Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/b16cjj7VBB-2YM5YVDw5z6FZ9U0.roa
File:                     b16cjj7VBB-2YM5YVDw5z6FZ9U0.roa (raw, json)
Hash identifier:          GpJPuh4FOhT3u0lW7G8s5JMRUUHAsAJkC538508OVkQ=
Subject key identifier:   6F:5E:9C:8E:3E:D5:04:1F:B6:60:CE:58:54:3C:39:CF:A1:59:F5:4D
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       019D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/b16cjj7VBB-2YM5YVDw5z6FZ9U0.roa
Signing time:             Sun 01 Oct 2023 01:36:30 +0000
ROA not before:           Sun 01 Oct 2023 01:36:30 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        202.72.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:36:30 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=6F5E9C8E3ED5041FB660CE58543C39CFA159F54D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:ed:ce:c5:e5:af:ab:fe:6a:02:46:bb:cc:
                    89:44:8c:68:2c:18:91:4f:09:6e:50:fd:b1:1b:67:
                    c6:d2:aa:f5:85:62:1d:c3:31:b2:42:cb:9c:e4:57:
                    29:7a:46:98:89:0f:21:42:53:bd:03:9d:c2:88:30:
                    2b:b9:7c:52:01:02:8f:81:8d:e4:09:2d:09:2f:d9:
                    15:00:96:21:b1:88:e4:cd:30:8d:36:0e:73:f5:c4:
                    6d:5e:49:7c:3a:00:93:9b:04:2f:6d:b1:d5:64:10:
                    02:64:f1:6d:27:43:a4:56:23:9a:54:f4:2d:dc:e4:
                    b1:ae:2c:d7:44:20:f3:9d:86:f1:39:59:1d:54:d3:
                    81:00:5e:07:a3:14:26:e6:ab:04:c5:5c:f7:61:13:
                    e7:a0:cb:04:91:3f:53:5a:81:47:c7:41:b5:50:ec:
                    c6:36:c4:c4:ed:84:1c:85:fb:55:0f:37:01:99:99:
                    93:97:aa:e5:8f:5f:cd:9d:f5:d5:1c:cd:59:3a:3e:
                    1c:48:34:68:19:e6:f2:74:99:99:1e:33:76:08:a8:
                    cd:e8:7d:6e:50:91:c2:77:3c:76:4c:3d:fc:c8:91:
                    b1:8c:d4:d7:4a:19:56:dc:a8:84:be:ef:79:bb:bd:
                    a9:4b:94:cc:83:c0:5a:c4:6f:63:e9:c3:da:a3:78:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5E:9C:8E:3E:D5:04:1F:B6:60:CE:58:54:3C:39:CF:A1:59:F5:4D
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/b16cjj7VBB-2YM5YVDw5z6FZ9U0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ba:2c:d9:12:c4:48:ad:82:61:e2:69:01:10:70:81:fc:c0:17:
         ce:e3:74:94:85:4f:61:2c:9c:cb:87:08:fe:20:17:ae:a4:0f:
         3c:28:5f:ce:14:af:97:5f:e2:b4:85:10:f3:41:99:b4:42:21:
         c4:25:23:1a:d9:0f:2c:83:e9:62:ba:ce:93:1a:3d:fe:06:c1:
         3c:cd:d3:1f:19:09:ce:7a:c5:03:32:9d:0a:a1:a7:dd:4a:25:
         a1:18:68:7c:84:a9:6a:71:cf:c2:bc:a4:4c:f1:af:4c:ac:a5:
         fb:0a:89:83:ea:fd:8e:31:98:35:81:a3:6a:59:98:03:ae:6d:
         71:4c:45:56:23:0b:6c:ee:1a:57:39:db:d4:9f:80:6a:aa:18:
         e5:ca:4d:77:26:b0:36:c2:ba:67:e4:1a:17:dc:42:09:11:98:
         58:46:00:a2:79:c3:07:00:d3:d0:8b:d5:02:69:25:03:cf:3f:
         4f:3e:c6:61:3a:04:b8:31:25:aa:41:81:5d:15:d7:a5:26:a8:
         61:71:bc:19:0f:45:2b:a1:b1:90:1a:3d:c3:56:ce:2b:3d:3f:
         62:05:73:18:02:b7:48:13:b6:7e:26:34:28:3f:aa:bb:9c:bf:
         a8:e9:33:66:8f:5e:73:b1:e3:ef:b6:48:7d:d6:27:a0:6c:71:
         8f:58:09:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org