Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/LBT0WILYADbBAeYATqQrt_jEjuU.roa
File:                     LBT0WILYADbBAeYATqQrt_jEjuU.roa (raw, json)
Hash identifier:          PA767QnANliIM3eIf8QHnFZ1jAz9E+9T4AyR6ou87Oc=
Subject key identifier:   2C:14:F4:58:82:D8:00:36:C1:01:E6:00:4E:A4:2B:B7:F8:C4:8E:E5
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01A9
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LBT0WILYADbBAeYATqQrt_jEjuU.roa
Signing time:             Sun 01 Oct 2023 01:36:35 +0000
ROA not before:           Sun 01 Oct 2023 01:36:35 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        210.172.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:36:35 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=2C14F45882D80036C101E6004EA42BB7F8C48EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ea:43:31:5c:63:32:ba:63:f8:66:0b:69:89:
                    a5:72:84:b3:b4:9a:87:be:72:a4:a7:b5:98:2c:a6:
                    42:08:79:9b:3c:44:46:8e:e0:22:d2:04:e1:7c:aa:
                    a3:35:53:98:d0:d0:0a:fd:2f:f1:2a:f2:89:e4:e2:
                    d5:04:08:73:b6:51:70:9d:9f:d6:94:75:5f:b4:52:
                    93:31:7f:0f:24:4a:a1:1e:67:86:b6:0c:f7:d3:77:
                    d8:5b:c7:1a:d9:45:06:01:f8:d3:c1:c1:21:6c:78:
                    86:3e:62:49:3c:73:54:1b:23:4e:e4:da:38:70:c2:
                    d0:62:4c:62:f9:4d:b6:81:16:89:b7:bc:e6:29:19:
                    21:de:90:42:d6:e4:02:8d:75:26:3c:ef:36:0f:cc:
                    02:c5:b5:9d:55:96:f2:16:33:69:ca:bd:78:a9:65:
                    c5:00:be:dd:42:0e:2e:e8:51:60:e6:3f:a2:86:48:
                    f7:5a:56:a6:58:cd:d0:b9:58:74:e5:ae:56:35:37:
                    c1:92:a0:f8:fb:2a:80:34:3f:d9:b0:c1:eb:81:5d:
                    42:75:5d:dd:12:b4:66:06:59:ef:f2:85:fa:b0:fc:
                    4d:03:52:94:53:61:c5:12:26:1e:9d:78:eb:10:97:
                    ff:ff:ce:9b:98:f0:d6:30:6f:b8:d7:3a:71:6f:49:
                    51:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:14:F4:58:82:D8:00:36:C1:01:E6:00:4E:A4:2B:B7:F8:C4:8E:E5
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LBT0WILYADbBAeYATqQrt_jEjuU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.172.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:88:39:b9:89:7e:0c:58:73:73:0e:20:62:8a:f5:34:b2:b4:
         9b:34:e9:b2:1c:58:87:a0:4e:dd:5e:79:21:ff:50:bd:4c:0e:
         68:ed:95:b9:f1:7c:e9:d8:6c:64:94:44:97:a6:07:c7:0c:b0:
         dd:8e:33:db:f5:0c:6f:3f:0f:42:bc:34:b0:39:c1:fe:22:d2:
         68:19:e3:71:b4:41:91:09:43:6b:25:9e:62:9e:fc:08:08:ee:
         ff:1d:82:9b:f7:b0:a8:7e:f5:d4:7a:a4:0d:1a:1d:78:33:98:
         d2:a3:5c:30:41:81:c8:b8:ba:13:5d:89:d4:f1:39:0e:da:04:
         6c:ce:f1:af:79:75:31:26:cb:f1:08:5e:e0:84:6a:e8:04:05:
         a7:e6:07:61:20:2f:ab:0d:da:08:87:a2:6a:ef:4f:d5:00:4c:
         8c:b9:1b:08:df:3c:9b:47:e7:bd:e2:1b:80:bb:f6:69:92:00:
         a9:d5:ef:70:f9:02:40:c2:fa:bc:d4:f9:a9:6e:f9:26:56:4e:
         db:4d:44:b4:b9:ee:e4:ff:8d:32:43:92:7a:2f:d1:fa:95:2f:
         01:8b:6d:f8:36:1a:34:c3:f5:e6:cb:06:75:78:73:be:25:42:
         f3:c9:b0:c4:a8:2c:09:31:ad:87:92:3e:5a:ca:92:e1:17:88:
         ab:67:d6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org