Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/D34TkvJcDr4CXWz6gYXurSXDEBQ.roa
File:                     D34TkvJcDr4CXWz6gYXurSXDEBQ.roa (raw, json)
Hash identifier:          18FqKf5W7v7U+oDRtg4L56oWnT1rSwPndRvQ6V7Yl90=
Subject key identifier:   0F:7E:13:92:F2:5C:0E:BE:02:5D:6C:FA:81:85:EE:AD:25:C3:10:14
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       016F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/D34TkvJcDr4CXWz6gYXurSXDEBQ.roa
Signing time:             Sun 01 Oct 2023 01:34:22 +0000
ROA not before:           Sun 01 Oct 2023 01:34:22 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        61.115.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:22 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=0F7E1392F25C0EBE025D6CFA8185EEAD25C31014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:b9:aa:43:77:5a:db:1b:a2:65:08:20:b6:
                    eb:2d:9d:02:d6:98:36:4a:17:5e:42:95:5f:c8:b0:
                    c1:6e:98:0d:e0:bf:84:86:20:7b:01:2d:9a:2d:8d:
                    90:a8:7b:2a:27:ad:21:a8:fc:17:ed:f7:91:64:94:
                    4b:1b:d1:6b:99:7b:d2:84:95:dc:68:aa:3a:58:9c:
                    70:4a:90:2f:e2:e2:51:26:61:ea:39:9e:11:2f:fa:
                    e3:2f:51:02:66:58:a2:95:66:6f:05:d8:f9:cb:83:
                    31:01:6a:16:28:59:51:b2:e7:2c:81:bb:62:41:2d:
                    81:da:01:7d:b2:44:af:0f:41:fe:3d:83:5b:c4:b2:
                    6f:a0:68:28:ef:39:41:f0:74:0a:4b:d4:b7:1b:a9:
                    d1:4c:04:44:5b:dc:39:01:3e:fa:c2:17:05:0b:7a:
                    73:b0:2c:99:47:fd:fe:f1:f7:ce:24:cf:13:bc:a0:
                    58:59:de:7f:10:97:ed:5d:4e:3e:91:77:a9:2c:79:
                    cc:f9:94:60:ca:6f:04:be:eb:7a:b4:51:4c:eb:dd:
                    27:d9:75:26:31:48:15:e0:27:78:f0:d7:1d:60:36:
                    15:7b:04:f9:80:5c:45:97:a2:de:f9:74:26:2f:aa:
                    f0:42:ec:a8:12:b7:b3:e9:3c:bb:76:15:34:81:6d:
                    24:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7E:13:92:F2:5C:0E:BE:02:5D:6C:FA:81:85:EE:AD:25:C3:10:14
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/D34TkvJcDr4CXWz6gYXurSXDEBQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.115.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         e4:a0:48:94:66:56:20:cf:4f:06:11:1f:f9:ae:1f:87:7f:b4:
         5a:c4:37:c6:c4:16:c6:2e:dd:0a:af:2b:4c:28:98:50:9e:3f:
         14:fe:0f:9f:74:5b:9e:6b:ea:5e:cb:48:6a:b9:69:65:3b:e0:
         ec:74:55:52:17:9e:e2:ee:d8:a9:0d:d0:87:2e:50:95:11:fa:
         56:25:28:12:e5:77:f2:0b:e6:15:2f:33:00:9c:17:d1:18:b6:
         52:09:ea:55:a0:25:78:51:3e:6b:fa:4a:b6:ba:2f:1b:2a:52:
         96:8e:65:cc:33:9f:76:e3:01:d4:88:c5:a2:c1:81:23:3e:e4:
         6b:40:42:b4:54:f7:c2:fb:31:d2:bf:bc:00:ba:78:b1:4d:23:
         6d:68:7c:21:49:c3:da:86:c5:f9:3f:b0:45:98:2c:b4:ed:13:
         b5:c5:7f:16:8f:c2:fc:31:15:e8:fe:d0:95:c7:44:5e:66:ec:
         84:e8:6d:55:30:53:7c:e6:73:33:eb:1e:2c:57:0f:42:bf:ed:
         80:61:6b:c4:ca:62:cc:1b:03:5c:63:44:57:0a:ee:9b:2c:e1:
         40:ac:29:ae:67:d4:1b:7a:cc:70:3b:e0:e6:5d:12:ad:9c:53:
         d5:90:74:5b:5c:89:4e:7d:73:b5:60:96:60:fc:ea:02:d2:8f:
         88:44:7b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org