Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/0_WLfEMH_2yV5J3jw0uJD1ngdIY.roa
File:                     0_WLfEMH_2yV5J3jw0uJD1ngdIY.roa (raw, json)
Hash identifier:          22laZ5nPP7EJrX8lUR3syHtJRuBr7zzr+6jxxIyLoXQ=
Subject key identifier:   D3:F5:8B:7C:43:07:FF:6C:95:E4:9D:E3:C3:4B:89:0F:59:E0:74:86
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01C1
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0_WLfEMH_2yV5J3jw0uJD1ngdIY.roa
Signing time:             Sun 01 Oct 2023 01:38:17 +0000
ROA not before:           Sun 01 Oct 2023 01:38:17 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        58.85.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:38:17 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=D3F58B7C4307FF6C95E49DE3C34B890F59E07486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a7:d1:6f:1d:fb:5c:e5:f7:c8:37:1a:7b:9b:
                    bb:c2:a1:b9:29:04:fb:a4:28:15:ea:91:8a:ea:29:
                    6e:b5:0e:65:6b:75:4f:02:43:ef:a1:dc:a3:bf:7a:
                    54:2c:df:c1:6a:80:f0:70:15:ea:ef:97:35:b6:63:
                    f9:96:ae:48:7f:5b:8e:f3:61:90:4b:4c:ba:88:19:
                    a7:c2:c0:95:9a:d4:2e:9e:92:7c:ab:72:b1:4b:87:
                    ef:6a:b7:b5:f1:b0:4e:ad:2d:5f:bf:fb:ef:c6:06:
                    2b:65:e0:69:2d:10:5b:20:63:26:13:37:a2:f1:89:
                    17:b7:98:b9:22:78:e0:10:4e:7f:77:3b:47:7f:59:
                    95:71:f7:8d:85:87:6b:15:7f:bd:ba:98:e4:df:d7:
                    0c:cb:14:f6:9f:af:44:ec:9d:1b:d2:92:8c:0c:4d:
                    4b:f2:7c:a4:4d:0c:a9:44:70:66:9f:5c:ab:a9:a7:
                    1b:5b:ff:ad:97:fd:04:0b:51:bf:c9:e9:44:2c:4e:
                    95:93:ac:83:6c:cc:b1:88:ef:d3:4c:8c:45:a1:28:
                    c6:7b:10:29:75:b6:4f:f6:3a:fd:8e:67:57:dc:cc:
                    2d:8a:30:fe:b0:3a:b5:11:d1:e1:c5:b4:e7:09:8f:
                    d7:cb:00:93:db:30:3a:03:d0:1b:91:aa:1c:c7:4d:
                    b3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F5:8B:7C:43:07:FF:6C:95:E4:9D:E3:C3:4B:89:0F:59:E0:74:86
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0_WLfEMH_2yV5J3jw0uJD1ngdIY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.85.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bc:68:9e:66:a7:62:ee:08:47:1b:16:cc:3f:4a:98:e7:19:04:
         26:be:12:14:b4:8d:40:5c:c3:e4:43:01:63:96:a2:9a:b2:a3:
         98:21:b0:5a:4b:6e:aa:6b:9d:1d:d6:eb:53:46:35:ee:0c:03:
         14:c2:f5:05:e3:a2:44:8e:a0:73:07:a2:21:47:98:34:e6:5d:
         d5:20:e8:a2:ce:6b:d7:5b:dd:68:6e:24:86:0b:cd:bd:e9:5c:
         91:6d:27:23:d5:40:c5:fa:ff:dc:a9:45:8a:9e:21:74:9e:c9:
         50:90:a1:92:06:5f:3c:df:a1:b4:6f:bb:8b:29:96:20:12:7e:
         d9:4b:51:20:5b:4e:76:81:72:9f:83:45:26:5b:c2:f7:f1:97:
         f8:ca:22:39:ac:0c:60:f5:9b:28:be:1d:5f:2b:f1:ed:bb:67:
         af:95:f7:4f:35:f1:fc:50:44:5b:d3:3e:11:23:1b:64:e1:ac:
         6c:6f:9b:3e:8c:e7:28:ab:a2:58:95:22:14:f7:7b:34:44:5c:
         8b:6b:1d:07:95:fa:7c:2b:4d:da:4e:09:b5:42:9b:e8:9f:de:
         11:e8:2f:b6:ff:6e:25:07:05:7d:5c:85:9c:a2:24:04:8a:99:
         fa:1f:e0:91:08:6c:94:11:05:ed:5a:24:2d:3e:83:a3:39:4b:
         ab:00:59:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org