Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Nax9IFh5nrAVu-vEnvQ4fl6dZxQ.roa
File:                     Nax9IFh5nrAVu-vEnvQ4fl6dZxQ.roa (raw, json)
Hash identifier:          Pwi5EknYelNr0brjLvxtLWuNPy9VM3uAKkdw08OQjJw=
Subject key identifier:   35:AC:7D:20:58:79:9E:B0:15:BB:EB:C4:9E:F4:38:7E:5E:9D:67:14
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0181
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Nax9IFh5nrAVu-vEnvQ4fl6dZxQ.roa
Signing time:             Sun 01 Oct 2023 01:34:29 +0000
ROA not before:           Sun 01 Oct 2023 01:34:29 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        113.52.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:29 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=35AC7D2058799EB015BBEBC49EF4387E5E9D6714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4e:78:4d:9d:2a:97:87:42:7b:73:58:6b:4a:
                    5e:65:68:0b:cf:6f:9d:0b:1e:a6:8b:45:af:33:82:
                    22:8a:ad:90:4f:84:8f:23:ad:c1:e5:06:a0:43:d3:
                    8c:24:3d:7c:32:e8:9f:18:cf:2e:1f:fb:05:6d:28:
                    7b:66:34:30:fe:7a:2d:42:da:80:71:e8:81:d8:a7:
                    86:a7:57:4e:69:40:a4:35:2b:14:23:35:be:f9:38:
                    01:f0:7e:b7:11:98:80:9e:87:01:bf:c4:7b:76:a4:
                    80:7c:2c:6f:2f:d9:33:65:dd:61:15:b9:78:03:29:
                    53:4e:4c:a4:47:8d:ab:17:0f:eb:3f:5b:a6:95:fb:
                    20:53:4a:ba:c4:76:b7:c3:dc:f1:be:fd:e1:9f:fa:
                    cf:ec:87:15:9e:e7:42:df:d1:89:96:5f:9c:24:35:
                    7f:e6:7e:a5:81:df:1b:c8:8f:81:86:be:e8:fe:06:
                    49:2c:9f:08:49:74:0b:bf:93:fd:8e:b5:ef:16:76:
                    ce:9f:cb:46:31:c1:85:f4:fc:b1:82:bf:a4:5d:50:
                    cc:04:b3:b5:e0:c0:f5:0c:ce:6f:cf:fe:9b:9b:b6:
                    ea:6c:2c:0f:36:65:2c:9a:63:1b:09:05:fd:61:0e:
                    35:e4:6a:46:45:41:20:52:dd:0c:3e:a6:aa:8d:39:
                    88:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AC:7D:20:58:79:9E:B0:15:BB:EB:C4:9E:F4:38:7E:5E:9D:67:14
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Nax9IFh5nrAVu-vEnvQ4fl6dZxQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.52.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ce:92:4e:2d:76:d1:7c:27:7f:b7:82:be:b6:02:67:a5:b5:27:
         3d:ae:56:b9:12:dd:f6:7a:28:80:85:99:76:11:69:83:dc:0b:
         01:ba:45:e5:08:ac:d2:d2:23:00:b7:d1:23:c8:50:b0:18:96:
         dd:18:dc:55:6d:31:75:04:26:f2:6b:88:2c:4c:fe:17:04:b4:
         73:6b:5b:8b:eb:ee:cf:4f:93:8c:85:c4:ba:bd:ce:ba:4c:a2:
         54:85:8a:69:2a:b5:a9:55:11:a9:f6:ce:a9:4a:65:34:60:54:
         15:99:e0:5b:19:33:fc:8a:60:d9:f2:9e:41:4e:a0:c7:f2:c0:
         54:46:3d:04:dc:6d:51:96:9f:2d:db:9a:88:b6:ef:bb:50:16:
         91:06:bc:6a:53:47:94:41:ac:ce:63:97:03:a9:50:e2:9d:41:
         5a:de:96:a4:21:2a:70:85:65:ef:d4:06:f1:cf:1c:20:8d:0e:
         bf:0b:1e:13:a6:8d:dc:62:fe:22:15:16:c5:25:83:82:40:e6:
         ac:eb:af:a8:93:b2:f0:fc:04:28:bb:91:13:bc:5b:a6:cf:d0:
         ea:fe:3b:7d:67:3c:a2:bc:44:ab:bf:32:d8:08:dc:33:1b:1a:
         c1:51:b8:6c:a5:33:5b:9c:f2:1c:42:8d:0d:29:a3:92:27:5f:
         84:54:95:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org