Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/GQ9NUWFsxsp42r17RB7mttjBKj8.roa
File:                     GQ9NUWFsxsp42r17RB7mttjBKj8.roa (raw, json)
Hash identifier:          HuLabZWm9gcdTM7SaWp1kTHGZh5gzm3AZAX1BGNnk5Q=
Subject key identifier:   19:0F:4D:51:61:6C:C6:CA:78:DA:BD:7B:44:1E:E6:B6:D8:C1:2A:3F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0164
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/GQ9NUWFsxsp42r17RB7mttjBKj8.roa
Signing time:             Sun 01 Oct 2023 01:33:07 +0000
ROA not before:           Sun 01 Oct 2023 01:33:07 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     23788
IP address blocks:        202.162.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:33:07 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=190F4D51616CC6CA78DABD7B441EE6B6D8C12A3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:27:74:49:96:fa:55:19:04:bb:cc:c5:12:2b:
                    77:43:38:3a:6b:25:d4:ba:7a:af:94:97:b7:a1:21:
                    6c:61:30:2a:4c:ec:fc:11:86:2c:9d:50:f6:cc:e8:
                    f2:cd:f6:ec:f6:e5:dd:df:69:cc:50:e6:f9:69:37:
                    8d:81:98:c9:1c:89:a2:27:c2:d4:8c:d8:36:c3:7e:
                    d0:53:57:cc:3f:11:d8:94:4f:c1:fe:88:cb:93:da:
                    d1:ed:7e:ed:fe:5f:0e:91:ab:33:31:7c:d1:98:2a:
                    11:66:74:5a:fb:bd:f7:56:95:44:a3:d8:5b:31:a4:
                    b3:4a:8a:47:02:67:f0:0b:67:d8:28:38:d5:04:b7:
                    9c:c1:75:21:76:f1:59:91:e5:76:68:c8:0e:de:9f:
                    94:ce:40:38:b5:45:68:aa:60:01:50:b5:69:34:81:
                    37:7d:09:62:6c:5a:59:86:cd:f3:e3:4e:69:40:ee:
                    5f:d9:7a:78:45:d5:55:1a:3c:93:a1:d3:f6:0e:e2:
                    f2:12:70:11:39:ee:8f:5b:b5:dd:3c:33:85:0f:9e:
                    90:56:40:95:29:12:b1:13:f0:bd:d8:73:42:1a:79:
                    12:cb:60:d4:d2:ff:09:99:bf:cd:e1:51:5a:0a:00:
                    ac:56:82:50:41:32:23:05:4c:3c:5e:48:5c:ae:42:
                    e6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0F:4D:51:61:6C:C6:CA:78:DA:BD:7B:44:1E:E6:B6:D8:C1:2A:3F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/GQ9NUWFsxsp42r17RB7mttjBKj8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.162.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         47:31:b8:19:6b:81:63:58:b0:25:76:20:91:a9:6c:21:30:04:
         f8:68:4c:b4:cb:41:49:87:7b:18:75:e6:00:e0:d3:56:10:c9:
         7f:bf:fe:ca:04:da:d0:00:55:5b:65:19:27:eb:f7:cf:1a:47:
         be:c6:a9:c6:a7:c5:0b:a0:78:8a:85:22:cd:f5:70:3e:a5:b2:
         93:86:b8:92:5c:e4:cc:2a:b7:27:f0:d3:87:ca:9d:29:95:ef:
         23:bb:92:8f:79:b8:d7:b9:20:4d:49:9c:32:9f:b1:f3:55:16:
         6d:3d:24:1e:dc:6e:f2:91:43:f2:cb:1c:eb:db:b5:4b:c9:e7:
         82:1f:ed:93:21:c3:98:45:d6:15:1c:b5:12:b8:88:d8:e1:e0:
         1c:ab:7b:8c:a6:b4:97:9c:75:a5:a9:7d:9b:09:70:8f:b8:59:
         45:ba:5d:fe:1e:e5:7c:46:45:28:62:8c:e2:97:ef:7f:e7:eb:
         7b:2d:ed:34:50:9b:82:83:7b:c1:7f:20:f5:2c:c8:a9:3e:96:
         7d:f6:2c:fd:b3:4e:53:08:e6:20:0f:9a:c9:25:0f:da:03:dd:
         c5:b5:f8:dc:9b:d2:29:f0:29:79:fa:3f:4e:f4:32:49:d8:ec:
         c1:4d:75:e3:7a:f0:e6:7c:01:39:20:b7:56:da:fb:45:3d:d5:
         7e:ba:b0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org