Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/W0fSNG24wrtUhzZg8ARlkdDhg_U.roa
File:                     W0fSNG24wrtUhzZg8ARlkdDhg_U.roa (raw, json)
Hash identifier:          yP0EbrIMld0NKIzvjKlT+RKvQTtB5L42npP4bhqVC4Q=
Subject key identifier:   5B:47:D2:34:6D:B8:C2:BB:54:87:36:60:F0:04:65:91:D0:E1:83:F5
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0156
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/W0fSNG24wrtUhzZg8ARlkdDhg_U.roa
Signing time:             Sun 01 Oct 2023 01:33:01 +0000
ROA not before:           Sun 01 Oct 2023 01:33:01 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        117.53.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:33:01 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=5B47D2346DB8C2BB54873660F0046591D0E183F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:bc:e3:37:ad:d3:41:1a:3e:26:46:b5:8e:
                    6f:dd:5c:df:5a:1c:6a:2e:05:08:d7:7f:12:f7:74:
                    ac:95:1d:bf:71:90:49:b6:68:e1:c7:92:22:96:51:
                    06:06:d5:d3:7b:28:ac:69:fe:78:aa:f0:45:7d:06:
                    90:83:63:9d:f9:b9:fa:1a:99:7d:b0:ea:23:81:49:
                    22:a9:82:26:39:6f:87:f9:b4:5b:6d:25:a1:52:e3:
                    7e:68:cb:5f:4a:31:7a:71:81:3a:38:b3:b5:9f:f6:
                    60:ef:f3:fd:8b:1b:b2:62:4c:65:ed:6c:fa:91:4a:
                    92:c3:bb:fc:ab:28:5c:bb:af:d1:40:9d:22:03:a2:
                    83:94:c6:f2:2a:eb:60:d7:b4:d0:12:6e:ab:ee:9c:
                    83:57:34:57:a5:0d:a7:ff:75:df:2a:a6:d7:0f:fa:
                    ff:99:43:fd:1e:1a:6d:c9:56:13:ce:f4:26:52:37:
                    82:43:46:b2:a3:eb:f9:99:2f:b6:fb:f8:75:39:b5:
                    53:42:0d:7b:52:59:4b:49:84:fa:93:55:50:ea:2d:
                    7b:d5:3d:11:0c:6b:81:0c:7f:2e:e1:e7:ef:f9:c0:
                    6f:8a:fc:7b:91:96:65:e1:1c:11:b9:53:a7:87:7d:
                    e4:4b:52:1d:9f:1f:ee:3d:47:e5:cb:3d:ac:82:32:
                    ea:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:47:D2:34:6D:B8:C2:BB:54:87:36:60:F0:04:65:91:D0:E1:83:F5
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/W0fSNG24wrtUhzZg8ARlkdDhg_U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.53.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:79:f8:9e:ad:fd:42:2c:e0:7b:18:4d:eb:f1:bd:d8:ec:df:
         3f:6a:1a:e6:90:8d:32:b7:f2:49:6f:1d:07:cb:0f:0e:46:e6:
         b2:82:bf:7f:e6:94:17:9b:2d:4b:95:d9:bd:62:f9:6a:98:49:
         10:22:97:20:46:fb:d6:dd:13:44:7b:cb:4c:7e:14:fb:3b:87:
         dc:d7:59:e1:69:68:6a:cf:7d:d0:62:d5:e2:05:e7:c4:b5:fb:
         69:cf:c0:ab:19:78:1f:8d:46:c4:a2:70:c2:e2:6c:f7:40:97:
         ff:ab:01:c3:4f:c9:df:2a:4a:ee:f9:22:0c:14:48:05:2f:4b:
         1d:fd:19:05:ea:71:d1:5d:cd:1f:10:8a:2c:ad:84:66:22:c1:
         13:d2:a4:ae:64:8b:b9:87:7c:8e:0c:48:3b:e7:58:52:08:4c:
         95:75:d1:f0:ff:58:99:4f:71:51:5d:7d:3f:81:5f:34:b1:93:
         b0:a6:02:89:0e:b1:29:4b:00:e6:05:ee:a6:46:43:90:bf:c7:
         eb:b7:c5:ad:b0:80:f6:c2:e7:84:8e:ce:00:88:f8:0d:cc:cf:
         8e:07:95:ca:e9:ab:91:1c:06:02:00:a5:bb:14:49:9c:e2:1e:
         8a:4d:38:a1:98:ee:4c:12:52:11:42:ee:80:28:d8:e0:b8:f6:
         55:af:5f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org