Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/dcY911gbrR1nY8FKHe8D71qpGpA.roa
File:                     dcY911gbrR1nY8FKHe8D71qpGpA.roa (raw, json)
Hash identifier:          CDGAkaX0Tv2GC3+wBxmlEMnj//vVMnRYzshbx1xp5m0=
Subject key identifier:   75:C6:3D:D7:58:1B:AD:1D:67:63:C1:4A:1D:EF:03:EF:5A:A9:1A:90
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       014F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/dcY911gbrR1nY8FKHe8D71qpGpA.roa
Signing time:             Sun 01 Oct 2023 01:32:58 +0000
ROA not before:           Sun 01 Oct 2023 01:32:58 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        219.112.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:32:58 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=75C63DD7581BAD1D6763C14A1DEF03EF5AA91A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3e:bd:ca:06:37:2a:5c:5e:4a:d6:4c:5a:67:
                    29:48:f0:a4:19:02:85:59:fe:2b:c4:66:db:f3:7f:
                    b3:8e:ef:8d:c3:a0:11:35:98:8e:e9:c1:3a:17:ed:
                    a2:75:3a:d4:f0:a1:fa:12:83:6c:26:fd:89:48:81:
                    d8:91:cf:e8:ed:46:7b:ba:00:15:5d:2d:37:e6:c6:
                    68:95:77:18:29:4e:0f:64:c5:7c:04:dc:c9:93:c7:
                    e6:7a:f1:10:a1:61:7f:5b:53:f9:35:9c:2c:b8:d8:
                    d9:a4:d3:0c:64:1a:18:6e:18:c5:77:e1:99:ce:7b:
                    98:4b:23:42:d0:9d:d8:20:ec:fd:03:cd:7e:28:f4:
                    e3:34:76:3d:0d:58:3b:87:62:74:5f:f4:97:9d:74:
                    6a:5c:01:17:78:7a:e5:b2:3e:de:54:ae:ca:e8:0c:
                    0f:0a:24:c9:41:7c:ae:6f:4c:4a:b3:a5:b8:2f:55:
                    51:89:c9:b1:f2:38:c6:e8:af:a2:86:85:7f:1d:8e:
                    62:2b:f9:43:24:dc:a6:5e:c3:9b:cb:d3:bd:5b:a8:
                    f9:30:76:95:49:a0:70:31:08:d4:81:da:76:cf:13:
                    a1:c9:57:f9:3c:d2:3c:b9:7a:a4:07:e4:e9:34:8d:
                    af:8d:7a:7f:6b:60:31:57:52:31:38:f7:68:b3:d2:
                    bf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C6:3D:D7:58:1B:AD:1D:67:63:C1:4A:1D:EF:03:EF:5A:A9:1A:90
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/dcY911gbrR1nY8FKHe8D71qpGpA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.112.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c9:a4:90:22:f2:28:7b:62:bc:cf:9a:58:09:86:0c:25:9d:b4:
         9c:92:5a:23:c4:72:f5:46:a9:5f:29:ca:d6:77:ad:38:60:08:
         ba:73:0c:1f:d7:24:15:b3:ff:f1:5c:b2:6d:bb:76:91:36:38:
         cc:06:e4:c8:00:ce:0a:7a:e8:88:a5:9d:85:32:2d:96:95:75:
         77:05:3e:a5:c2:b0:b7:26:51:7c:63:d4:a4:74:28:47:2e:54:
         66:9f:17:b6:c8:91:2f:16:92:ae:ef:e8:a6:64:ab:82:50:28:
         e6:eb:32:9d:1f:c0:01:50:48:3e:e5:94:f9:a5:bd:39:85:2b:
         82:5a:77:f8:a1:6d:9b:ac:3a:cb:91:56:c6:9c:75:6a:a3:37:
         23:55:76:7a:76:07:62:c7:2b:05:fd:3c:0e:01:6c:16:2f:25:
         a0:57:8a:e8:d4:b0:40:eb:c4:87:f7:ce:2a:96:04:42:11:d9:
         04:1c:ac:4d:e1:ae:93:45:3a:cf:81:fc:0b:58:f2:d0:84:97:
         0f:84:15:3e:98:e6:ec:c6:d7:68:7e:2c:ed:6d:b0:2a:4e:63:
         d7:3a:32:14:48:11:d1:67:1a:77:08:61:ec:74:ba:2c:39:61:
         e3:69:27:26:cf:01:3f:ed:90:7d:70:75:0f:65:6a:46:10:3d:
         69:b6:93:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org