Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/0QGj_r_hizu3kGiLPmUIOrul--Q.roa
File:                     0QGj_r_hizu3kGiLPmUIOrul--Q.roa (raw, json)
Hash identifier:          QtgFsicoVeL96i1a+U6L7usGs8aavTSop2CF3loFo9g=
Subject key identifier:   D1:01:A3:FE:BF:E1:8B:3B:B7:90:68:8B:3E:65:08:3A:BB:A5:FB:E4
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0159
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0QGj_r_hizu3kGiLPmUIOrul--Q.roa
Signing time:             Sun 01 Oct 2023 01:33:02 +0000
ROA not before:           Sun 01 Oct 2023 01:33:02 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     18136
IP address blocks:        219.105.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:33:02 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=D101A3FEBFE18B3BB790688B3E65083ABBA5FBE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7e:fc:29:b8:fb:d4:93:2e:ca:e7:c3:6e:bd:
                    ea:76:2d:c1:65:26:06:f0:3d:ba:ab:13:cd:51:b5:
                    1d:5e:c8:88:24:04:3f:f8:a5:5c:95:28:9b:b0:ce:
                    b3:cb:fc:a5:50:f3:c8:ce:f1:07:1f:b3:73:47:ce:
                    0b:da:75:8d:2c:4d:54:fc:96:58:60:8c:ca:61:f9:
                    23:31:cc:cf:02:94:01:73:c2:33:96:0f:cd:0c:45:
                    31:55:cc:eb:5a:86:ec:20:c0:05:93:14:41:af:f3:
                    d5:23:31:a6:09:55:8d:8f:56:c0:90:5c:68:0f:6e:
                    dd:b9:de:84:23:af:e9:89:7a:d8:4c:a9:e9:5b:d2:
                    33:cc:f6:03:77:c5:7c:e2:a2:31:e2:8f:f7:07:f6:
                    ed:63:ef:34:e2:24:91:df:14:ab:24:b3:df:4c:45:
                    d2:1b:a0:a2:5a:d7:c6:e6:c6:5a:3e:45:7d:b5:38:
                    6b:10:7e:c6:d0:fe:b8:04:9b:2c:00:bd:8a:a2:20:
                    1a:bc:dc:06:36:3e:93:de:02:0e:1c:70:40:2d:ec:
                    a9:98:47:f7:fb:a9:06:c2:0d:55:4b:9e:82:85:bf:
                    b7:53:ea:40:20:85:70:3d:16:e4:ca:79:93:23:86:
                    8e:b5:e6:91:84:aa:d9:01:00:5a:69:db:51:1f:9e:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:01:A3:FE:BF:E1:8B:3B:B7:90:68:8B:3E:65:08:3A:BB:A5:FB:E4
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0QGj_r_hizu3kGiLPmUIOrul--Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.105.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         e0:bd:ab:5b:13:9e:21:a7:5d:49:b8:d3:82:3b:e2:e9:ce:0a:
         59:df:b8:e6:3b:8e:82:e8:36:4f:05:02:08:60:27:b3:90:1c:
         a0:5e:f9:96:0d:66:76:b2:f0:fe:55:81:2d:00:b0:05:2a:d4:
         5e:d7:45:aa:45:f2:79:d5:c9:52:b6:68:06:aa:8f:7c:5f:70:
         da:2e:70:e1:28:e1:55:43:14:ac:e1:8f:a7:3e:de:a9:fb:db:
         3d:6c:f0:64:e0:d1:f5:0f:0a:af:a6:1c:7c:41:ce:3f:cc:36:
         09:1c:17:11:24:a1:5a:8b:71:39:31:65:3c:ce:79:40:0e:cd:
         91:da:32:2b:7a:cb:c5:6e:6d:b5:bf:54:a9:8d:5c:f6:2c:b4:
         b5:7c:44:7c:bb:3e:2d:71:26:3e:cd:3d:61:e3:b4:2f:6f:9c:
         d5:4a:6b:46:6d:00:3f:48:98:a6:4f:bf:c1:c9:ca:db:3b:32:
         27:9a:76:9d:8c:83:97:f9:a6:86:e7:1a:24:3b:7e:b8:71:03:
         a3:7b:f3:bf:a2:e1:9f:07:6e:df:f0:68:11:7e:01:9e:88:97:
         32:5f:c1:73:63:d1:db:01:fa:2b:e4:9f:21:d0:4b:7c:a0:66:
         2f:6e:ea:e6:78:3f:07:8f:e2:f7:1f:92:ec:66:ad:c4:d7:25:
         48:3e:01:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org