Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/193jX99Yzz3mJtvRvBFmRbk7-rE.roa
File:                     193jX99Yzz3mJtvRvBFmRbk7-rE.roa (raw, json)
Hash identifier:          4uD5qwScmkb80RF2/r/QXRtVbYdbgGK0jeGCaLjY5FQ=
Subject key identifier:   D7:DD:E3:5F:DF:58:CF:3D:E6:26:DB:D1:BC:11:66:45:B9:3B:FA:B1
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       019A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/193jX99Yzz3mJtvRvBFmRbk7-rE.roa
Signing time:             Sun 01 Oct 2023 01:36:28 +0000
ROA not before:           Sun 01 Oct 2023 01:36:28 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4721
IP address blocks:        202.43.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:36:28 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=D7DDE35FDF58CF3DE626DBD1BC116645B93BFAB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:31:d1:28:3f:47:8b:1a:fb:38:7e:03:0f:09:
                    e7:cd:79:6f:62:73:05:50:58:da:e3:f7:d5:0a:fc:
                    c4:b0:5f:9a:35:8e:fa:ba:de:f1:99:47:d0:64:6b:
                    76:84:58:86:7f:ba:6e:dd:7e:18:e9:ab:44:76:7e:
                    fa:2b:29:04:12:4d:39:2b:fe:63:d8:ae:99:e2:d9:
                    07:59:ff:b0:bf:a2:f9:4e:07:e6:56:9d:66:ff:8e:
                    4c:09:dc:36:80:cd:49:bc:37:2e:14:d1:56:86:2b:
                    0f:0a:6c:40:3c:d9:75:da:53:3c:f4:87:e6:84:0e:
                    69:e8:d2:13:46:3b:8e:03:78:93:5d:3a:2a:3e:c5:
                    d0:19:b7:4c:b3:92:7a:f0:ad:b6:4f:f5:12:c8:cb:
                    65:62:25:1b:51:76:2f:7e:57:5a:5b:56:35:ed:5d:
                    36:58:88:8c:43:3e:9a:45:d3:3a:50:43:61:c7:e3:
                    a2:0f:cc:3d:cf:36:dd:be:4c:df:45:6d:02:05:e6:
                    39:be:fc:40:ca:89:c7:5a:24:1b:5e:09:d7:5a:b5:
                    b2:6c:6b:5f:10:cd:7e:09:0f:b3:d2:81:56:8f:11:
                    da:3b:5d:0e:2a:66:5b:5f:08:09:28:9a:db:d5:17:
                    8d:cc:84:ef:9e:9b:76:95:9a:86:ad:70:94:a3:37:
                    5c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DD:E3:5F:DF:58:CF:3D:E6:26:DB:D1:BC:11:66:45:B9:3B:FA:B1
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/193jX99Yzz3mJtvRvBFmRbk7-rE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a7:08:ce:36:b0:4c:77:01:6d:ea:96:26:c0:b8:58:3d:cb:46:
         f0:3b:cd:ce:c8:f5:05:b9:cc:b0:39:41:16:fe:a5:54:78:fe:
         ff:29:6b:f6:fd:76:a0:a4:44:85:83:49:e6:91:68:db:81:80:
         66:84:d6:85:a4:34:f9:ac:92:a6:8f:b6:04:a1:98:06:53:31:
         e8:fc:ff:85:08:10:1f:5c:64:0d:5e:eb:27:fc:a7:79:02:ef:
         0d:28:99:4b:8b:1c:58:5f:42:aa:cc:d7:ab:7c:1e:2b:e3:ab:
         20:fc:48:97:81:01:fe:3d:09:8b:07:2b:53:4d:89:13:3b:0c:
         ac:c7:66:a6:9d:2a:a7:47:0c:16:f6:9b:cb:1a:99:ed:cb:84:
         e9:0e:0c:8e:f9:81:b7:b9:ea:d1:54:c0:b5:f6:25:52:61:e2:
         61:15:30:3f:4b:b0:cd:f0:ec:9b:be:9c:aa:8a:96:69:4d:46:
         39:a7:f9:44:77:1e:6f:53:64:08:8c:ca:14:68:2b:79:71:0a:
         37:7d:fa:d3:e5:b3:78:95:bc:46:6b:60:a8:c8:ee:39:1f:34:
         08:be:00:1c:93:7e:90:29:d1:d7:25:32:76:40:91:bc:7d:4b:
         63:70:9c:4e:0f:bc:8b:dd:a2:21:fd:9f:b8:10:32:59:d5:75:
         de:53:f9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org