Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/1UVw9nIjGwk8NBRK74_fd00ep54.roa
File:                     1UVw9nIjGwk8NBRK74_fd00ep54.roa (raw, json)
Hash identifier:          3l+Gqr4BgNI/XNoWM4x/nhUGIvc8n+9f/bhA+1EeqBM=
Subject key identifier:   D5:45:70:F6:72:23:1B:09:3C:34:14:4A:EF:8F:DF:77:4D:1E:A7:9E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01DF
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1UVw9nIjGwk8NBRK74_fd00ep54.roa
Signing time:             Sun 01 Oct 2023 01:40:02 +0000
ROA not before:           Sun 01 Oct 2023 01:40:02 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        14.193.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:40:02 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=D54570F672231B093C34144AEF8FDF774D1EA79E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:34:cc:e4:52:de:db:db:67:ec:c4:d7:d0:
                    07:be:4c:c6:2f:fb:39:4d:56:7f:40:39:45:cc:74:
                    d2:b9:a0:fe:61:5e:26:09:9e:e0:8d:2c:4f:10:92:
                    25:db:88:8c:30:59:48:94:fa:e6:9f:87:2e:31:78:
                    05:8d:e0:a3:dc:c6:5a:94:36:47:6d:16:a5:7c:46:
                    51:0d:43:21:31:1a:56:3b:5a:67:52:20:07:63:31:
                    0f:ec:4b:ac:b2:1a:64:23:83:36:fa:b8:d9:83:cf:
                    c3:3d:d3:dd:86:fd:83:ab:0b:a5:02:1d:26:dc:3c:
                    28:43:7f:0c:1c:16:b4:0e:05:78:89:6e:aa:aa:40:
                    46:17:12:7c:b2:a4:75:bc:36:95:aa:eb:7c:07:f1:
                    79:9b:8a:27:a6:4a:79:18:d2:ba:c8:68:fc:4c:59:
                    0a:fc:9b:22:34:10:10:33:8e:ca:5d:72:37:22:10:
                    50:c7:32:d6:88:8c:a2:6a:a7:0f:87:45:2d:f7:ec:
                    79:08:62:23:5e:e4:40:cb:70:f0:33:16:b0:5d:17:
                    e3:ed:b7:57:db:f8:cb:2f:7b:71:dd:2f:09:a3:3a:
                    05:24:56:05:59:3c:46:75:2f:17:b6:91:58:d5:d7:
                    db:91:37:e4:cc:ad:ef:56:67:1b:64:33:64:b0:ea:
                    01:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:45:70:F6:72:23:1B:09:3C:34:14:4A:EF:8F:DF:77:4D:1E:A7:9E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1UVw9nIjGwk8NBRK74_fd00ep54.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.193.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ab:14:89:44:0f:ed:38:ff:3b:63:c3:a7:13:ae:de:cd:73:97:
         be:c4:34:8e:71:cb:81:32:99:8f:78:21:fb:cb:96:5b:e2:4d:
         ad:7e:ad:11:ca:db:d3:04:14:b6:24:96:d8:8a:49:1c:76:16:
         4e:d1:64:e3:a8:2b:e3:2c:92:53:da:54:71:25:91:16:53:5f:
         e8:31:c5:f3:f9:3e:20:13:f0:12:2e:98:2f:71:d5:bf:16:47:
         f1:0f:65:0b:40:55:fd:e8:74:c9:10:7d:83:06:33:20:bc:89:
         e5:ff:a7:b5:37:be:19:91:a2:66:c7:d3:75:0c:01:57:4a:11:
         e7:ae:cc:46:1c:20:56:d9:77:65:13:50:dd:38:be:2f:8f:c2:
         7a:fc:e0:d0:24:4c:ee:38:77:44:02:be:72:f7:50:95:1b:dc:
         55:1e:31:ef:01:ca:23:35:e4:64:af:17:01:f7:9f:ea:ce:4d:
         8b:69:85:8c:f3:2a:d4:a8:8b:c7:94:96:bf:b9:15:dd:93:56:
         a6:14:e0:77:97:04:16:b3:58:60:e1:13:af:11:f6:3c:98:b5:
         73:94:7c:92:4f:3a:cc:6f:df:1e:78:93:05:be:19:e0:4e:19:
         7f:b1:8e:72:80:2a:09:33:9d:32:d0:9f:a5:b5:c2:21:d9:68:
         03:7b:c8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org