Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Zd-DdIh0opM0M40dLRpUbcKBp_0.roa
File:                     Zd-DdIh0opM0M40dLRpUbcKBp_0.roa (raw, json)
Hash identifier:          gIHTQEntaWlifeaywczwvCpXW8iMAoc7MNbe9b6Fjag=
Subject key identifier:   65:DF:83:74:88:74:A2:93:34:33:8D:1D:2D:1A:54:6D:C2:81:A7:FD
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01D2
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Zd-DdIh0opM0M40dLRpUbcKBp_0.roa
Signing time:             Sun 01 Oct 2023 01:38:24 +0000
ROA not before:           Sun 01 Oct 2023 01:38:24 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9617
IP address blocks:        180.220.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:38:24 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=65DF83748874A29334338D1D2D1A546DC281A7FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f1:7f:4c:e2:4b:25:e9:ac:06:59:f3:04:63:
                    37:67:85:b0:65:9d:29:f6:ea:b1:9d:b6:99:6d:28:
                    17:9b:2d:2b:61:3b:ec:86:8c:4a:25:ff:75:66:0c:
                    ea:2c:c1:f0:41:4a:ea:24:54:f5:1e:f0:83:e6:68:
                    15:00:79:06:58:ee:22:7e:05:75:42:58:ae:05:77:
                    2a:a8:e2:7e:0c:72:a3:f5:dd:dd:2f:2b:17:9e:14:
                    df:ef:74:e0:f1:40:40:50:32:fa:54:22:02:7d:59:
                    d1:ad:44:93:ea:53:fd:4d:9d:a6:2d:f8:a8:76:4c:
                    96:c5:78:44:be:86:40:c1:f4:00:81:25:34:a8:d7:
                    dd:24:0d:43:29:28:ef:1a:f8:23:4d:13:ce:dd:f4:
                    99:fc:72:bf:d3:ee:70:75:b0:b8:f2:91:81:0b:25:
                    6c:f1:3c:da:8d:b0:71:c0:9e:47:45:bd:19:c8:25:
                    32:b9:de:7c:e6:f0:a8:3c:47:9f:32:7c:0e:2f:1a:
                    77:01:e2:cf:17:16:fd:6e:91:c7:a1:d5:9b:3b:d8:
                    45:2a:d1:aa:a3:90:9e:23:5b:e7:5a:59:f8:65:b7:
                    4e:78:94:40:f9:ca:be:e6:31:64:e8:7c:3e:0e:75:
                    3b:04:67:4f:0f:7d:ff:62:98:6a:47:38:28:0a:3f:
                    ae:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DF:83:74:88:74:A2:93:34:33:8D:1D:2D:1A:54:6D:C2:81:A7:FD
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Zd-DdIh0opM0M40dLRpUbcKBp_0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.220.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         ca:8d:eb:6e:36:2c:5b:31:17:6c:b7:18:e0:3e:bd:9a:da:95:
         6f:cb:c0:a6:a6:b9:ec:d6:ea:e7:3e:1c:05:67:0d:23:45:1e:
         b3:3e:39:06:b3:3c:fe:93:d6:2c:0c:84:7e:89:fa:92:cd:c7:
         94:9d:aa:9c:e6:0e:7c:35:9c:41:ec:81:f1:8f:91:8f:43:2f:
         4b:b7:27:d8:25:a1:ee:3c:94:f9:cb:c5:c8:ff:06:cd:93:85:
         6e:8e:c9:5c:48:c7:58:4b:52:b4:57:ff:ed:d1:10:a4:e2:b2:
         63:cb:8f:9a:72:c9:97:54:0e:90:b9:4e:e1:0a:8f:4c:82:f8:
         43:06:08:36:6b:20:93:7d:f0:a0:6e:6a:ec:ad:9e:65:0e:9e:
         39:a9:a9:98:04:9b:80:bd:7e:70:c1:bb:8e:a9:4c:9e:17:32:
         16:0f:0d:7c:a3:8e:ec:54:f9:36:64:e6:7f:ac:11:a6:f0:42:
         22:7c:27:46:ca:40:31:49:e6:6e:bf:57:a7:30:e4:c7:f1:71:
         42:76:f1:7b:dd:70:47:b5:60:0c:04:a8:b9:fd:fb:db:4f:39:
         45:ee:ce:a8:28:d9:6b:b6:71:42:1b:b9:68:08:a1:7f:c5:dc:
         61:36:6e:43:ef:42:1d:0e:a3:e9:3c:8e:35:b7:2e:71:6c:20:
         cb:23:91:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org