Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/iUPSsjSsJ2l5FIMzEhGtPV_drTg.roa
File:                     iUPSsjSsJ2l5FIMzEhGtPV_drTg.roa (raw, json)
Hash identifier:          LPtL1w92TbqhRiWTqXk3LJa4S+J3yv14MBxD3q47+hQ=
Subject key identifier:   89:43:D2:B2:34:AC:27:69:79:14:83:33:12:11:AD:3D:5F:DD:AD:38
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0166
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/iUPSsjSsJ2l5FIMzEhGtPV_drTg.roa
Signing time:             Sun 01 Oct 2023 01:33:07 +0000
ROA not before:           Sun 01 Oct 2023 01:33:07 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     23790
IP address blocks:        119.161.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:33:07 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=8943D2B234AC2769791483331211AD3D5FDDAD38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1b:c1:9b:95:3f:19:d4:df:3b:85:05:a6:e3:
                    bb:01:b9:29:38:fa:51:7f:b5:01:97:88:8a:0d:55:
                    f3:47:6e:6a:92:a0:e8:43:1f:26:94:81:15:f0:ea:
                    4f:e8:75:71:ef:17:94:c4:75:72:d6:32:8d:51:15:
                    bd:be:21:e5:54:47:59:d5:24:44:2f:1e:25:f2:d3:
                    ac:22:de:f1:30:bb:a7:ff:d9:d2:36:ac:fa:0d:2e:
                    65:1f:24:e6:bf:83:3f:d9:4c:fe:4d:51:ca:74:3d:
                    7f:ce:16:52:85:f1:40:08:ff:bc:19:a6:4a:7f:8f:
                    33:f6:fe:21:96:28:a0:7e:78:4a:5f:91:3e:2d:6e:
                    1b:08:e2:9a:66:fc:fd:ce:f1:e2:fc:ba:8d:f3:2c:
                    06:e3:4b:36:62:56:e2:a4:84:17:3b:5b:7d:15:9b:
                    4c:79:fb:63:55:19:0c:9b:f3:ac:51:09:04:84:d8:
                    e8:42:3c:ad:9b:de:12:d1:ec:72:72:1c:4b:88:4b:
                    9e:69:3b:95:02:95:4d:e2:bb:d3:05:1c:1e:33:42:
                    33:80:ce:6d:26:af:2b:bc:29:0c:b4:ad:b1:15:37:
                    79:7c:43:fa:76:9a:10:46:9f:ab:cd:8b:3a:02:a8:
                    17:99:63:9d:e1:60:1e:7c:cf:1b:6e:2d:12:76:11:
                    20:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:43:D2:B2:34:AC:27:69:79:14:83:33:12:11:AD:3D:5F:DD:AD:38
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/iUPSsjSsJ2l5FIMzEhGtPV_drTg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.161.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:a0:e5:99:41:8c:48:9f:4a:78:32:31:7c:88:e7:db:07:1b:
         5f:c7:fe:cd:fa:de:1e:02:c5:f9:1f:0d:d7:4e:a3:da:7c:1d:
         e5:10:93:f0:08:d1:84:ef:15:37:a1:39:e8:4a:59:a1:8a:ae:
         36:2c:b5:32:2e:82:7f:37:2d:76:21:50:79:be:bd:c7:f2:31:
         8e:73:f8:d5:27:1c:b9:84:61:2b:e0:c1:6a:81:45:be:8f:ae:
         eb:1d:c0:69:92:cb:8c:e1:f1:53:f7:f2:55:1e:43:f8:12:a8:
         41:3b:98:7d:8f:23:12:05:81:6c:50:75:c2:6f:1c:52:99:4f:
         3d:52:61:56:c0:cc:5c:37:b2:fc:2a:4b:ea:44:42:88:d6:fa:
         f9:0e:83:a9:60:98:5f:77:7b:ee:2c:b1:69:81:ea:e5:6b:98:
         21:24:f9:d1:67:d3:92:5c:9d:a1:bd:2b:a5:28:99:6f:67:8b:
         a7:8c:a0:49:d8:b7:b5:6e:09:c0:b9:05:e0:65:c1:61:1c:df:
         29:8d:86:72:a2:5e:a9:d9:d1:f8:47:f2:db:fe:12:d3:e4:3e:
         21:26:ca:78:2b:99:89:4a:7d:6b:60:9d:50:a5:19:02:d8:fa:
         64:77:98:cf:82:2c:a4:82:20:df:15:7d:ee:44:ff:e6:d4:a9:
         6a:00:3f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org