Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/K1oFpy2BECXW0RuSjJqY-qannu4.roa
File:                     K1oFpy2BECXW0RuSjJqY-qannu4.roa (raw, json)
Hash identifier:          OarGFy5uR8ZCgWQyAblk9S3ycqRPD29g2JSY4v1JR18=
Subject key identifier:   2B:5A:05:A7:2D:81:10:25:D6:D1:1B:92:8C:9A:98:FA:A6:A7:9E:EE
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       013F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/K1oFpy2BECXW0RuSjJqY-qannu4.roa
Signing time:             Sun 01 Oct 2023 01:30:17 +0000
ROA not before:           Sun 01 Oct 2023 01:30:17 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        180.131.152.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:30:17 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=2B5A05A72D811025D6D11B928C9A98FAA6A79EEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fa:fd:70:95:e1:40:d5:a8:61:17:34:55:99:
                    53:22:34:fb:00:02:78:27:67:a4:a5:77:e4:3c:85:
                    d6:86:fd:7e:1e:2b:ac:7e:35:d7:95:4e:d8:83:90:
                    7e:84:b6:3b:83:72:79:41:fb:6b:9d:19:c0:25:3c:
                    67:85:2f:30:5a:e8:54:78:33:49:c1:ca:4c:36:94:
                    99:7b:06:b4:00:fb:48:18:ff:3f:4a:33:b6:13:cb:
                    12:3c:46:9d:69:9b:a2:91:8f:24:b5:fd:ae:93:e3:
                    8c:4d:ba:bd:8e:6f:50:d7:c4:59:50:e9:92:bd:77:
                    dd:19:59:70:67:30:eb:39:df:e4:1b:ef:a6:0e:89:
                    01:31:c9:f6:d6:bf:8a:26:d3:73:e5:66:7d:5c:5e:
                    59:af:59:d4:53:88:61:65:e3:dc:db:7d:b3:d4:ef:
                    b7:7c:42:26:3c:e4:0d:bd:ee:dd:e4:52:ce:48:ac:
                    e4:bc:a7:37:97:1b:00:88:f7:98:01:1e:71:3d:06:
                    33:60:cf:15:62:46:8a:2f:d7:1d:91:43:77:06:b2:
                    85:71:e0:4b:ef:4f:23:1d:7b:6d:75:38:32:53:f4:
                    e5:b0:1c:f8:c3:2d:79:a2:4f:49:5c:2e:36:ed:84:
                    a9:2c:e3:a5:69:54:10:8e:60:ad:12:fd:f1:90:f0:
                    03:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5A:05:A7:2D:81:10:25:D6:D1:1B:92:8C:9A:98:FA:A6:A7:9E:EE
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/K1oFpy2BECXW0RuSjJqY-qannu4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:b6:31:3a:d1:f0:03:8d:a0:1c:1a:27:66:1c:ab:56:01:07:
         c6:98:2d:42:63:3b:02:a0:f6:8d:c1:cb:7e:00:80:5b:86:4b:
         f1:b2:a3:17:72:8c:8f:1f:07:62:d9:36:3a:57:b3:22:a8:4b:
         4d:99:36:5b:b9:56:b9:76:86:e9:00:6f:35:19:f7:88:bd:df:
         b7:44:e8:e3:4c:3d:09:da:fa:b8:48:36:59:d2:be:2f:a4:2b:
         b3:be:e8:a4:52:ad:5c:ec:36:d2:13:0b:1a:93:b8:55:da:81:
         97:65:2c:03:c7:67:50:a1:7c:fb:72:96:ba:f9:c9:1f:98:b9:
         c5:e8:d8:ee:a3:25:34:bd:ad:ea:0e:24:d6:79:2b:1e:52:d5:
         d1:36:e0:bb:63:8f:21:47:91:81:0a:41:c7:e0:5f:84:f8:3f:
         09:ab:67:66:d7:a3:b6:fa:29:da:31:82:a5:72:7e:88:9c:3c:
         ce:d6:af:39:15:62:6f:70:2e:6e:0c:f7:70:1c:0f:34:2c:c1:
         dd:00:36:74:95:12:68:8b:3b:e1:fb:18:f2:5b:b6:e4:91:b3:
         12:5f:dd:81:15:17:5d:8c:42:03:5e:80:e9:41:8e:7b:f5:8c:
         8d:d0:d5:85:c2:55:8d:f5:83:47:42:f5:d4:9f:87:00:ce:9a:
         ce:c0:07:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org