Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/L98mGc1OChNlNMvL7_1_vJ83DPQ.roa
File:                     L98mGc1OChNlNMvL7_1_vJ83DPQ.roa (raw, json)
Hash identifier:          7gTl+MB2drMHrA490jHMkC6Lz/oNY1fFLljT24XRGc0=
Subject key identifier:   2F:DF:26:19:CD:4E:0A:13:65:34:CB:CB:EF:FD:7F:BC:9F:37:0C:F4
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0143
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/L98mGc1OChNlNMvL7_1_vJ83DPQ.roa
Signing time:             Sun 01 Oct 2023 01:30:19 +0000
ROA not before:           Sun 01 Oct 2023 01:30:19 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        202.179.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:30:19 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=2FDF2619CD4E0A136534CBCBEFFD7FBC9F370CF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:07:12:6a:1c:c7:8e:3d:a2:89:41:50:ae:33:
                    31:01:dd:e7:88:55:bb:f5:32:f2:a8:95:a9:08:37:
                    15:54:f4:b1:93:09:49:85:d5:67:73:ac:f0:a5:f1:
                    fe:33:df:f0:de:1f:c7:df:e5:5b:49:41:9e:05:ec:
                    15:22:c4:da:b1:d4:de:82:48:4e:43:9c:ba:02:45:
                    64:4d:a3:e8:7e:b4:1c:2a:ed:c1:ff:bb:5f:a4:3d:
                    02:f1:75:37:ce:2e:ee:b8:e6:2e:76:91:20:e3:4a:
                    8a:38:d6:56:95:bd:f2:a2:e8:0e:e7:77:4c:c3:d3:
                    75:20:56:2e:f7:fc:1b:5a:a2:f7:cd:be:9a:23:5b:
                    0b:c5:72:34:f4:3c:8a:f5:01:57:4a:96:eb:60:58:
                    7a:8a:89:fb:b1:62:63:a6:c7:dc:fb:4f:2e:17:64:
                    76:7c:2e:53:41:59:f7:2b:26:7b:94:3a:57:e3:24:
                    64:32:96:fe:ca:b7:22:87:19:8b:ed:9f:46:76:1d:
                    63:99:05:65:2a:ed:fa:5c:be:71:00:8b:ec:59:f7:
                    4f:51:18:97:bb:a8:56:71:03:54:db:57:07:9a:38:
                    3e:0b:f2:4a:8d:a4:78:36:76:25:66:0e:43:5d:9f:
                    6e:c3:eb:d7:69:97:b1:9b:98:5c:a0:fe:c2:45:50:
                    33:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DF:26:19:CD:4E:0A:13:65:34:CB:CB:EF:FD:7F:BC:9F:37:0C:F4
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/L98mGc1OChNlNMvL7_1_vJ83DPQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.179.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b0:c0:62:13:70:7e:d8:39:cb:8e:51:d2:48:a0:b6:39:78:c6:
         60:79:a5:13:33:e4:d6:f8:83:59:61:d6:2e:88:e0:34:bb:1b:
         40:3e:40:4b:77:6d:fa:2c:09:a5:3f:d3:af:be:60:34:56:90:
         19:3b:48:4c:68:a6:c4:a4:48:9d:c7:33:02:3d:10:a9:0e:05:
         b1:57:93:49:22:5e:ef:73:66:e3:f8:e0:76:14:ad:74:70:fa:
         7d:38:cd:93:4c:42:ac:c0:16:39:74:42:e4:f7:41:d7:f5:1f:
         1b:4b:05:5e:0f:fa:ea:e9:f1:55:88:14:65:e3:b3:38:53:3e:
         f5:31:fa:15:9f:3a:98:71:87:21:2b:84:31:2a:8e:d7:42:1f:
         4a:94:10:68:98:f8:33:a2:43:55:eb:fc:f0:38:63:11:58:1d:
         41:89:24:a4:e6:d5:24:5d:17:7f:5c:6e:21:6f:1d:58:85:7d:
         c3:de:6c:a5:e5:0b:90:e9:be:40:5f:a1:63:46:6c:23:59:c8:
         9d:be:d9:ec:9e:2c:7f:b9:d6:22:8f:d8:49:0c:c7:16:38:72:
         4b:4e:e9:08:fe:33:70:90:0f:63:1d:d4:db:8d:18:1b:c5:ed:
         a1:1d:10:ae:da:44:7e:4d:27:bc:f7:d3:65:e3:ae:97:ef:f6:
         d6:37:a8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org