Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/FLVNOWL-qGmX7VmWIqwUl7De7NE.roa
File:                     FLVNOWL-qGmX7VmWIqwUl7De7NE.roa (raw, json)
Hash identifier:          75BUETjZtEa6LWSaxj3FjQ9G7RyxDKD7OD+iQjCjwDs=
Subject key identifier:   14:B5:4D:39:62:FE:A8:69:97:ED:59:96:22:AC:14:97:B0:DE:EC:D1
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0187
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/FLVNOWL-qGmX7VmWIqwUl7De7NE.roa
Signing time:             Sat 31 Aug 2024 01:29:12 +0000
ROA not before:           Sat 31 Aug 2024 01:29:12 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        133.159.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Aug 31 01:29:12 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=14B54D3962FEA86997ED599622AC1497B0DEECD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:55:af:36:7c:c4:ab:38:7e:6f:8f:d5:ae:96:
                    23:81:63:54:50:f5:19:94:8a:d7:c1:b6:e9:37:4c:
                    9e:97:93:47:3e:41:34:04:45:88:4d:ff:52:3f:d1:
                    fa:e2:86:1b:df:65:a8:c2:cc:60:74:0b:53:6e:90:
                    75:4e:cf:0d:9c:84:3d:a5:9c:49:2d:71:f7:57:40:
                    48:0b:8d:e1:b9:fd:ce:29:4a:8e:2d:62:c8:17:ba:
                    14:0e:15:e1:51:3c:95:3e:da:f3:85:cf:9f:10:05:
                    e1:41:71:ef:b1:19:9f:3d:36:a6:e3:c9:d3:0f:ed:
                    ee:bb:76:1c:b6:ec:b1:c8:cd:5b:3f:e3:48:64:d6:
                    1a:1a:be:1b:10:b7:27:96:59:e6:20:51:13:db:ee:
                    94:86:cb:19:99:a4:9f:9b:9d:7a:1f:0b:58:da:15:
                    13:72:36:6d:bf:8a:dd:12:03:81:0a:af:a5:a8:1b:
                    79:9a:4b:6e:3b:7d:bc:1b:1d:70:3d:29:5a:e8:3b:
                    3d:7a:0a:7a:a0:b6:0e:f1:df:4d:83:48:ea:7f:66:
                    4a:75:38:5d:77:e5:36:fc:9e:39:8f:59:04:3c:20:
                    fe:10:ae:ad:7f:27:a6:6b:4f:bc:ec:9a:96:53:39:
                    4a:ee:ee:d2:2e:51:29:b3:be:a4:e6:a8:bc:d5:63:
                    e9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B5:4D:39:62:FE:A8:69:97:ED:59:96:22:AC:14:97:B0:DE:EC:D1
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/FLVNOWL-qGmX7VmWIqwUl7De7NE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.159.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         49:d6:3e:42:97:44:25:b7:08:fa:35:58:24:26:89:6f:1f:48:
         c2:b4:ce:54:a6:83:6f:6a:bc:ec:61:90:9b:8d:58:f3:3d:01:
         c6:1a:11:23:9e:32:ce:4a:f8:65:7c:58:89:8b:45:12:2c:b7:
         06:02:cf:96:f3:35:0a:66:97:60:28:34:fe:f0:d4:f1:ee:da:
         9d:08:1b:b6:41:15:12:c2:85:65:45:b8:c3:c8:0f:c4:d7:42:
         cd:fd:0c:be:7e:81:cb:b5:89:00:27:85:3c:b3:c2:75:d6:82:
         4c:78:0d:95:c6:72:cd:ba:28:2d:47:3c:e6:87:87:33:de:86:
         09:30:67:53:75:6b:22:89:ed:7f:e8:0e:78:71:16:b7:b2:03:
         fd:43:fa:58:41:44:04:d8:e0:e2:a6:7b:b7:ed:a3:5b:c5:ea:
         fd:47:b0:89:95:4a:78:85:fb:3a:31:bd:a0:ec:5d:82:cc:b1:
         d7:9c:6b:14:21:c7:4c:71:7e:da:4d:33:2a:23:c1:a2:da:e9:
         fb:82:13:75:1a:9a:92:de:bd:19:ee:56:52:5f:d7:ec:97:54:
         7f:d3:36:d8:68:54:1f:f9:15:d4:88:16:42:cd:46:13:88:89:
         8a:20:c3:ad:f6:15:34:d2:4a:0d:2a:2c:21:1a:93:cb:3e:3d:
         cc:b7:b8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:30 2024 by rpki-client on console-ams.rpki-client.org