Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/eQgygqRCHGxKfgo_qMYEDUFNHQ8.roa
File:                     eQgygqRCHGxKfgo_qMYEDUFNHQ8.roa (raw, json)
Hash identifier:          4qHLvwP/L27f8tdpvehlLfzZHcO4JeKy2wT6LjSgnu8=
Subject key identifier:   79:08:32:82:A4:42:1C:6C:4A:7E:0A:3F:A8:C6:04:0D:41:4D:1D:0F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0149
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/eQgygqRCHGxKfgo_qMYEDUFNHQ8.roa
Signing time:             Sun 01 Oct 2023 01:30:22 +0000
ROA not before:           Sun 01 Oct 2023 01:30:22 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        113.197.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:30:22 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=79083282A4421C6C4A7E0A3FA8C6040D414D1D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:7c:df:02:e5:82:84:0f:41:11:2b:85:ef:
                    ff:22:fc:f1:6f:31:b5:1e:21:dc:7f:5a:ce:65:35:
                    11:2c:25:a0:17:28:2b:7d:99:a0:90:31:95:4c:e5:
                    b0:d6:d3:7e:fc:64:f8:aa:9b:db:ca:24:f3:6a:2d:
                    4d:fd:a2:2a:55:2b:8a:ac:ae:3d:ba:b3:b4:29:ba:
                    4f:74:fa:9d:cb:c9:43:e4:95:80:28:cd:60:99:ec:
                    0e:a2:86:70:52:a1:aa:f9:3a:0f:ee:ca:d3:c5:ce:
                    a0:20:94:2e:0e:c4:27:9e:1b:eb:9d:c8:79:16:b4:
                    2e:c3:67:32:60:53:16:d3:ae:71:90:21:55:a4:6b:
                    0e:65:db:98:6a:a5:63:93:86:6f:92:88:dc:bb:8b:
                    7c:e6:4b:da:ed:00:79:00:e5:7a:39:9c:84:8e:ec:
                    55:fc:00:c1:14:e0:be:49:d0:1b:56:e6:57:eb:16:
                    8c:45:52:86:ec:01:5e:dd:54:94:3d:b6:8f:74:b3:
                    6a:50:6a:65:9b:9a:d2:5a:80:e3:1f:7b:a9:22:07:
                    1f:00:0c:96:63:7e:1b:f7:85:e5:1e:3b:61:ca:6e:
                    e3:48:76:bc:69:d5:9c:57:20:c0:77:a5:a9:67:a4:
                    ae:0f:70:20:9e:c9:48:8c:13:d8:74:8c:a4:0f:f5:
                    ff:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:08:32:82:A4:42:1C:6C:4A:7E:0A:3F:A8:C6:04:0D:41:4D:1D:0F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/eQgygqRCHGxKfgo_qMYEDUFNHQ8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.197.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c1:93:92:8b:fa:91:02:83:51:83:29:66:dc:13:a3:ea:03:8c:
         15:c0:4e:0b:42:18:4c:0c:69:07:13:d2:69:f5:63:9c:0d:ea:
         73:5e:b7:d0:1c:51:c0:39:e0:67:00:33:68:e3:61:d0:a0:7c:
         25:af:56:8e:06:56:f1:0c:ca:e4:41:51:3d:2b:a3:12:a9:38:
         99:bf:25:4f:c6:fa:b3:a0:1e:66:65:65:4d:b6:cc:a1:e4:ba:
         95:1c:c7:af:13:28:56:66:fd:78:6d:33:fd:5e:ec:12:fa:6a:
         eb:b0:59:45:25:8f:54:8c:ed:a5:c7:0a:ef:a2:d6:da:c6:c1:
         9a:fa:56:9f:20:d4:93:21:02:38:25:a1:dc:97:32:29:fa:fa:
         48:21:14:45:98:27:51:e9:58:ed:c4:ac:4f:d9:32:6f:fb:57:
         16:e4:44:c8:db:7f:95:21:aa:3d:bc:32:bc:fd:0d:39:be:a2:
         07:81:e5:62:48:b5:51:d8:ad:53:b3:91:3c:7a:01:e4:c8:de:
         ff:43:98:39:ab:f9:3e:ff:16:40:d6:6a:f9:48:9c:34:06:42:
         ad:5b:e4:63:b8:30:26:fd:6f:4a:cc:18:8b:ea:3a:a7:fe:04:
         95:cd:14:82:2a:87:09:e8:53:2e:72:2c:33:07:b4:ce:ce:89:
         90:a5:ad:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org