Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/56vs9pxZPufw7GavxdNSf5dq7NA.roa
File:                     56vs9pxZPufw7GavxdNSf5dq7NA.roa (raw, json)
Hash identifier:          abkfe9GpIHoYxiraDe+mVhp0+PABkQh/NayoJ8oLJXs=
Subject key identifier:   E7:AB:EC:F6:9C:59:3E:E7:F0:EC:66:AF:C5:D3:52:7F:97:6A:EC:D0
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01E8
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/56vs9pxZPufw7GavxdNSf5dq7NA.roa
Signing time:             Sun 01 Oct 2023 01:40:06 +0000
ROA not before:           Sun 01 Oct 2023 01:40:06 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4721
IP address blocks:        118.86.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:40:06 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=E7ABECF69C593EE7F0EC66AFC5D3527F976AECD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7c:64:3e:8f:35:1c:e8:ab:26:f8:eb:bd:85:
                    09:eb:a5:e4:48:09:52:71:13:a9:9d:31:aa:b7:0a:
                    e4:a0:db:f1:09:52:44:eb:27:bf:fb:75:8f:b4:34:
                    68:2c:f6:ee:f5:a7:25:73:72:96:35:9b:db:84:e6:
                    37:c0:12:52:ad:40:0a:be:92:e3:82:ad:ba:e4:94:
                    8d:ba:9a:d8:1e:f4:13:7a:ad:61:c6:d7:6d:f4:96:
                    56:1b:07:51:89:52:38:d2:32:66:82:b2:4e:50:fc:
                    7a:cd:1b:e2:fb:7c:e6:50:c8:c1:07:5f:6c:4d:51:
                    a3:a2:4e:96:37:4a:c8:fb:eb:c7:93:93:b1:6e:61:
                    5a:c2:a0:56:be:64:74:31:a3:f3:ae:44:7f:f2:16:
                    62:d7:e2:2b:8a:29:66:53:dd:56:d3:9a:e8:b1:18:
                    b3:5d:5e:94:ec:02:00:60:9c:ea:ef:1c:e5:be:b8:
                    69:24:15:6b:75:77:a9:fe:63:32:b0:7a:34:9c:7e:
                    49:f7:f9:e1:9f:46:ee:27:48:65:47:38:7f:e0:94:
                    50:c7:92:49:52:f1:f1:91:75:8e:f1:e1:c2:2d:bb:
                    22:32:5c:ab:51:15:df:8f:ad:30:57:ce:1c:91:dc:
                    c6:31:9f:e5:46:c1:a3:47:41:a4:45:2d:77:ef:5f:
                    ff:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AB:EC:F6:9C:59:3E:E7:F0:EC:66:AF:C5:D3:52:7F:97:6A:EC:D0
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/56vs9pxZPufw7GavxdNSf5dq7NA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.86.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         52:22:82:f6:59:b3:f2:ce:b0:78:25:a8:c1:be:ad:03:e9:69:
         3a:7b:a1:a9:6d:ac:48:3b:39:cf:50:bb:f8:61:7b:2a:40:31:
         44:b3:6f:11:9a:0b:63:10:c3:ac:11:c3:7d:25:1a:18:e9:7d:
         88:c8:41:f4:b7:2c:d4:e6:2e:ba:87:aa:ca:06:d4:90:ea:83:
         e6:05:67:7c:eb:e7:53:ac:f4:a9:f9:a4:3c:0a:23:68:e9:69:
         94:a9:17:31:c7:3b:30:02:5d:8b:42:f3:49:2b:29:41:aa:cf:
         3d:c0:61:0e:2e:a5:b8:26:26:1b:13:48:5a:ce:c9:84:4c:2f:
         34:10:8d:76:6a:3c:e3:05:cd:eb:62:bd:04:ae:cd:24:9c:ce:
         41:f9:61:8a:e5:f0:4d:dd:b3:84:fb:08:74:8e:93:b0:e0:1f:
         1e:3d:76:83:81:34:a9:d8:17:04:98:9c:e6:fb:7d:99:a9:59:
         75:47:f0:2d:0b:ea:d6:2e:54:af:48:85:8e:b4:76:88:2f:c5:
         f1:db:ef:62:6f:41:31:4a:b5:c6:a1:41:72:d1:c8:39:64:89:
         fd:40:88:66:00:63:0f:82:21:3a:a7:f4:86:d7:cd:ca:a8:4c:
         b1:d6:54:aa:15:5e:2b:b6:c0:38:54:5b:51:95:a8:72:b6:b8:
         d2:46:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org