Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/LeR_5DFp8EM1ea3y-OqvElxMqAI.roa
File:                     LeR_5DFp8EM1ea3y-OqvElxMqAI.roa (raw, json)
Hash identifier:          pm5gBUp2XjwehrR8SReaBCHVHIdhcvntSJb4d+338yQ=
Subject key identifier:   2D:E4:7F:E4:31:69:F0:43:35:79:AD:F2:F8:EA:AF:12:5C:4C:A8:02
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0199
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LeR_5DFp8EM1ea3y-OqvElxMqAI.roa
Signing time:             Sun 01 Oct 2023 01:36:27 +0000
ROA not before:           Sun 01 Oct 2023 01:36:27 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        182.50.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:36:27 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=2DE47FE43169F0433579ADF2F8EAAF125C4CA802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:60:83:61:84:92:d5:a3:88:00:ee:d4:83:e8:
                    c1:b6:dc:ff:a9:a6:3a:7d:ed:8c:15:2d:f9:2b:31:
                    0f:68:1d:fb:40:c9:99:0d:9d:f1:61:ad:7d:e5:59:
                    7b:f3:75:f0:05:ad:98:2f:41:54:e6:6d:bf:46:d0:
                    06:c9:00:0d:cb:5d:27:82:56:2e:5d:d9:23:6e:c1:
                    a8:05:77:cd:d1:e7:20:4e:77:2b:7f:49:19:c0:ef:
                    b1:a3:50:09:1d:78:13:ab:54:9c:3e:6d:6f:5d:ff:
                    f9:31:fb:71:18:a4:af:6b:bb:f9:6c:16:54:bc:78:
                    1f:10:c1:16:c5:a5:94:ac:fc:62:54:f8:c0:98:35:
                    9c:aa:13:84:d9:ac:ed:50:3e:8b:7e:8c:34:bb:53:
                    82:cd:b7:bd:4a:a5:9c:cf:93:35:cc:4e:8a:9c:d2:
                    d1:7a:fb:7f:1a:de:dd:88:f3:7b:b1:8b:da:94:cc:
                    3f:99:1a:81:ad:5f:da:43:26:a9:df:ff:bf:51:f4:
                    be:9e:10:93:e1:f9:0d:ce:20:e3:e6:8f:1e:57:3c:
                    c9:ab:12:1a:1a:15:5d:4b:0b:57:63:7b:e3:4d:fd:
                    aa:b2:6d:24:ad:f9:e8:c0:44:e9:ad:c7:0b:a5:89:
                    24:bc:dc:b9:27:0e:d9:38:d9:4b:b8:5c:85:ab:fc:
                    47:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E4:7F:E4:31:69:F0:43:35:79:AD:F2:F8:EA:AF:12:5C:4C:A8:02
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LeR_5DFp8EM1ea3y-OqvElxMqAI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a9:51:c0:a4:60:30:90:95:55:55:c5:34:06:8e:c6:26:3b:b1:
         c6:ef:ea:58:9d:bc:29:e0:c7:c3:2a:b7:5b:4a:e2:3a:3f:f7:
         b7:0b:d7:ea:93:59:9f:1d:d2:bf:2e:e7:d2:c5:d3:88:bb:21:
         f6:aa:8a:11:0b:ae:bb:60:72:3d:d1:3d:f8:4d:51:72:df:08:
         9e:81:07:2e:7a:a9:27:ab:ec:9c:0b:51:b1:30:c3:e4:ba:34:
         75:1c:72:7e:78:94:e5:cb:36:b5:6c:b0:57:b5:53:15:ff:ce:
         d1:21:dd:99:e0:7b:0f:bd:7d:b1:5c:d7:16:1b:d0:5d:ae:f7:
         3b:ed:1d:9c:f3:ca:49:ec:48:0a:ae:36:c8:db:32:2c:b2:1c:
         50:20:e3:7b:9f:10:89:29:f6:e3:db:75:e4:e7:4f:26:37:7f:
         86:5d:ca:89:f1:c9:68:f5:d6:48:9d:3f:20:fe:b5:e4:71:9a:
         f1:1b:9a:9b:22:9d:62:38:3d:4b:00:01:68:bb:95:78:2f:ab:
         fa:9f:1f:be:8c:94:0f:c6:d2:c3:91:9f:5a:82:e5:c3:1e:2a:
         c9:1e:84:75:a9:8b:3e:e9:d8:6b:cf:72:1c:93:7d:5d:19:a3:
         80:2c:62:c9:8f:d6:e7:65:1e:c6:08:6d:75:fe:c3:0f:aa:9e:
         8d:f5:c0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:55 2024 by rpki-client on console-fra.rpki-client.org