Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/GPhIi7h8RhlRNKpr2GoeECB4Uvw.roa
File:                     GPhIi7h8RhlRNKpr2GoeECB4Uvw.roa (raw, json)
Hash identifier:          DFC0AYPhaBKVXnpEIJPm9h0xcNJwR9W4t9AP3LI/5Gs=
Subject key identifier:   18:F8:48:8B:B8:7C:46:19:51:34:AA:6B:D8:6A:1E:10:20:78:52:FC
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0127
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/GPhIi7h8RhlRNKpr2GoeECB4Uvw.roa
Signing time:             Fri 01 Sep 2023 01:30:31 +0000
ROA not before:           Fri 01 Sep 2023 01:30:31 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     23788
IP address blocks:        103.192.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep  1 01:30:31 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=18F8488BB87C46195134AA6BD86A1E10207852FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:3d:1d:5c:79:88:b5:21:6c:6a:eb:ad:25:
                    ef:fd:62:59:97:3b:aa:e9:e9:dd:c1:4c:9c:89:0a:
                    f3:fd:97:bf:98:43:02:0a:d1:0b:25:af:90:e6:b8:
                    a2:8b:ac:7d:5c:ba:a5:97:33:26:1a:ca:c1:e0:0e:
                    60:ea:87:1c:15:ed:f0:ad:57:0f:8c:69:56:67:c5:
                    14:99:c0:ef:28:21:c2:44:8c:58:35:32:68:81:49:
                    e3:5b:0a:82:5b:e6:62:ea:6b:0c:2e:6a:a4:83:07:
                    23:8e:4e:c3:cb:b8:02:40:56:70:19:ae:c0:2e:f4:
                    55:23:36:c6:7e:08:ac:bc:37:fd:cc:63:97:36:27:
                    d3:d7:96:dc:26:bf:1b:93:d9:58:b5:80:a1:b5:b4:
                    2d:e0:f6:14:c9:ed:3d:8b:fc:79:fa:81:78:eb:e9:
                    17:d6:b3:1e:38:f6:be:e1:cf:1b:2e:ad:b3:17:7b:
                    c6:db:11:15:e9:59:78:b4:3f:0a:28:08:e8:7f:95:
                    90:06:05:0b:26:9d:96:67:5c:b8:bd:83:58:56:29:
                    5a:e8:eb:13:ab:65:aa:11:c7:82:61:e9:64:ff:88:
                    78:5d:7e:98:b1:59:97:82:56:35:47:ad:a5:8d:5d:
                    67:1f:cd:ff:4b:fd:a8:4f:7d:75:56:74:6b:38:e8:
                    b5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F8:48:8B:B8:7C:46:19:51:34:AA:6B:D8:6A:1E:10:20:78:52:FC
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/GPhIi7h8RhlRNKpr2GoeECB4Uvw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:24:71:2a:ee:94:b8:53:4d:26:54:bc:61:9b:81:aa:7a:d9:
         fc:0d:55:dd:bc:2c:6c:80:95:2f:8b:31:26:a5:48:27:3f:2a:
         b9:60:87:74:2c:79:2d:16:d4:3f:77:83:a8:cd:c8:bc:f7:3a:
         f0:bd:17:30:52:b6:68:7e:7c:33:61:a9:70:0e:01:e0:57:1a:
         e5:fc:12:ee:45:bb:c1:fa:bc:81:35:dd:56:c4:86:5b:24:97:
         cb:c7:7f:ca:b3:6c:af:f2:f7:76:9f:1f:8f:ee:d1:bb:78:c4:
         1c:bf:4a:c5:b0:8d:75:79:8c:00:2b:ab:b0:10:64:be:b7:76:
         e4:37:2d:ea:f2:b1:80:d7:00:28:47:52:a4:6e:3a:5b:5a:b8:
         58:5a:f8:8b:52:3c:66:8e:49:60:25:a0:a9:65:20:df:19:06:
         98:76:f5:2b:52:16:2e:7a:28:7a:60:04:ff:8e:3f:4b:09:53:
         c8:b7:47:cd:14:e3:76:54:6a:5d:66:2b:4e:b9:3b:c3:01:e5:
         57:12:f1:06:78:c2:fb:09:79:72:a2:3c:42:17:8b:59:a8:91:
         ab:a7:7c:66:97:85:45:40:a6:7e:ed:95:37:1b:53:a0:43:43:
         c3:9d:d5:f4:f6:ed:ac:f7:ee:a1:c2:1f:b0:c6:60:24:01:8b:
         a4:7c:04:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:40:38 2024 by rpki-client on console-ams.rpki-client.org