Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/kxblqPbAY2YdapTZeS3qlJLepNI.roa
File:                     kxblqPbAY2YdapTZeS3qlJLepNI.roa (raw, json)
Hash identifier:          WbUs+rzjZjspnt67dMPK6jCfqhnJOVgtRTQ/W/EFQjQ=
Subject key identifier:   93:16:E5:A8:F6:C0:63:66:1D:6A:94:D9:79:2D:EA:94:92:DE:A4:D2
Certificate issuer:       /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial:       55
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/kxblqPbAY2YdapTZeS3qlJLepNI.roa
Signing time:             Fri 31 May 2024 01:31:09 +0000
ROA not before:           Fri 31 May 2024 01:31:09 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     0
IP address blocks:        157.17.128.0/17 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
        Validity
            Not Before: May 31 01:31:09 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=9316E5A8F6C063661D6A94D9792DEA9492DEA4D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:ec:03:e3:92:a4:13:55:d3:68:33:64:87:
                    2e:74:59:70:62:95:45:9d:1e:60:0f:60:51:1a:3c:
                    f0:18:cf:6c:95:3d:01:db:9a:22:8b:23:02:a6:eb:
                    8f:fb:61:b5:37:de:bb:b5:b6:10:d9:ba:3c:0c:5c:
                    7c:bf:7f:4f:68:20:28:3f:00:85:4f:e2:95:7d:52:
                    d2:5f:5c:2c:fe:48:89:a4:35:50:0c:b2:ea:9e:d4:
                    09:47:ca:e5:3f:21:7b:fd:8d:03:9a:e4:62:07:54:
                    44:2c:ac:0b:8f:aa:63:61:55:0d:b2:b8:bd:2d:96:
                    75:57:2e:bf:92:f4:eb:38:ff:74:4d:2d:d9:d4:ca:
                    2d:fa:c5:b3:81:80:62:92:3e:5d:0f:b0:7e:ee:78:
                    c7:ac:c1:98:97:d4:d3:71:4a:c1:ed:24:ec:66:f1:
                    11:e3:99:e5:47:ca:83:07:2a:94:67:cd:9e:4c:ea:
                    68:7b:a4:70:a5:47:0b:98:b1:36:90:fc:8f:e7:ba:
                    0a:fc:79:a6:e1:da:ee:83:45:d7:8e:03:0b:33:6d:
                    d3:30:14:89:2e:d6:5c:25:2e:bb:e1:a0:c2:47:1b:
                    cc:d2:2f:0c:58:de:6a:c7:ab:8a:f6:60:a5:d8:73:
                    34:80:e7:03:aa:bf:c3:03:40:22:ee:81:ae:2a:93:
                    2e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:16:E5:A8:F6:C0:63:66:1D:6A:94:D9:79:2D:EA:94:92:DE:A4:D2
            X509v3 Authority Key Identifier:
                keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/kxblqPbAY2YdapTZeS3qlJLepNI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.17.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b1:63:dc:f7:61:76:07:1d:6f:26:49:7f:60:f4:c7:5a:16:10:
         4d:29:5a:bd:74:fb:32:39:4b:aa:7e:4b:53:c5:c1:3d:0a:8d:
         b4:ef:21:bb:d8:1c:b2:23:87:c7:78:61:de:7a:9d:73:21:a8:
         89:d1:e9:3e:11:ca:d5:97:40:a8:7d:c8:6c:84:85:88:92:28:
         11:f5:cb:33:2d:e8:67:f5:64:54:74:3e:ab:b4:47:51:53:85:
         e3:be:a2:85:43:60:dd:ca:22:60:b0:91:03:03:3d:48:65:57:
         f4:11:f0:a2:06:d9:e0:53:15:a2:01:27:0d:ab:60:63:28:10:
         14:84:59:51:29:00:c1:4e:cc:a9:cd:13:90:35:cb:f9:2e:f3:
         05:be:6b:25:e7:89:20:92:c6:37:d8:3a:73:49:9d:f5:32:85:
         0c:8d:c5:ff:76:91:f5:64:f1:e1:42:6a:4f:a5:df:4c:ee:34:
         99:9b:c9:22:e3:fb:83:f8:7c:9d:ec:c1:c2:46:71:29:b7:ea:
         c9:4c:5b:f2:6e:6b:ae:66:c7:19:d1:03:ba:cf:e0:86:c2:b2:
         eb:00:04:66:ff:3c:09:63:11:78:40:db:8e:46:9c:62:51:33:
         a6:91:1f:ee:e6:37:8a:f1:fb:ba:37:0e:d1:d6:ca:91:a9:9d:
         7a:0f:17:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:33 2024 by rpki-client on console-fra.rpki-client.org