Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/BHUx1JKfF6uV7IzWxzzP4zm-MUA.roa
File:                     BHUx1JKfF6uV7IzWxzzP4zm-MUA.roa (raw, json)
Hash identifier:          q49eR9d9+mubIJQ2c77GhnZJ60mF1Wyblzz6FQhNVPA=
Subject key identifier:   04:75:31:D4:92:9F:17:AB:95:EC:8C:D6:C7:3C:CF:E3:39:BE:31:40
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01BF
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/BHUx1JKfF6uV7IzWxzzP4zm-MUA.roa
Signing time:             Sun 01 Oct 2023 01:38:16 +0000
ROA not before:           Sun 01 Oct 2023 01:38:16 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        49.250.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:38:16 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=047531D4929F17AB95EC8CD6C73CCFE339BE3140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:35:c9:04:52:4b:21:cf:de:31:cc:4e:64:10:
                    08:6c:fc:3a:ad:66:f2:27:31:c2:e2:78:37:b5:55:
                    ac:ab:c3:fa:0e:91:7d:a3:c0:21:b7:48:64:39:e5:
                    50:a6:e3:d4:0e:68:37:6b:f7:14:7c:44:5f:eb:4b:
                    bf:03:8d:32:55:97:a0:a0:f7:43:05:82:99:c8:49:
                    37:f9:f1:66:a8:e4:ac:ba:b7:6a:87:75:0d:12:5f:
                    9c:ad:8a:3d:e0:43:65:44:70:0d:da:90:a2:1b:f9:
                    75:ee:cb:19:39:80:63:e0:ae:eb:8f:31:6c:85:9c:
                    98:3a:ee:5f:cf:59:36:9e:92:dc:77:d2:6f:6a:08:
                    8c:b5:0c:dd:5a:93:63:cc:81:68:58:d2:29:57:0c:
                    c4:2c:58:dc:0a:95:09:c4:fb:5a:1c:0c:e6:ae:e2:
                    65:a6:6b:21:c7:ac:97:d4:19:16:7c:60:17:53:fe:
                    1e:9b:c5:c4:29:59:d0:c9:4e:48:56:d0:14:13:12:
                    c2:5c:42:b5:28:4d:7f:5e:33:ff:c0:94:2f:bd:db:
                    36:20:1a:c2:92:33:8a:6c:5b:d3:ad:b3:23:42:24:
                    e4:4d:e6:01:32:f2:01:20:b3:06:20:fc:e4:8c:2a:
                    a9:86:b0:8a:72:f5:cf:45:0b:ff:9f:fe:63:b1:7a:
                    25:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:75:31:D4:92:9F:17:AB:95:EC:8C:D6:C7:3C:CF:E3:39:BE:31:40
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/BHUx1JKfF6uV7IzWxzzP4zm-MUA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.250.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         53:9a:fc:3d:f6:b3:42:53:e6:9e:11:01:9b:fb:49:41:79:1b:
         25:b0:c6:65:9a:cb:60:c5:09:9b:17:55:26:e6:20:05:11:20:
         b8:0b:76:29:61:ff:84:d0:ad:a5:65:46:18:d8:1d:d2:ea:50:
         98:20:b5:43:43:af:6a:59:52:71:9c:54:40:07:82:26:ed:3f:
         f9:44:d0:b5:d9:79:f6:00:27:60:c2:79:07:d8:97:5d:91:9e:
         6f:af:21:58:64:cc:36:4c:c9:bb:ec:5d:c8:7c:a7:13:ed:3b:
         0b:e6:4c:dc:ed:3f:80:36:2d:86:da:b6:90:f8:f9:8c:16:7d:
         57:1d:fe:67:2f:7d:63:bc:7a:08:a1:b7:b0:05:18:08:54:ad:
         50:19:fb:dc:43:d6:d0:b7:e2:43:f9:77:21:a6:ac:fe:c0:d7:
         da:64:7e:74:10:0c:87:5e:01:d8:de:ff:af:39:b4:a7:9f:fb:
         95:e3:1d:f4:cf:cb:ce:8a:6c:73:b2:e2:6a:80:05:5a:62:ac:
         86:00:da:a6:37:fc:59:32:6d:af:72:4f:98:3f:7d:80:15:15:
         b5:0f:b5:56:78:8e:94:52:42:c1:f0:a0:d4:2b:b9:49:59:e5:
         1a:e7:05:fc:fa:41:a3:af:e7:45:44:0e:ac:af:20:f9:c9:7a:
         f0:04:ef:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:26 2024 by rpki-client on console-fra.rpki-client.org