Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/34L0l4myJ6GBaT4KEIHwD_x_Dg4.roa
File:                     34L0l4myJ6GBaT4KEIHwD_x_Dg4.roa (raw, json)
Hash identifier:          HqxSajfZ+KOdiCHw+aXyxaUtb7MgS3KctWo8tSdU1wc=
Subject key identifier:   DF:82:F4:97:89:B2:27:A1:81:69:3E:0A:10:81:F0:0F:FC:7F:0E:0E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0118
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/34L0l4myJ6GBaT4KEIHwD_x_Dg4.roa
Signing time:             Fri 01 Sep 2023 01:30:23 +0000
ROA not before:           Fri 01 Sep 2023 01:30:23 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9824
IP address blocks:        203.114.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep  1 01:30:23 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=DF82F49789B227A181693E0A1081F00FFC7F0E0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e0:b7:6e:d6:61:66:2b:f8:a7:73:ae:68:81:
                    71:54:79:b0:f7:cd:87:95:14:e7:28:4a:d0:3e:ea:
                    ec:e3:ff:5e:1a:e4:a2:58:cc:b9:51:9e:24:39:d5:
                    69:e0:6c:3e:ef:31:b3:26:53:9c:d9:1d:75:5c:bd:
                    94:d6:88:57:dd:29:1d:60:d2:ba:a3:d0:b3:99:4c:
                    b4:85:0e:eb:de:57:30:6f:ec:8b:1b:74:5e:35:a2:
                    d8:ba:75:4b:fa:eb:4e:44:a8:aa:e6:6c:9e:6d:f9:
                    5c:15:a4:cf:53:0f:bd:e1:e1:1f:1e:b8:5f:3f:fd:
                    97:9c:f5:7c:59:26:04:93:93:c2:d7:ee:82:f7:f6:
                    ea:55:0d:08:6b:1e:71:de:06:63:b4:75:1c:3a:8b:
                    90:73:d0:1d:6b:49:53:ee:ac:af:14:af:9e:be:27:
                    fb:d6:4b:bb:d5:6c:70:ea:88:55:80:f8:87:6a:00:
                    3c:82:8a:ac:38:cb:80:29:bb:e0:01:cc:b6:16:ad:
                    ae:ac:63:e3:86:52:71:85:14:f6:ae:6e:57:ac:82:
                    8d:76:15:0d:48:85:04:9a:20:4f:f7:35:e8:1c:70:
                    29:db:14:ba:35:57:ab:62:71:68:c4:18:c9:08:35:
                    1f:6b:9f:04:e9:f7:0a:c4:60:84:b9:0c:27:18:c8:
                    02:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:82:F4:97:89:B2:27:A1:81:69:3E:0A:10:81:F0:0F:FC:7F:0E:0E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/34L0l4myJ6GBaT4KEIHwD_x_Dg4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.114.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:0b:97:19:df:6c:52:d4:9a:c9:22:84:09:51:0c:ca:ea:f5:
         cb:b2:6e:7e:33:59:9e:c3:51:29:ad:02:49:3d:bf:23:5f:e2:
         0b:b7:ca:f1:14:e6:c1:3b:2c:ba:b4:fd:5f:a5:18:e4:f8:c9:
         54:16:95:ab:76:bc:5e:5b:43:8a:44:d6:2c:34:56:f3:51:a2:
         88:ad:24:5e:38:7e:9c:bb:8f:ed:7f:d4:a1:06:59:4b:8d:12:
         1f:0a:69:9a:9b:7c:69:b0:a5:7d:fb:ce:2a:9f:2e:1b:94:45:
         69:a9:72:72:e2:b0:fb:d1:d8:ac:33:da:f6:41:63:f7:28:f3:
         4e:4d:86:57:e6:5c:de:e9:04:38:27:6f:40:0f:3b:b6:a0:01:
         27:a3:80:e1:ee:93:50:36:88:3f:9b:f6:e6:7b:da:7c:8d:da:
         86:d1:e0:20:23:42:a0:4e:4f:82:c5:3f:c6:e6:72:77:4d:77:
         dd:eb:42:29:91:7e:84:6c:1b:21:02:1d:55:88:03:3e:63:3c:
         0f:8c:18:54:9f:06:a1:34:ab:2d:dc:fc:92:58:bc:b8:9f:6b:
         68:b0:db:42:ca:eb:2c:33:65:aa:f3:1d:b0:21:26:c8:26:0f:
         0d:7f:23:08:e1:b1:e8:2a:41:85:0e:75:c9:a1:18:d3:71:4d:
         d3:75:f7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org