Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/bDyanek-JQoKr5ZLQcmzhbu-eqM.roa
File:                     bDyanek-JQoKr5ZLQcmzhbu-eqM.roa (raw, json)
Hash identifier:          HpoD1I3NtpTFEA9/Sj7zLViDOAlGaqzkp29RgjeVMoc=
Subject key identifier:   6C:3C:9A:9D:E9:3E:25:0A:0A:AF:96:4B:41:C9:B3:85:BB:BE:7A:A3
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0155
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/bDyanek-JQoKr5ZLQcmzhbu-eqM.roa
Signing time:             Sun 01 Oct 2023 01:33:01 +0000
ROA not before:           Sun 01 Oct 2023 01:33:01 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     18136
IP address blocks:        117.53.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:33:01 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=6C3C9A9DE93E250A0AAF964B41C9B385BBBE7AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:13:0b:d1:79:36:66:c8:6f:b7:87:02:7e:df:
                    43:65:0f:26:da:10:54:61:8b:a6:af:b0:87:05:9f:
                    91:cc:59:57:72:fb:ef:22:db:2c:06:bd:aa:13:af:
                    75:17:da:63:fe:a1:7a:93:4a:a4:44:8f:16:7d:32:
                    48:fd:7f:d0:1a:b7:73:78:5c:c2:80:6d:3e:f7:a5:
                    b1:35:13:3d:b2:2a:26:20:53:78:a1:20:14:09:5d:
                    ce:c8:03:55:61:de:97:18:bd:1d:e3:9c:c0:24:71:
                    ba:0f:49:f9:47:42:17:92:5c:71:23:06:62:5e:20:
                    93:36:d3:36:f4:8c:2e:bd:4a:b8:3b:7a:51:4c:e1:
                    46:2e:2b:af:a6:18:98:b5:42:88:85:87:f1:56:a9:
                    72:35:55:66:6d:fc:cc:2e:7d:8f:a3:48:5b:35:df:
                    36:82:e5:0a:c6:71:b6:b2:65:fc:83:74:dc:e1:78:
                    1e:a3:bd:72:09:70:87:07:ab:e8:42:d2:25:71:aa:
                    42:a2:15:08:25:13:e3:a2:87:6e:f5:c7:20:a1:d7:
                    ef:9f:7d:a8:87:de:1f:7b:4c:7d:09:59:22:d3:78:
                    39:63:32:e7:c2:d9:16:d5:e4:ba:a8:ae:fe:4c:c8:
                    bd:f3:43:2c:a8:a6:cb:cc:cb:40:33:dd:71:b0:8f:
                    fa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3C:9A:9D:E9:3E:25:0A:0A:AF:96:4B:41:C9:B3:85:BB:BE:7A:A3
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/bDyanek-JQoKr5ZLQcmzhbu-eqM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.53.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:93:3e:c6:21:3e:2c:0f:89:0c:32:43:9f:a0:78:16:20:b2:
         23:cc:8f:f2:32:31:19:54:c1:28:04:a7:9f:3e:42:af:8c:e0:
         d2:ed:f2:6d:7b:16:ca:ac:7d:1f:3d:55:af:4a:e9:10:47:34:
         cd:9e:ca:5d:55:02:64:0a:fe:23:b3:59:8c:21:8a:91:f2:df:
         6d:73:4c:31:ce:bd:7d:9c:34:a2:40:60:75:98:07:3b:28:1e:
         76:83:34:d2:d2:35:17:93:a5:a9:9b:fc:31:f9:87:b0:36:0b:
         4b:fd:8d:a3:e5:62:a5:06:8e:f9:b3:45:53:d8:7a:78:9e:7e:
         8e:8f:ba:67:b0:2f:03:05:ae:ab:c7:21:54:46:ca:c3:ad:cf:
         0d:bd:94:29:47:36:b3:e7:54:aa:04:29:9a:ec:38:65:db:fb:
         b6:24:6c:75:ab:f1:0d:84:d9:db:74:fd:69:27:92:05:c4:27:
         6b:a4:7f:a1:23:fa:c4:67:d4:c0:88:04:9a:9f:cf:dc:2a:a2:
         14:55:62:4a:e6:4d:a6:d3:0d:9e:5a:c2:6d:59:d2:98:03:ef:
         55:dd:67:7d:82:15:3e:7c:d9:2b:e5:0f:a2:ed:f5:fa:34:9c:
         75:e6:ad:e9:6d:e2:af:c3:f0:d5:ca:81:99:6c:33:90:16:d6:
         dc:40:d7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org