Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/eZSHklnMhmxcJgjL61b4Z3KGaxc.roa
File:                     eZSHklnMhmxcJgjL61b4Z3KGaxc.roa (raw, json)
Hash identifier:          vdy852RqWXh99fxDnX38yJVBJSWZ6WeVrIWTSX6/1uE=
Subject key identifier:   79:94:87:92:59:CC:86:6C:5C:26:08:CB:EB:56:F8:67:72:86:6B:17
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0112
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/eZSHklnMhmxcJgjL61b4Z3KGaxc.roa
Signing time:             Fri 01 Sep 2023 01:30:21 +0000
ROA not before:           Fri 01 Sep 2023 01:30:21 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9824
IP address blocks:        114.142.128.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep  1 01:30:21 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=7994879259CC866C5C2608CBEB56F86772866B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:ca:0d:84:17:15:3a:3c:c1:d5:34:da:f8:
                    62:ad:55:36:f8:77:c4:90:78:85:91:a5:20:f8:4a:
                    d7:80:9f:c5:2a:26:56:49:7e:f4:44:42:bc:90:fb:
                    61:3a:ea:f7:9c:95:60:54:22:c5:15:f1:d9:d3:bc:
                    a0:35:0e:bb:05:3c:30:64:de:56:96:37:be:0e:71:
                    c0:38:2b:98:00:56:02:b9:c9:82:46:59:dc:1d:9f:
                    f2:dd:6c:e4:e3:09:17:b7:05:bc:ad:27:ed:7d:00:
                    28:1e:05:d4:d2:4a:18:1f:e4:a3:0a:bc:3d:49:a4:
                    a4:c6:79:cd:de:1a:91:cc:0e:b2:29:9d:6a:c0:48:
                    01:31:8e:5e:e1:32:43:87:9d:0d:36:c0:70:e8:07:
                    f9:47:40:43:da:fd:ad:d8:a2:65:79:53:c0:f0:1b:
                    bf:17:d2:44:d1:8e:cc:8d:74:40:6b:80:d0:7c:98:
                    78:dc:77:a7:aa:44:26:0f:31:19:4e:ef:07:4f:0e:
                    16:a4:7e:92:cc:2b:d8:15:df:55:a5:3c:ad:78:76:
                    6e:c0:66:c9:18:fa:72:41:1f:65:e3:91:e4:3b:42:
                    fb:51:f2:a6:2b:94:a2:c0:06:cb:ee:f8:a7:4b:77:
                    a8:7e:d4:55:6a:b4:6a:91:97:0d:be:5a:01:b6:48:
                    81:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:94:87:92:59:CC:86:6C:5C:26:08:CB:EB:56:F8:67:72:86:6B:17
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/eZSHklnMhmxcJgjL61b4Z3KGaxc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.142.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ce:5a:a0:21:6c:f8:ad:19:d4:1d:af:a1:a8:29:4d:ea:a3:4f:
         1b:ce:5e:7b:25:1a:44:e5:3b:44:a7:bb:26:e0:01:34:0b:99:
         cb:5a:03:ff:45:49:b7:bb:15:5c:f8:67:06:8d:b4:ee:ac:d2:
         59:21:25:90:e4:7a:f6:13:8e:a3:8e:14:e6:04:06:93:87:e3:
         4d:08:c3:cf:1e:b1:73:62:01:d8:ec:36:4b:db:d7:fc:7b:1e:
         e7:55:ad:92:39:a0:8c:8a:4b:89:e7:38:a4:ce:95:bc:15:97:
         2c:57:9c:47:bd:67:15:2b:d1:2d:fe:bf:1c:94:1e:79:76:06:
         ea:7d:2a:9a:ce:1d:81:e4:05:2e:72:5c:6d:dd:3a:8e:f4:9d:
         5d:c2:a3:e8:11:25:6a:ba:21:88:83:5e:4a:79:73:34:78:a1:
         7c:23:63:7d:0d:66:5f:4b:11:08:3c:c2:a7:c8:d3:42:9f:85:
         00:a1:59:ea:29:41:68:ff:23:49:e1:c5:b0:4d:b3:ff:c7:6e:
         33:a3:69:5a:5b:59:07:6f:04:e2:42:8d:9c:ab:0f:db:01:5a:
         7b:2b:0e:04:51:73:f8:ea:47:86:3a:c7:48:36:5e:09:74:7a:
         0c:f7:d5:6a:65:59:2b:8d:94:97:c0:c5:69:79:50:ed:af:ff:
         72:81:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org