Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/02BEDXTM7tBXoe_1A1y5VZ18lKw.roa
File:                     02BEDXTM7tBXoe_1A1y5VZ18lKw.roa (raw, json)
Hash identifier:          lLEDTYXcEzJotirIDpS0q6hmgCjQBwvVqtPHffEuoFg=
Subject key identifier:   D3:60:44:0D:74:CC:EE:D0:57:A1:EF:F5:03:5C:B9:55:9D:7C:94:AC
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       012E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/02BEDXTM7tBXoe_1A1y5VZ18lKw.roa
Signing time:             Sun 01 Oct 2023 01:30:08 +0000
ROA not before:           Sun 01 Oct 2023 01:30:08 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     7686
IP address blocks:        61.211.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:30:08 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=D360440D74CCEED057A1EFF5035CB9559D7C94AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1d:1c:0b:91:6e:39:a1:71:71:0b:ee:72:89:
                    c0:b8:44:6b:5c:a6:68:2e:8f:40:ac:bf:35:42:8a:
                    41:0e:47:b7:7c:88:11:b3:80:fd:0a:25:a1:81:52:
                    11:4d:bf:74:dc:7d:43:f5:9e:61:a8:08:d0:b9:42:
                    c8:65:e8:a0:fd:f8:0c:86:c3:32:0c:37:f3:30:a4:
                    2a:1f:98:97:4b:f1:93:3c:49:6f:6c:b0:7e:b1:26:
                    78:90:bb:c8:92:c7:0a:67:16:3d:34:29:dc:80:06:
                    66:58:aa:bd:21:78:72:1b:d3:21:99:28:c7:84:39:
                    24:94:9b:39:2d:d1:1c:3c:ea:bd:46:17:9d:0a:03:
                    8a:fc:a8:f4:2f:ec:f7:95:09:51:1c:4d:38:2d:17:
                    2b:5b:51:90:97:f6:f0:c2:42:7e:dd:f1:21:8a:e3:
                    57:47:99:56:c3:b0:99:50:91:ea:6d:5b:91:5b:fb:
                    24:e7:a1:bb:b2:ee:31:ee:c4:6f:64:72:d3:c5:11:
                    95:56:0a:5f:2f:07:dd:c0:24:dc:0b:b3:96:24:1a:
                    09:de:00:a0:b3:79:c5:c7:02:d1:ea:12:d4:77:c5:
                    ae:7d:53:55:84:92:d9:de:9f:ca:07:ca:fd:5e:50:
                    42:08:04:eb:8d:c1:ab:42:28:2f:cc:db:4b:ed:21:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:60:44:0D:74:CC:EE:D0:57:A1:EF:F5:03:5C:B9:55:9D:7C:94:AC
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/02BEDXTM7tBXoe_1A1y5VZ18lKw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:21:92:1d:16:c1:2f:71:26:0e:11:ce:d6:c8:a1:b8:be:85:
         c3:88:d7:23:5d:43:60:99:ab:b4:70:40:12:ef:36:4d:61:0c:
         49:6d:27:f8:7a:fb:2f:c2:e5:7e:fe:01:43:81:a0:b0:77:da:
         af:b6:e4:1f:f1:ad:2b:ab:0c:2a:c8:08:e9:80:cf:83:48:1c:
         6d:84:eb:16:43:1a:41:fa:3d:c1:ac:18:13:40:02:7a:8a:ec:
         2e:59:91:6c:a6:5e:f9:f2:ba:81:7e:57:80:72:82:e3:62:f4:
         6e:ad:99:45:08:6e:32:76:0b:d2:71:c6:88:69:94:5b:a8:f6:
         2e:79:06:0a:a5:11:26:f8:63:09:16:b3:04:5c:1b:77:ef:4a:
         74:0b:70:34:8e:99:13:b8:bd:01:1e:cc:67:39:c3:ae:b0:7b:
         3c:6a:b7:1a:1b:6f:2c:94:4c:d9:1b:70:04:ee:e2:fa:df:22:
         bd:bb:cf:a8:e7:7a:f3:e6:fe:3d:12:fc:69:a7:0f:b1:ce:f5:
         58:55:c6:9a:dc:06:2c:c8:23:ba:ca:0b:45:93:ae:66:22:7c:
         fe:3b:e8:0d:24:ca:de:82:67:f9:e3:8c:95:ae:a4:14:63:3c:
         7c:e6:f5:0c:26:60:9d:aa:64:6f:be:4d:2a:42:af:29:45:38:
         cc:1b:6b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org