Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/9e3S8oHjMovw5u0a4RkjfZywd-c.roa
File:                     9e3S8oHjMovw5u0a4RkjfZywd-c.roa (raw, json)
Hash identifier:          XCtduPm69LVsVpp+nUhV95wyyDVFmSnbLbhbLpqAaRc=
Subject key identifier:   F5:ED:D2:F2:81:E3:32:8B:F0:E6:ED:1A:E1:19:23:7D:9C:B0:77:E7
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0196
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9e3S8oHjMovw5u0a4RkjfZywd-c.roa
Signing time:             Sun 01 Oct 2023 01:36:26 +0000
ROA not before:           Sun 01 Oct 2023 01:36:26 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4721
IP address blocks:        182.50.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:36:26 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=F5EDD2F281E3328BF0E6ED1AE119237D9CB077E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:39:3e:23:bc:0e:c1:f4:53:f8:ba:cc:0d:c5:
                    2e:57:58:2f:b1:0b:92:d6:0f:60:f0:0d:b3:29:f4:
                    f8:6e:72:3d:a8:c5:87:10:25:ef:5c:b1:88:3f:a9:
                    5d:32:cb:e8:81:93:5f:04:e8:87:76:a2:70:5c:ae:
                    2c:98:e3:37:c0:6f:e9:9d:54:02:bc:b0:ce:7e:33:
                    98:f7:47:d4:cc:2f:a6:05:46:ec:66:7a:00:6a:d4:
                    4b:f0:b7:2d:de:6d:33:68:da:4f:cd:4f:cb:4d:f2:
                    5b:e6:43:d1:6c:45:4d:1f:76:06:a0:f6:8f:df:3a:
                    01:20:b9:80:e9:46:88:bf:6b:62:09:94:8a:3c:c9:
                    eb:26:df:9b:de:b4:cd:78:ff:08:21:5f:92:7c:72:
                    b3:ae:a2:42:07:27:c3:fe:05:72:b2:61:96:f8:36:
                    1b:ef:e4:91:25:07:89:c5:b5:08:52:13:b0:88:fd:
                    8c:58:7d:74:29:64:09:3c:91:c9:6f:84:00:84:f1:
                    91:6a:4b:11:b3:bd:1f:bb:db:07:25:a5:22:8f:15:
                    3e:45:59:34:8b:77:2e:8e:ab:74:1f:a7:c7:64:a1:
                    ee:06:d5:3b:85:ce:f9:54:00:78:b3:d5:3a:65:33:
                    e5:f0:be:08:d5:ec:aa:d2:e0:f5:40:68:2f:b8:40:
                    ff:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:ED:D2:F2:81:E3:32:8B:F0:E6:ED:1A:E1:19:23:7D:9C:B0:77:E7
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9e3S8oHjMovw5u0a4RkjfZywd-c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0e:c5:de:ac:95:75:60:d9:5c:bb:92:4c:c8:26:d7:0e:e4:2e:
         e7:41:56:e5:f7:78:f7:96:63:89:b6:6c:e5:7b:ba:36:b4:3b:
         d3:8a:f0:1f:09:ae:a6:3f:5f:b3:ca:a7:37:82:74:35:f6:3e:
         ac:85:39:12:e2:be:01:cc:3c:fd:92:e8:25:12:21:03:11:72:
         a9:0c:d0:ce:6c:5f:9c:c6:21:51:02:63:13:3b:df:31:bb:57:
         b9:8d:f2:14:57:93:9a:cd:4c:95:61:8f:8d:f9:93:b1:ce:c9:
         f5:94:cb:f6:6c:db:aa:f5:8b:49:a7:e9:b8:f2:9a:5c:14:8e:
         31:24:93:f2:e9:21:f8:f6:e8:ff:fc:a4:2c:ce:13:2e:b9:4b:
         ef:4c:d0:d9:d0:c5:52:33:ab:02:6e:84:0d:c4:b7:0c:85:6f:
         1d:56:a6:41:58:2e:3a:08:7d:a5:7f:0d:81:68:f9:ce:5b:c2:
         93:af:fc:ad:b6:55:d3:df:8d:75:3c:28:24:bc:76:5d:5d:13:
         2f:78:f9:65:f9:33:ca:02:e7:3b:13:58:5e:4a:54:03:9a:82:
         23:59:5a:b2:d5:af:35:ba:d7:7a:3c:cb:5d:c5:a8:12:53:fc:
         ca:ab:2d:5f:c9:e1:9f:2e:b9:8d:2d:f9:7f:94:2e:ba:7d:d5:
         3b:46:a2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org