Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/YE11Wu1LuJVWpsVacWOlrKkhhyA.roa
File:                     YE11Wu1LuJVWpsVacWOlrKkhhyA.roa (raw, json)
Hash identifier:          /4oBQ+2uPFLUXeoyetjXVWB4UsEji45GNIcrzj64dKk=
Subject key identifier:   60:4D:75:5A:ED:4B:B8:95:56:A6:C5:5A:71:63:A5:AC:A9:21:87:20
Certificate issuer:       /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial:       40
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/YE11Wu1LuJVWpsVacWOlrKkhhyA.roa
Signing time:             Thu 01 Jun 2023 01:29:30 +0000
ROA not before:           Thu 01 Jun 2023 01:29:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     7684
IP address blocks:        157.17.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:37:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
        Validity
            Not Before: Jun  1 01:29:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=604D755AED4BB89556A6C55A7163A5ACA9218720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:ae:19:40:84:79:78:91:8d:81:f6:a2:d6:
                    bd:8b:54:7d:30:2f:f3:58:90:55:91:e7:68:63:1e:
                    b9:90:9d:82:74:a5:31:f4:67:84:a9:47:6f:78:9a:
                    95:19:29:24:2c:cb:4b:a4:b9:7f:09:30:68:7e:4b:
                    86:3a:b5:5b:94:6a:f4:08:08:e3:b2:e3:7f:e3:5d:
                    09:ec:83:45:15:04:39:6c:c9:9e:66:38:97:0c:ce:
                    50:dc:05:9d:d2:1f:bc:61:1e:50:b8:43:7d:ed:85:
                    29:c5:a8:26:2c:41:ab:4b:57:9f:43:9f:70:96:a2:
                    c6:67:a2:87:43:7a:7e:fe:ab:4d:ff:c2:7a:0f:a6:
                    7b:1e:50:a9:e5:56:46:ca:69:40:9f:e6:15:95:20:
                    4b:72:69:6a:17:83:e8:3e:08:ad:31:c1:c1:ad:ed:
                    d3:54:0a:52:3b:06:bd:06:0b:3a:7d:aa:e3:84:51:
                    5c:7f:57:c3:8b:e6:c5:e7:c7:da:92:dc:ac:35:eb:
                    00:34:ad:37:47:90:58:b4:b5:0b:4c:2f:d0:77:9b:
                    a7:24:a5:14:08:d2:db:e8:ab:86:db:f5:07:f8:33:
                    f6:93:43:2e:c4:27:a6:6d:6f:fa:ec:f6:08:f3:b2:
                    a9:27:7a:fd:f6:54:3f:6c:a4:5b:38:bb:31:6b:de:
                    e5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4D:75:5A:ED:4B:B8:95:56:A6:C5:5A:71:63:A5:AC:A9:21:87:20
            X509v3 Authority Key Identifier:
                keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/YE11Wu1LuJVWpsVacWOlrKkhhyA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.17.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:5a:48:94:ec:f4:02:a3:9d:31:96:df:8a:13:5a:b6:e9:7a:
         df:f2:ea:40:0f:2e:f4:b4:ef:e8:ca:e3:84:7b:13:05:0a:e0:
         26:43:00:46:ce:19:70:54:a0:e9:5c:a4:73:6c:5e:2b:cd:0d:
         3c:c6:4e:13:ca:88:c4:1d:27:07:95:5c:89:e9:21:77:e6:3b:
         d7:52:47:30:ed:01:a8:83:bb:b8:51:4d:9e:29:a4:d6:fb:4e:
         f5:0e:ec:55:71:fb:af:8b:20:17:32:2c:7a:7d:85:9f:85:40:
         cd:8a:40:1c:df:9a:4e:1e:ab:a8:2c:a3:9f:76:3b:18:a7:d2:
         89:40:15:a4:40:1f:72:1f:66:a4:5b:d7:19:b8:d7:a3:c8:b9:
         fc:ae:f3:19:42:f6:dc:3a:ff:1b:5c:90:d7:04:ea:1f:70:7b:
         14:81:ee:4b:e1:30:1e:7a:fc:3a:4c:04:f2:0d:55:16:dd:1a:
         0a:29:46:d1:71:50:ed:ba:f2:0d:7f:60:cc:c5:48:51:8b:bf:
         1b:32:d9:b9:83:cf:23:42:07:3c:43:e3:9a:18:e0:3a:ea:0a:
         38:1d:07:c4:30:fb:71:b3:3a:41:d9:97:27:97:d3:37:b7:1d:
         b8:ef:31:7c:6d:d5:60:1f:d2:15:44:5f:2b:04:eb:13:b4:c5:
         08:a0:31:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:47 2024 by rpki-client on console-ams.rpki-client.org