Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/eQSvZ9a_PwvnC8VVntj_RO7uCyI.roa
File:                     eQSvZ9a_PwvnC8VVntj_RO7uCyI.roa (raw, json)
Hash identifier:          g7qU+UkPdqz8WmAe9y6sAlqd8VdgmiFRv2UBfdKxK1s=
Subject key identifier:   79:04:AF:67:D6:BF:3F:0B:E7:0B:C5:55:9E:D8:FF:44:EE:EE:0B:22
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01E3
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/eQSvZ9a_PwvnC8VVntj_RO7uCyI.roa
Signing time:             Sun 01 Oct 2023 01:40:04 +0000
ROA not before:           Sun 01 Oct 2023 01:40:04 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        112.137.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:40:04 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=7904AF67D6BF3F0BE70BC5559ED8FF44EEEE0B22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9f:71:cb:3b:89:a6:f7:93:be:a9:91:b4:a5:
                    9c:8f:20:19:16:2a:40:60:43:87:7d:9b:e8:cf:f0:
                    71:12:cd:0d:c6:0d:5b:29:02:b2:7e:af:23:f4:3e:
                    c1:12:c9:4a:27:6e:57:32:79:f6:77:47:d5:44:06:
                    ba:f6:0e:71:97:85:0f:61:2d:63:a2:04:1b:08:6f:
                    cb:85:f1:1a:dc:05:47:95:13:a1:ef:8e:f9:c6:05:
                    1c:ba:25:12:ce:df:7b:bc:77:08:d5:b7:13:4e:41:
                    a9:60:f2:b1:cc:72:a5:bc:92:76:cf:83:49:32:26:
                    de:1c:06:eb:6a:03:f0:3d:4d:3c:fc:c1:20:e1:ef:
                    cc:9c:b2:72:74:6c:df:31:f4:4c:72:15:93:9f:08:
                    25:eb:89:fd:ae:9a:8c:dc:9b:c5:c5:c2:82:b5:89:
                    da:da:68:41:8a:41:97:db:3d:ac:e3:d3:6f:f3:31:
                    9a:b7:ea:0f:67:87:ca:df:9c:5e:bb:be:90:3c:df:
                    62:1c:1d:3f:a0:2e:a0:86:12:92:97:46:87:98:d3:
                    9f:d5:d6:1f:54:b3:e9:de:f4:cf:64:3a:21:e3:aa:
                    2b:ca:b7:1d:54:4b:1a:f4:ec:74:23:94:e0:16:de:
                    37:e2:7b:af:8a:9a:05:7a:db:51:bd:c0:27:6e:e3:
                    66:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:04:AF:67:D6:BF:3F:0B:E7:0B:C5:55:9E:D8:FF:44:EE:EE:0B:22
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/eQSvZ9a_PwvnC8VVntj_RO7uCyI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         53:d3:41:a4:44:94:99:9f:48:2b:ea:cf:33:67:3a:a0:60:97:
         c3:f9:85:53:ed:fb:39:65:10:5b:0a:f9:fa:24:2f:4c:84:65:
         76:19:19:cf:38:cf:cd:03:64:6e:0c:38:53:1c:ae:e2:d1:5f:
         bc:e7:6e:b1:0c:b8:d1:90:8d:06:4b:59:dc:b0:e2:f5:54:69:
         32:75:f2:1c:28:bc:f3:c3:d3:27:78:22:9f:04:6c:31:d1:25:
         22:83:6e:b1:79:55:aa:d2:9c:2b:e4:31:f2:d3:47:16:e9:7d:
         67:80:a4:02:68:dd:bc:75:dc:d9:21:fd:15:ab:05:bb:7b:dd:
         33:53:af:6e:6f:4f:ef:48:08:0b:22:4f:03:da:f6:52:9e:24:
         cc:f8:7c:b8:a3:ac:49:86:18:a8:8a:0c:be:e2:6b:03:8f:c8:
         d1:05:79:ff:79:d7:7b:07:8f:5d:8c:c8:fd:78:58:b1:c9:20:
         01:24:0b:2f:6b:d8:be:73:0f:b9:bf:11:c8:5d:d9:38:b0:a2:
         e8:37:19:59:b1:86:6d:f7:ce:d7:3e:eb:91:24:e1:51:97:af:
         86:b0:01:2c:af:ca:4f:99:5f:eb:55:2b:70:68:47:b6:b6:6f:
         f2:1d:68:73:05:e4:ab:50:df:fb:cd:2a:83:a2:3f:e0:17:6c:
         9b:15:92:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org