Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/lwwGWyS2vW91y8cRl-nbKG4fQYI.roa
File:                     lwwGWyS2vW91y8cRl-nbKG4fQYI.roa (raw, json)
Hash identifier:          re14thi29yZTivFZ8IFAGHNMkCaryDYv6e6itQxz+as=
Subject key identifier:   97:0C:06:5B:24:B6:BD:6F:75:CB:C7:11:97:E9:DB:28:6E:1F:41:82
Certificate issuer:       /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial:       42
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/lwwGWyS2vW91y8cRl-nbKG4fQYI.roa
Signing time:             Sat 01 Jul 2023 01:31:04 +0000
ROA not before:           Sat 01 Jul 2023 01:31:04 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     0
IP address blocks:        157.17.128.0/17 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:37:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
        Validity
            Not Before: Jul  1 01:31:04 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=970C065B24B6BD6F75CBC71197E9DB286E1F4182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:7d:eb:83:07:81:e2:45:05:c2:37:06:1b:
                    1a:4f:49:f2:cc:0f:4a:f4:13:30:cd:73:db:53:55:
                    9f:1a:09:a0:1f:6f:10:39:7f:e3:69:1b:ed:f1:bd:
                    8f:f1:a7:72:65:7a:82:95:63:32:a0:ec:d5:23:14:
                    31:0b:4e:5e:65:78:6a:1b:04:24:1a:ac:e3:1b:80:
                    81:6d:a3:2a:e4:da:7f:69:68:68:94:8e:1c:bb:04:
                    0d:7b:3b:b8:17:40:ff:9e:ce:7d:99:e3:b2:55:41:
                    25:ea:40:ab:c7:fe:45:a7:28:80:94:25:68:ae:40:
                    a8:53:51:fe:ac:dd:84:5a:7f:04:27:a6:b4:7f:2e:
                    ab:92:55:9d:90:55:ec:c6:ab:59:27:44:a2:4c:7a:
                    36:2d:8f:03:38:d1:b6:24:c5:ec:19:3c:7e:51:63:
                    34:5c:9d:56:59:03:d3:e0:54:83:b3:03:ad:7f:28:
                    5c:21:b2:7d:66:9e:21:00:db:c4:88:d0:5f:14:ae:
                    2c:d4:5f:bd:32:ad:23:9c:c1:b4:58:6a:e3:79:00:
                    2b:12:59:af:f1:6a:02:ee:3b:79:5b:c7:42:85:5f:
                    77:7c:59:31:63:f6:e0:0c:fa:bd:42:6b:67:e6:6c:
                    bd:31:ef:f3:2d:4a:c7:14:a2:19:d4:8e:b1:0f:4c:
                    f5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0C:06:5B:24:B6:BD:6F:75:CB:C7:11:97:E9:DB:28:6E:1F:41:82
            X509v3 Authority Key Identifier:
                keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/lwwGWyS2vW91y8cRl-nbKG4fQYI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.17.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ce:80:7e:59:82:24:6a:54:01:ae:7d:75:70:b3:8e:65:ee:5b:
         c4:51:6f:26:db:a8:14:7c:0f:a0:db:26:b5:2d:04:64:ee:d4:
         b1:1a:3b:7e:6f:1e:1d:8e:22:13:9e:16:03:6a:9e:4f:49:83:
         2b:d8:09:ad:f0:ac:17:b6:ef:5d:e2:fb:35:54:02:30:5f:a9:
         4f:fb:1e:c5:67:e2:2c:69:70:4c:89:9a:43:91:29:95:2c:0f:
         3b:43:be:90:02:02:c3:49:e9:4d:0c:f5:51:dc:f0:30:ca:47:
         41:72:53:6b:34:0c:b6:99:de:ac:7c:ee:bb:e2:de:aa:a8:c2:
         de:f4:3a:ae:27:c5:72:3f:87:54:fb:b2:32:58:e8:1b:90:ed:
         a0:72:9c:53:cc:c2:c6:3a:27:99:fb:8b:68:cb:92:ad:0b:5a:
         b1:af:30:cd:2a:d0:9a:16:f3:f6:5c:5a:41:df:37:f3:7c:e8:
         b8:e5:4c:9f:96:77:b3:25:e5:67:ed:a7:05:c5:14:13:81:d2:
         6b:dd:fe:cc:b6:2a:7a:e8:2b:63:97:5d:45:d2:73:4f:a8:ab:
         75:48:0d:e6:48:c5:db:50:f0:8e:e4:1a:5d:15:64:e1:d3:cf:
         b7:a9:62:b4:d4:c3:15:a6:5b:a3:7b:bc:dd:8b:69:83:e6:cf:
         34:2b:a1:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:47 2024 by rpki-client on console-ams.rpki-client.org