Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/J67B1_A3Pdnp7-LCovEeZMRUqNY.roa
File:                     J67B1_A3Pdnp7-LCovEeZMRUqNY.roa (raw, json)
Hash identifier:          ae1Vl4VH4N21pGAGjZm4AT62Us8CvPg8Zd5Mbggt+Kw=
Subject key identifier:   27:AE:C1:D7:F0:37:3D:D9:E9:EF:E2:C2:A2:F1:1E:64:C4:54:A8:D6
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       016A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/J67B1_A3Pdnp7-LCovEeZMRUqNY.roa
Signing time:             Sun 01 Oct 2023 01:33:09 +0000
ROA not before:           Sun 01 Oct 2023 01:33:09 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     24276
IP address blocks:        114.69.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:33:09 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=27AEC1D7F0373DD9E9EFE2C2A2F11E64C454A8D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d9:d9:77:46:4b:4c:39:2d:98:70:94:0f:79:
                    91:c5:bf:7f:fc:29:f3:f0:31:f7:27:3f:b6:97:52:
                    2d:ea:96:5d:6d:84:f5:f0:dd:6b:f4:94:af:11:46:
                    99:d1:7d:86:14:d4:06:ab:87:ac:5c:e4:2c:e8:7a:
                    99:82:9d:d9:e2:85:df:c4:82:ce:16:1d:03:4a:be:
                    33:32:5d:df:eb:e1:62:b2:05:da:b5:16:f0:f5:38:
                    12:e7:4b:d2:fd:74:63:38:ba:8f:a9:8a:a2:ca:56:
                    08:60:c1:85:1f:4d:74:cf:af:a6:ed:4a:cc:88:74:
                    af:a0:63:b9:30:52:ac:10:e2:07:d0:88:c9:bc:29:
                    47:2f:d3:09:7c:65:3b:ec:67:cd:81:4c:24:b2:62:
                    f8:9f:d4:5d:fe:a2:aa:b1:e7:9d:18:fc:91:3d:a5:
                    15:96:b7:8f:5e:db:54:1b:74:1b:8e:c6:d5:c8:ee:
                    6a:33:7e:d8:3f:44:dd:2b:14:95:ab:b4:b1:41:b3:
                    2d:28:89:e4:93:db:fe:de:62:05:36:f4:33:c2:5f:
                    4b:16:8e:a7:08:84:38:c0:3e:13:14:c7:e9:50:39:
                    2d:db:82:ef:60:c5:61:d6:19:28:48:49:7e:6f:26:
                    d7:f5:68:6c:63:bb:3f:f2:ad:77:29:47:07:bd:cc:
                    9f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AE:C1:D7:F0:37:3D:D9:E9:EF:E2:C2:A2:F1:1E:64:C4:54:A8:D6
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/J67B1_A3Pdnp7-LCovEeZMRUqNY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.69.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:45:2e:bf:50:37:10:77:ee:01:4a:db:fa:67:f2:24:47:04:
         cf:71:98:86:5c:b5:45:11:5b:74:e2:cb:00:9c:22:5c:9b:6a:
         5f:a5:40:9d:c9:19:11:13:c6:e5:8f:2a:5c:98:86:29:40:1a:
         40:bf:4c:e3:f6:16:25:c4:33:e1:c2:b9:92:db:b9:cc:03:f5:
         d0:12:e0:7c:1f:de:37:e8:e4:c5:a0:5f:cb:9d:8d:b1:09:39:
         8a:0e:b8:fa:35:2d:71:d3:aa:3a:4c:67:ec:4a:ef:5c:fb:fe:
         71:bb:d0:0f:64:75:18:0f:fe:d2:07:51:a1:6c:53:5e:8a:aa:
         cb:12:fb:57:40:ca:8a:02:ba:49:29:0b:aa:d7:a8:e3:c5:f8:
         54:0b:ae:38:cb:b2:ba:95:f7:0c:b4:7e:81:e8:f3:35:59:03:
         41:09:8a:6f:7f:89:16:12:61:73:4a:df:ba:42:c4:78:1a:78:
         2b:a2:53:a4:85:cb:4c:92:ec:bc:56:fc:62:fa:97:fd:ba:3a:
         99:cd:61:3c:21:2c:5b:1f:e8:ba:dc:39:95:90:d2:c8:cd:9c:
         c9:9a:e1:ad:09:6b:0b:b9:ea:06:1c:d4:7b:80:e4:62:48:f3:
         a4:24:12:27:d1:ca:08:36:41:06:34:f2:7a:1b:27:98:43:54:
         3d:f5:17:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org