Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/h2n1DPaxEHartpUAKi2FPOVTap8.roa
File:                     h2n1DPaxEHartpUAKi2FPOVTap8.roa (raw, json)
Hash identifier:          9xs26fM4LFSlQhA8s2fv6jSb9Gzs3iajN55hC1IwDiQ=
Subject key identifier:   87:69:F5:0C:F6:B1:10:76:AB:B6:95:00:2A:2D:85:3C:E5:53:6A:9F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0194
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/h2n1DPaxEHartpUAKi2FPOVTap8.roa
Signing time:             Sun 01 Oct 2023 01:36:24 +0000
ROA not before:           Sun 01 Oct 2023 01:36:24 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4721
IP address blocks:        180.149.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:36:24 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=8769F50CF6B11076ABB695002A2D853CE5536A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:09:e6:20:de:d3:95:ad:0d:91:b6:d3:08:1a:
                    1f:bf:64:7e:f7:eb:b4:92:bd:54:c5:d3:af:5d:3c:
                    34:96:28:99:09:27:64:f2:dc:36:bd:8a:8a:78:da:
                    ac:14:14:de:33:01:21:b9:08:94:86:f6:d4:94:da:
                    8a:80:0b:18:1f:8d:63:ae:7c:11:d4:93:20:11:1e:
                    64:df:91:7d:4f:4d:5b:91:22:c2:84:14:96:6c:37:
                    0a:19:e3:82:13:cb:89:69:d7:a9:5a:80:ed:42:c8:
                    b2:7a:07:f3:7f:3b:95:08:29:b8:2e:4f:e1:a8:20:
                    37:1d:1e:40:15:77:14:89:4f:0b:ff:38:b4:67:6a:
                    dc:5a:d2:6d:25:6c:c7:43:f3:f5:be:84:e0:78:25:
                    ba:12:85:ab:1e:77:1b:a9:59:b8:6b:db:22:36:f0:
                    1c:8d:67:48:7d:a0:4e:4a:6a:bf:e5:c8:a3:32:ed:
                    c7:7b:82:a3:65:a3:e6:90:7c:86:2a:f0:c7:0c:f9:
                    87:e7:92:68:23:d5:f9:81:b2:5e:b4:34:0c:38:aa:
                    38:ea:d1:b0:57:df:ca:74:ee:83:cc:1c:5c:89:a4:
                    6a:c3:d7:2b:77:d3:cd:1d:3b:e0:52:38:f9:63:08:
                    d5:f3:a0:f0:da:19:8b:2d:f5:f6:09:1e:95:fd:73:
                    15:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:69:F5:0C:F6:B1:10:76:AB:B6:95:00:2A:2D:85:3C:E5:53:6A:9F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/h2n1DPaxEHartpUAKi2FPOVTap8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.149.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cb:54:92:b9:95:32:40:31:f8:ea:02:ab:b4:75:12:5d:3c:b9:
         30:5f:2e:00:8e:b7:fc:2d:39:d8:51:41:86:6c:32:81:57:93:
         1c:a5:5f:a9:6a:20:b3:b4:cf:60:5c:45:d7:d0:47:a5:c1:ce:
         42:f2:4e:4e:d0:af:2c:52:9b:08:ef:77:4a:0d:35:c2:5d:e1:
         d9:ad:e0:fd:a6:6b:fa:c1:31:b6:eb:a8:06:f9:fc:18:1e:65:
         cd:d2:00:35:73:05:3d:07:3d:fb:0d:a8:6b:5d:73:52:ef:92:
         07:eb:f3:cc:fb:fe:62:13:6d:24:31:bc:6c:4e:31:e8:94:ce:
         5a:3a:2e:5e:1f:76:f7:5f:e6:13:9b:28:aa:a9:31:2e:a5:d9:
         98:f8:3c:ef:49:98:ba:ae:aa:df:5e:93:bc:69:02:2f:46:42:
         17:78:c3:fe:a6:ee:07:ac:fa:69:dd:43:59:fc:03:72:8e:99:
         46:9f:0c:f3:72:a5:61:36:2c:0b:73:95:e0:8b:9a:91:c2:1a:
         18:e4:fb:93:81:d5:36:00:fb:3c:f3:31:ca:28:e5:86:e0:3f:
         15:44:60:fb:0a:05:5f:cd:3b:9a:05:28:b1:11:a7:b0:b3:e7:
         f1:02:bf:0b:e3:54:c0:bf:88:fd:e3:c2:99:5a:2b:7d:62:05:
         38:1c:1c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org