Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/9GUgMEBIrHrVM0j85nlIoF1XarU.roa
File:                     9GUgMEBIrHrVM0j85nlIoF1XarU.roa (raw, json)
Hash identifier:          20tE7s9lB0jkEKPAU3ZuxbYZtwc6L5hK8DybO1pn0OM=
Subject key identifier:   F4:65:20:30:40:48:AC:7A:D5:33:48:FC:E6:79:48:A0:5D:57:6A:B5
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0189
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9GUgMEBIrHrVM0j85nlIoF1XarU.roa
Signing time:             Sun 01 Oct 2023 01:34:33 +0000
ROA not before:           Sun 01 Oct 2023 01:34:33 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4721
IP address blocks:        114.198.224.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:33 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=F46520304048AC7AD53348FCE67948A05D576AB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:13:d3:17:f1:33:d5:77:58:f3:a9:1f:db:
                    47:41:df:53:77:ac:b6:d0:e1:00:68:8e:14:b1:be:
                    ba:3c:85:a5:f8:3b:b2:96:28:c0:05:19:fb:69:df:
                    19:b8:c5:bb:36:7f:e7:f0:fb:9b:21:5b:3b:b1:1e:
                    a7:78:41:f3:a5:ea:37:eb:22:08:7b:53:b5:b6:78:
                    48:3e:ed:c4:8e:e2:24:a6:30:ae:8d:62:b9:cd:99:
                    c0:6e:1a:eb:3b:0c:bb:0c:ba:ef:fa:dc:2c:58:08:
                    b5:45:53:ce:17:1d:0c:15:1e:75:ca:84:ad:ba:53:
                    00:f8:3e:d7:f4:01:6f:ba:73:f8:c7:e0:4a:ca:7e:
                    8c:e1:68:59:4c:86:b1:3f:23:91:62:48:58:7f:9b:
                    0e:35:29:4b:2d:64:a7:d1:bb:17:ef:65:82:47:e5:
                    3a:66:d5:8c:2f:a3:9a:e5:8a:f7:af:e7:79:46:d1:
                    1e:f6:fa:42:1d:51:2c:3e:ea:b0:c5:22:aa:86:01:
                    ce:bf:21:65:c0:6d:1a:86:b2:84:f7:0f:13:e2:4d:
                    6e:16:74:24:b6:8d:5d:1a:32:79:39:27:fa:4c:aa:
                    66:5a:11:4e:be:26:81:7d:4f:0a:cd:91:05:6b:70:
                    24:ea:ba:c2:40:72:81:04:7e:69:c7:33:6d:d5:8e:
                    40:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:65:20:30:40:48:AC:7A:D5:33:48:FC:E6:79:48:A0:5D:57:6A:B5
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9GUgMEBIrHrVM0j85nlIoF1XarU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d1:50:a6:d6:a0:f2:8f:e5:4a:54:3e:1b:6b:bd:32:c0:e4:be:
         e3:74:5c:28:06:6b:a5:1c:68:45:97:3c:41:6e:2b:db:a0:d7:
         78:0a:04:d0:a3:38:59:e2:5f:dd:f2:24:ed:8b:76:95:81:aa:
         34:06:93:f9:d4:8e:89:bd:4b:8d:d6:62:cd:87:88:6d:cb:e8:
         a3:a3:f3:b1:ef:8f:ba:c8:aa:ee:9a:0d:d6:6a:f2:91:ec:28:
         3c:41:96:63:58:3c:07:20:e4:b7:8d:01:62:7d:4b:37:22:b2:
         59:4d:75:20:94:96:ab:b8:d0:a4:2c:b0:ed:fa:cf:73:9f:23:
         12:1e:4a:8c:c3:d3:ef:01:09:09:7a:fc:51:85:d8:33:b1:c1:
         1d:04:3f:13:35:0d:2e:89:09:72:a5:a8:11:b8:77:d0:a4:e3:
         8d:4c:ff:90:a6:13:d1:d2:17:d7:1f:d6:28:f8:68:46:e9:d0:
         0d:1a:f2:07:67:a8:2f:c1:11:59:03:80:73:4b:00:9c:c6:51:
         28:d7:7a:27:38:d8:0c:89:02:2d:e8:9c:4d:b6:f0:bc:49:c2:
         22:65:e0:e0:b9:05:44:6b:02:66:7a:7d:aa:67:06:a5:2e:00:
         c6:89:a0:52:88:29:8a:1e:fc:06:f5:fe:e7:76:8c:e4:49:9f:
         af:54:45:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org