Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/srLI9W-s49Tunq852mGx6q6iCUw.roa
File:                     srLI9W-s49Tunq852mGx6q6iCUw.roa (raw, json)
Hash identifier:          sxetKoAmY6I1Nas7EPfEM5cmC55Ipg315Rw7c54cGrk=
Subject key identifier:   B2:B2:C8:F5:6F:AC:E3:D4:EE:9E:AF:39:DA:61:B1:EA:AE:A2:09:4C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01F0
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/srLI9W-s49Tunq852mGx6q6iCUw.roa
Signing time:             Wed 01 Nov 2023 01:30:31 +0000
ROA not before:           Wed 01 Nov 2023 01:30:31 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     0
IP address blocks:        125.62.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 01:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Nov  1 01:30:31 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=B2B2C8F56FACE3D4EE9EAF39DA61B1EAAEA2094C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:6c:b6:62:3d:9f:78:38:03:75:6a:32:39:
                    97:61:0a:c2:f9:05:d9:df:17:66:cc:3b:e1:1b:cf:
                    7c:b2:cb:dd:03:60:d6:1b:fa:99:29:6e:b9:aa:ce:
                    f1:20:78:a6:20:87:28:6f:9a:42:fa:a8:e1:99:0d:
                    dd:6f:67:7e:50:da:f0:ec:16:74:74:9d:3e:2a:51:
                    9a:a9:a5:2f:8a:bd:45:ba:46:14:1c:65:a7:83:17:
                    55:6b:64:7f:ff:66:30:be:e4:fd:c3:f1:a2:81:71:
                    67:8b:78:36:85:02:d1:35:62:b5:58:2a:1e:c2:52:
                    4f:73:6c:d7:dd:c3:11:55:90:1b:ba:8e:e9:f9:12:
                    31:ed:22:50:c9:91:c9:af:d5:02:58:2f:15:02:c5:
                    33:f6:34:c9:a4:a7:5a:68:a3:80:27:f3:10:43:02:
                    f1:78:33:f6:d5:04:2b:d2:54:82:77:aa:72:fc:d4:
                    9f:4b:ec:58:f0:bc:36:b8:9d:a1:7e:7d:17:27:30:
                    35:4e:c6:ce:cf:09:56:b7:f5:82:e1:32:75:67:0c:
                    a0:30:d0:0c:27:40:e6:49:b9:0a:f7:86:4d:dc:19:
                    15:6c:fd:a6:53:13:fd:a9:c2:78:d5:5a:21:b2:0e:
                    f1:bb:6c:c2:aa:90:84:b3:6a:ad:d2:3c:af:d4:08:
                    8d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B2:C8:F5:6F:AC:E3:D4:EE:9E:AF:39:DA:61:B1:EA:AE:A2:09:4C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/srLI9W-s49Tunq852mGx6q6iCUw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.62.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b7:38:5c:30:14:b5:2b:68:e2:4d:c2:fc:60:6b:4a:a4:36:30:
         81:f9:97:08:2d:ff:87:e5:8e:b3:de:3d:60:05:0d:c6:e7:1c:
         9c:c0:66:68:dd:b5:99:44:71:c9:1d:92:c8:4b:f5:73:41:60:
         eb:eb:e6:d4:22:9d:13:f1:cd:ba:95:83:05:94:ad:66:47:84:
         19:80:64:b3:e5:b9:70:85:9a:82:09:cb:c9:c3:ea:26:32:3f:
         fa:87:3a:35:9b:12:9e:a8:13:8d:e9:d0:ba:45:fb:8c:c4:48:
         1c:6a:ce:5f:79:cc:94:95:9c:9a:e6:19:f2:e1:56:93:ea:43:
         1b:c0:72:3c:98:30:dc:2b:01:ed:c9:89:55:4d:d3:87:2e:5c:
         e9:af:34:24:3b:02:d6:63:53:13:44:06:7e:e5:5b:4a:5c:32:
         4e:c3:10:9a:3d:e1:c2:b7:ae:71:f0:2c:19:79:bf:45:f5:26:
         45:45:d7:fe:2d:20:a4:47:5e:05:68:e2:39:99:fb:ac:6d:91:
         dc:74:2a:67:f0:b8:5f:3f:2a:06:10:23:e6:52:5b:e6:d7:ca:
         38:8a:67:fd:ee:9b:80:66:99:f8:02:42:f6:a1:49:19:95:6e:
         a0:82:24:cf:a4:b3:df:5a:3c:6a:3b:89:cf:8d:de:e7:25:6b:
         cb:5d:ad:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:55:56 2024 by rpki-client on console-fra.rpki-client.org