Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/UGtV3srfQIrJaG7B63iJZrheuFw.roa
File:                     UGtV3srfQIrJaG7B63iJZrheuFw.roa (raw, json)
Hash identifier:          4UbP/XDpucTU3RsWlJqxDaZsaqTmKR2j400LVwar5qA=
Subject key identifier:   50:6B:55:DE:CA:DF:40:8A:C9:68:6E:C1:EB:78:89:66:B8:5E:B8:5C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0119
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/UGtV3srfQIrJaG7B63iJZrheuFw.roa
Signing time:             Fri 01 Sep 2023 01:30:23 +0000
ROA not before:           Fri 01 Sep 2023 01:30:23 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     4721
IP address blocks:        203.153.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep  1 01:30:23 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=506B55DECADF408AC9686EC1EB788966B85EB85C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:7a:2e:b7:0e:e9:46:32:48:6a:21:e0:e4:
                    ac:c7:91:84:b1:bc:6d:4e:a1:d3:0d:70:2a:8b:12:
                    e7:11:e0:ff:68:3c:99:a4:cc:81:2a:0b:55:bf:40:
                    12:01:bf:53:37:2f:49:11:34:15:04:24:ef:69:4a:
                    df:fe:5d:f5:9e:d7:66:0e:7e:29:d6:65:0c:e2:c2:
                    75:d5:bb:93:2a:83:f6:b5:f6:27:c5:80:07:f6:1f:
                    c6:9e:b5:69:64:b3:75:8b:c1:1c:43:cb:bf:aa:f8:
                    a6:47:ca:d8:a0:66:45:d1:f0:49:3d:0f:3f:92:da:
                    0f:a8:a3:b3:23:a5:c5:ae:d5:57:e7:2c:fb:51:ee:
                    ce:8b:69:44:f7:2a:68:c6:7c:f7:32:6b:7b:ec:27:
                    b1:77:46:68:d6:dc:e4:eb:15:5b:a4:7b:e8:9c:4c:
                    0f:94:81:27:0e:d4:7a:02:f3:84:28:dd:f9:55:b6:
                    cb:cf:6b:7a:bd:28:b4:b2:40:8c:9d:1d:59:9a:74:
                    54:04:79:90:9b:31:c6:66:9e:6a:6b:eb:3d:8c:53:
                    98:fe:60:53:fb:0b:47:72:4f:77:7a:03:0e:fb:f6:
                    8d:4b:24:65:e1:c8:76:f1:82:a1:96:fe:9a:7f:b9:
                    dc:37:cc:02:46:4d:75:b1:11:02:28:05:b9:59:39:
                    8e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6B:55:DE:CA:DF:40:8A:C9:68:6E:C1:EB:78:89:66:B8:5E:B8:5C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/UGtV3srfQIrJaG7B63iJZrheuFw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.153.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:9c:82:f8:68:fc:4e:e1:33:46:64:a1:dc:dd:89:0f:4c:d8:
         fd:f8:80:75:66:1e:77:2f:64:75:99:4b:71:ad:93:47:c6:e4:
         13:f4:8d:32:a0:d5:13:77:31:c5:c8:1d:99:33:a9:0c:16:0f:
         dc:5d:c1:1d:12:f2:6b:6b:16:1f:ca:67:56:b4:82:5c:a0:f4:
         19:ad:97:69:33:6a:ae:de:90:7a:c5:83:3c:f0:b1:5f:34:a8:
         b0:09:d7:c5:45:77:ae:82:dc:80:2c:96:09:00:1f:37:7c:a5:
         c8:c1:91:39:f3:88:0f:5b:6a:70:79:8b:08:40:a1:1d:da:0b:
         8d:93:1a:81:c6:87:d6:2d:4b:fc:83:de:2c:d3:63:b4:eb:58:
         9f:17:b6:dd:9c:b1:4a:87:3a:7f:de:ec:42:bc:54:dd:08:3e:
         f3:76:9e:61:b2:82:64:4d:86:d3:5b:a9:2a:3d:83:74:a8:6d:
         c9:ac:0b:6d:fb:22:dd:a9:ba:09:19:58:e2:ca:0b:86:25:9e:
         11:b3:b5:ac:0f:19:69:00:bc:cd:e1:a4:d8:80:93:d0:2b:dc:
         17:05:32:14:0c:ac:19:ab:c3:f7:93:71:4f:be:6b:39:df:47:
         dd:d4:f9:b7:24:fb:5d:9b:9d:51:71:69:a6:7d:5b:79:d0:d8:
         f0:1d:48:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org