9a:3e:0f:c9:37:62:74:81:
                    b2:01:1a:ca:e6:24:d3:6c:b6:39:11:53:15:00:66:
                    a5:dc:87:1b:df:88:e1:31:10:fd:6a:97:5f:7e:97:
                    a5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C9:EA:95:FE:73:EA:A8:AB:9E:97:2F:0A:67:FC:A5:10:AE:71:A3
            X509v3 Authority Key Identifier:
                keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/Fsnqlf5z6qirnpcvCmf8pRCucaM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.111.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:f5:b3:90:d3:d0:cb:0e:1e:a6:4e:7b:94:e1:a4:0d:8f:b7:
         94:55:ad:cb:92:cd:39:5c:61:62:11:da:46:be:b1:0c:bc:29:
         18:04:2a:6c:07:14:bc:61:de:d0:da:bc:a5:c2:e6:7b:41:c3:
         5a:8a:75:b4:dd:43:7a:fb:28:f3:5c:63:43:d5:c8:aa:5b:e6:
         71:9a:24:cb:c6:76:f4:76:9a:22:cc:f1:9a:9f:4f:49:97:50:
         b5:68:ec:57:cd:d2:80:04:92:e3:12:66:4f:86:7c:63:73:dc:
         b0:bf:13:84:ef:c4:98:22:2b:43:aa:31:8a:39:f8:fd:51:d0:
         e7:70:11:b7:8a:05:ff:00:aa:25:63:58:eb:af:4a:7f:d2:e0:
         15:04:cc:bf:9f:2e:01:a4:40:e7:72:28:d0:c6:ee:70:1c:22:
         ca:1e:8e:f3:35:63:8b:ea:fc:0b:78:90:da:3a:04:13:5a:c4:
         18:2c:26:cd:dc:bf:ce:19:14:5e:c1:18:85:67:27:4f:80:14:
         47:20:0f:6e:9a:1b:3b:f0:5c:b1:57:7f:85:f2:92:09:5d:19:
         34:c6:3e:38:4c:02:e0:df:d1:da:40:e1:ad:42:4b:4e:f9:b8:
         79:f1:0b:90:86:8c:4b:33:85:11:7a:d2:16:97:d1:23:bc:3f:
         46:bf:1a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:47 2024 by rpki-client on console-ams.rpki-client.org