Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/7WHbq1bXjG-ZNOfvWs1fXF_p-wk.roa
File:                     7WHbq1bXjG-ZNOfvWs1fXF_p-wk.roa (raw, json)
Hash identifier:          iuEwQB2DwsyrejE8eBXoQ6Rx9cgJ5hmetju5olJcfC8=
Subject key identifier:   ED:61:DB:AB:56:D7:8C:6F:99:34:E7:EF:5A:CD:5F:5C:5F:E9:FB:09
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0198
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7WHbq1bXjG-ZNOfvWs1fXF_p-wk.roa
Signing time:             Sun 01 Oct 2023 01:36:26 +0000
ROA not before:           Sun 01 Oct 2023 01:36:26 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        182.50.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:36:26 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=ED61DBAB56D78C6F9934E7EF5ACD5F5C5FE9FB09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:23:51:76:0b:6b:3f:47:69:0d:7a:8b:9e:
                    b5:81:80:3f:a9:9a:ad:01:c6:48:4c:c8:f2:78:a7:
                    28:34:21:67:d1:4e:4f:dc:21:20:b6:57:e4:a3:9e:
                    2f:86:22:2d:af:0c:70:d1:b9:7c:fb:2b:b0:6c:58:
                    e6:05:6d:68:7e:d0:75:8b:ed:4c:6f:3d:9e:43:38:
                    b4:d3:ec:bc:87:60:cf:9b:9e:09:2d:d5:d7:c9:9c:
                    2a:e4:f1:7c:97:c8:e1:da:29:7a:ee:82:2f:7c:7d:
                    a8:1a:16:fb:58:fd:81:25:b9:bc:dc:3f:c3:0c:2a:
                    c4:ca:6e:8f:e3:7b:70:b2:df:9d:bc:0c:9d:8a:5f:
                    ae:30:f6:6a:77:07:0b:4e:84:c0:59:90:48:79:46:
                    8e:81:ba:c1:27:43:62:32:29:63:1a:3d:8a:b1:2e:
                    d8:cf:95:3c:4e:8a:16:c8:02:ce:96:70:5a:fd:18:
                    f3:0c:12:2c:87:ea:de:d8:b0:c6:f6:90:b2:d9:5f:
                    bb:92:fd:27:53:4e:1d:7e:ab:9c:3c:a4:43:ec:68:
                    ff:f8:a8:b4:58:91:29:e0:24:6a:55:a9:c6:fc:cc:
                    4b:4e:43:c7:3d:80:17:74:29:08:7d:2c:6d:dc:31:
                    f3:28:60:ec:e5:fd:68:1d:8b:e2:3b:5a:cd:5d:b4:
                    09:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:61:DB:AB:56:D7:8C:6F:99:34:E7:EF:5A:CD:5F:5C:5F:E9:FB:09
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7WHbq1bXjG-ZNOfvWs1fXF_p-wk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         da:2c:23:8f:e1:96:6c:1d:8a:03:f3:28:bc:46:28:02:23:54:
         6e:a8:33:58:ec:0c:37:54:67:ac:74:f8:d7:e1:4e:84:67:2b:
         e4:73:33:1e:fd:07:65:1f:61:31:b5:38:5d:25:d7:70:cf:23:
         02:9c:60:49:d5:8f:93:1c:da:e1:f8:f6:9b:28:1f:8c:ff:2c:
         93:9f:85:0d:cc:64:58:c7:81:08:23:a0:9f:9d:d1:8a:83:95:
         0b:21:88:aa:e6:05:99:83:e4:d9:59:f2:cd:fc:19:95:c5:6f:
         6f:b8:70:93:af:f8:a5:0c:5d:39:11:d6:d2:8e:50:d6:cb:cd:
         57:d0:d7:ad:0d:2b:d3:16:27:b8:72:2d:c5:bf:b9:65:91:3d:
         2c:38:49:97:e4:48:9a:b6:df:89:b0:5f:e5:66:95:1c:49:a3:
         ae:58:c4:43:09:13:a0:a7:96:af:a9:2b:5f:89:02:b0:9f:70:
         fb:db:7c:a8:c1:f4:05:76:dc:e8:95:04:b9:c8:e9:94:0d:e8:
         1e:c3:79:af:14:0c:59:27:45:87:70:0c:97:67:90:78:71:62:
         7d:7c:9f:73:0a:d0:4e:bb:93:a3:d0:91:bd:d7:cf:87:9e:23:
         3d:b4:1f:39:e6:41:40:19:68:5d:e5:d4:43:d8:e6:d4:53:b9:
         0e:12:6f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org