Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/cU4aBlsdh6hQRDzuXvEz3vwiiVE.roa
File:                     cU4aBlsdh6hQRDzuXvEz3vwiiVE.roa (raw, json)
Hash identifier:          9ucO0F4Mlhxu/fv7RI5HJFaBXPiLsNMxWPBzF15YgJE=
Subject key identifier:   71:4E:1A:06:5B:1D:87:A8:50:44:3C:EE:5E:F1:33:DE:FC:22:89:51
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       011F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/cU4aBlsdh6hQRDzuXvEz3vwiiVE.roa
Signing time:             Fri 01 Sep 2023 01:30:27 +0000
ROA not before:           Fri 01 Sep 2023 01:30:27 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     18134
IP address blocks:        103.55.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep  1 01:30:27 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=714E1A065B1D87A850443CEE5EF133DEFC228951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:20:b8:a5:d4:7a:98:16:5a:d1:3d:33:25:f0:
                    b6:1e:3d:b6:35:b6:10:62:c0:d3:67:11:27:e1:76:
                    3b:04:fc:2a:79:9d:12:ef:98:87:b8:ba:b5:49:ec:
                    1a:98:1c:1e:bb:66:6b:ae:67:67:ce:09:e7:dc:0c:
                    b6:64:f3:df:00:8f:2b:62:a6:d6:3c:67:e3:51:10:
                    18:c5:a9:2b:c0:f0:05:ce:39:ed:4f:bc:c3:bf:fc:
                    51:33:1d:d8:ad:94:7a:36:b4:2c:d5:c8:fd:06:62:
                    f3:d7:70:5b:b1:01:23:5f:22:4d:6c:88:5c:0c:b4:
                    27:25:27:de:3c:29:3f:0b:4a:41:56:93:50:83:c6:
                    bf:0c:74:9c:d8:34:26:c9:81:34:cd:a0:01:89:ac:
                    43:8c:a8:f9:7d:b3:2c:a6:85:c7:67:aa:7a:4d:81:
                    43:26:0b:ba:60:08:33:22:f4:13:b0:e6:7e:35:8a:
                    0a:42:10:5f:ab:d8:07:d0:af:0c:1a:e0:16:27:f9:
                    f7:54:f1:98:2c:bc:06:24:e8:37:89:97:c5:34:2a:
                    60:59:4e:7a:69:54:a5:ce:c3:ec:0d:0d:88:f3:28:
                    f2:5c:da:a7:12:ef:02:03:88:a0:b3:46:b8:b7:27:
                    44:74:42:f5:e3:0f:c8:3e:30:d6:2b:8c:85:df:0e:
                    21:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4E:1A:06:5B:1D:87:A8:50:44:3C:EE:5E:F1:33:DE:FC:22:89:51
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/cU4aBlsdh6hQRDzuXvEz3vwiiVE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:4f:b5:cf:e2:45:e3:3e:c9:52:f9:60:04:5a:ed:09:d4:0f:
         f1:c7:1f:e8:71:29:5e:3e:c6:b2:e0:42:19:42:7b:9d:8a:7b:
         2a:2d:a7:a4:83:26:94:45:ac:30:e2:ed:94:ee:09:49:48:87:
         39:d5:26:7b:6d:21:75:58:0e:8b:8a:03:37:b4:36:03:7d:77:
         02:31:47:ba:4c:af:56:ec:f8:08:2a:70:50:e4:c5:e8:62:20:
         1e:a9:ca:2c:dc:b9:06:31:51:a7:b3:b6:fa:cc:79:5e:a8:d1:
         37:81:ee:e3:80:6e:39:e3:08:ad:96:60:62:cd:5f:40:04:ec:
         a7:81:9b:4b:37:3f:10:b9:31:2a:c2:19:10:47:73:fe:c9:50:
         a2:f6:e4:9d:a6:ea:ba:81:c8:80:44:e9:6b:04:e1:e8:c3:3b:
         72:d8:b8:ef:91:fe:a5:05:52:70:8d:4d:72:64:60:08:7f:81:
         cf:ae:a3:24:58:4e:0f:22:7a:79:77:58:ae:39:78:dd:ed:de:
         f7:fe:93:14:9c:73:9a:9d:58:12:31:bc:17:fd:61:b6:bd:f6:
         d2:57:fd:88:6f:65:8c:50:f7:0e:ec:e3:3a:c4:c4:93:98:a2:
         5e:4b:00:9a:80:2b:32:1f:08:63:7b:28:99:74:09:62:5e:5e:
         75:e8:2c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org