Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/FSBMgdj9SdaRH7kVmyWmZI0U308.roa
File:                     FSBMgdj9SdaRH7kVmyWmZI0U308.roa (raw, json)
Hash identifier:          hvLPcVV3y7ZCCqvyrGkHhFFdH/jS2fXyfX0mfvbjJmg=
Subject key identifier:   15:20:4C:81:D8:FD:49:D6:91:1F:B9:15:9B:25:A6:64:8D:14:DF:4F
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       2F
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/FSBMgdj9SdaRH7kVmyWmZI0U308.roa
Signing time:             Sun 31 Mar 2024 01:32:55 +0000
ROA not before:           Sun 31 Mar 2024 01:32:55 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2915
IP address blocks:        211.14.208.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Mar 31 01:32:55 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=15204C81D8FD49D6911FB9159B25A6648D14DF4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:80:3d:cd:9e:7c:26:a2:49:25:96:e1:2e:41:
                    2c:35:77:51:c0:de:b5:02:99:5b:56:f2:e1:e8:83:
                    35:2b:11:ae:76:5d:43:82:ba:4a:10:a0:cf:f0:63:
                    24:25:cc:d9:e7:83:a2:34:3b:d2:fe:75:dc:a8:73:
                    f0:da:90:5d:87:9a:a4:82:3f:ac:bb:d2:c0:c9:83:
                    06:e5:03:a5:2c:13:d5:c7:36:25:3b:c7:a6:b5:e2:
                    4d:5a:0b:ef:d4:1d:e6:4b:50:19:53:83:92:fc:50:
                    59:67:7e:cf:1d:aa:70:14:27:52:d1:61:51:e6:b6:
                    24:3a:63:a2:31:11:5a:90:fc:e2:31:a7:96:10:df:
                    7c:9b:a2:f5:39:87:b2:af:8b:c2:72:3a:bc:e9:65:
                    2f:d9:66:45:85:d2:ab:6d:f4:14:bf:33:e4:e8:a2:
                    99:df:fc:00:cd:15:44:23:81:fc:41:94:91:1a:e6:
                    1c:eb:69:d1:02:39:7c:7e:bd:f7:8d:65:e5:0e:da:
                    32:ef:b5:d2:34:8d:fa:ba:9b:89:99:24:ce:9a:77:
                    ff:38:84:f7:60:d8:7e:82:d4:a3:21:00:65:2d:a9:
                    d9:d7:ea:3b:bb:69:19:10:9f:f4:c7:95:0c:31:15:
                    38:9e:88:d2:95:5a:bf:85:64:f5:bf:ef:7f:31:00:
                    23:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:20:4C:81:D8:FD:49:D6:91:1F:B9:15:9B:25:A6:64:8D:14:DF:4F
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/FSBMgdj9SdaRH7kVmyWmZI0U308.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:f4:c7:86:eb:78:a0:bc:67:ba:02:80:03:e0:8c:9b:c2:17:
         f4:ba:98:06:75:c4:d3:40:53:d9:83:63:42:9d:a1:6c:fc:ee:
         80:d5:75:71:62:76:fc:dc:1c:f0:b5:76:00:85:d9:d0:41:99:
         53:a4:21:8d:00:f8:f0:ca:dd:a7:d8:18:92:b0:0b:b0:5d:99:
         ab:da:fc:8b:9c:f3:6e:fa:47:32:0c:4b:88:d9:72:17:cb:45:
         0c:42:e9:1e:75:a2:97:ef:8a:11:73:1c:bd:0c:eb:39:c6:a7:
         c4:1a:7c:46:6c:de:68:02:36:a9:b3:c5:9f:c8:54:41:47:25:
         ae:5b:a5:2b:a5:93:6b:c5:6d:7f:13:05:8f:94:87:51:6c:c9:
         e0:08:e1:32:71:64:0c:70:9d:16:35:93:fe:8c:d5:be:ed:c6:
         71:a1:bd:db:27:e6:28:8f:cc:db:f0:4c:c3:5a:32:97:8a:86:
         a9:88:bc:10:f8:f5:90:66:b5:3f:ae:e7:8e:84:b6:f4:03:ed:
         07:ed:e7:10:cc:af:2b:b1:cd:dd:5d:3a:99:0c:94:52:f5:d4:
         6b:b5:dd:d5:39:a4:b7:d8:5b:5b:82:87:bb:7a:99:22:6a:30:
         e6:eb:97:e5:a7:18:43:af:2a:9e:29:9d:45:11:ca:40:73:df:
         0a:37:d7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:23 2024 by rpki-client on console-fra.rpki-client.org