Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/83-w5tr9TabkqvopuGPkgCwoSyA.roa
File:                     83-w5tr9TabkqvopuGPkgCwoSyA.roa (raw, json)
Hash identifier:          j9oVrA/DPdNV6k68sJOooJsMQaFqPfOI2k4MpWkuu1c=
Subject key identifier:   F3:7F:B0:E6:DA:FD:4D:A6:E4:AA:FA:29:B8:63:E4:80:2C:28:4B:20
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01E9
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/83-w5tr9TabkqvopuGPkgCwoSyA.roa
Signing time:             Sun 01 Oct 2023 01:40:07 +0000
ROA not before:           Sun 01 Oct 2023 01:40:07 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        118.86.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:40:07 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=F37FB0E6DAFD4DA6E4AAFA29B863E4802C284B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:53:c2:9c:12:6d:ee:f3:29:22:ae:7c:3e:44:
                    fa:bc:67:89:58:d7:b8:c5:3c:03:88:11:85:a2:14:
                    f2:3e:98:02:7f:73:b7:69:8f:a1:39:bd:42:29:12:
                    7e:8e:9d:de:76:0f:ea:02:72:8f:69:f1:e2:c2:a8:
                    73:5e:db:df:23:15:93:1f:2d:02:43:38:63:51:3d:
                    d9:40:cc:47:bb:0a:fc:45:ce:ec:aa:aa:3b:22:6d:
                    0f:cf:40:6b:e9:1a:36:7d:5e:57:60:16:bc:27:65:
                    0d:bf:c6:15:b7:8b:95:da:e4:9b:4e:f6:09:c4:1a:
                    8d:7f:c3:f3:d4:7b:ea:8e:9f:8f:26:9a:9b:1d:59:
                    18:55:23:24:9c:6b:ad:c8:b4:e4:ce:94:2d:5a:c0:
                    a5:f2:3b:8c:12:3d:9a:f0:eb:0e:2e:02:c0:6f:9b:
                    1e:ae:a2:ae:08:7f:90:b4:14:99:f4:d8:21:1f:24:
                    a9:1a:d8:2e:de:a9:4a:32:60:03:a8:0a:38:34:d4:
                    99:63:ae:6b:a3:53:fc:13:99:25:75:e7:3f:9e:fb:
                    b0:f6:2d:15:c0:3e:da:0c:2b:59:f2:6b:4f:aa:c0:
                    47:fd:69:c3:b7:e0:61:95:e7:c6:37:84:bc:55:46:
                    47:de:75:26:e1:ba:fd:16:cd:3c:73:f2:97:0b:8a:
                    0f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7F:B0:E6:DA:FD:4D:A6:E4:AA:FA:29:B8:63:E4:80:2C:28:4B:20
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/83-w5tr9TabkqvopuGPkgCwoSyA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.86.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         46:bd:a1:3a:b9:c9:84:61:a2:bc:3b:5c:43:bf:3d:eb:79:4a:
         3f:3c:6c:8c:50:3d:f5:9e:14:5a:3f:79:9a:4b:c9:81:51:91:
         33:53:2a:74:2c:7c:0a:db:36:e3:df:51:f1:66:1e:f7:07:1d:
         15:6b:b2:8b:1b:67:6f:5f:b0:27:49:5c:76:2c:ec:f9:69:92:
         fe:0d:be:d3:b0:fd:d6:31:92:99:91:4c:72:22:d1:7a:9a:3f:
         f6:7c:c6:b3:95:f7:56:c3:45:c9:fa:39:2a:08:30:49:b9:8b:
         9a:f6:6f:ac:49:18:66:95:c8:63:08:09:c1:73:cf:2e:36:81:
         40:4d:b9:65:0c:eb:92:84:43:e9:c4:bd:05:b2:d3:4f:69:8e:
         97:db:57:03:7e:df:40:07:ec:d0:df:68:15:75:cd:1a:81:d5:
         59:3b:42:c6:77:78:b9:4a:10:ae:63:9f:80:84:46:72:3e:58:
         c6:fc:6d:b1:a6:18:0e:96:2d:5b:b3:5b:0c:ed:2d:7d:66:0c:
         f1:9e:e8:8a:6e:e1:b9:1f:f5:77:a3:49:d2:8c:72:2d:22:10:
         6f:c9:9d:f1:03:5e:5f:92:64:11:0d:a8:74:f1:7a:9f:24:c9:
         4e:71:65:2a:61:5d:85:e3:c6:22:4a:0b:a8:49:d5:f7:26:bb:
         10:a4:0f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org