Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ipbyc2xzkRt2xZHx_wJu8HsCg3o.roa
File:                     ipbyc2xzkRt2xZHx_wJu8HsCg3o.roa (raw, json)
Hash identifier:          RkQ+FdtZ6PWz967YJGJq1JrO3KeIn1sJMRsQcPErIYY=
Subject key identifier:   8A:96:F2:73:6C:73:91:1B:76:C5:91:F1:FF:02:6E:F0:7B:02:83:7A
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01AE
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ipbyc2xzkRt2xZHx_wJu8HsCg3o.roa
Signing time:             Sun 01 Oct 2023 01:36:37 +0000
ROA not before:           Sun 01 Oct 2023 01:36:37 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4721
IP address blocks:        219.112.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:36:37 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=8A96F2736C73911B76C591F1FF026EF07B02837A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:74:56:49:9b:b6:33:58:c5:fc:f5:6a:50:0e:
                    71:a1:60:82:d3:42:12:21:39:a6:b3:ae:5e:ad:f1:
                    a1:4a:71:fa:6c:d4:c5:4f:b7:af:4d:96:4d:ee:95:
                    8c:90:a7:72:71:f4:82:c9:6f:d0:a6:6d:ea:8e:d9:
                    13:4b:2e:f7:c8:cb:1f:29:a9:03:52:20:24:a6:dd:
                    21:49:8e:bb:21:81:fa:30:f5:66:82:53:9f:49:57:
                    28:ed:8c:62:7b:f3:5c:06:2a:46:2f:18:e7:9d:a9:
                    88:e6:c0:b3:a2:ff:b1:b6:31:f9:fe:1d:02:04:29:
                    34:b3:67:9f:4c:b0:34:f0:64:d8:8d:15:7f:2d:76:
                    c3:78:f2:99:0a:b5:86:54:65:83:e8:b0:6f:78:22:
                    db:79:6d:c0:2d:a8:d6:23:3b:bd:7e:48:b0:07:72:
                    24:cf:e9:57:9e:e2:7d:a1:3c:ff:3d:e3:00:c5:34:
                    bd:01:35:ea:65:64:de:4a:e0:31:49:0f:09:40:75:
                    0b:1a:72:87:b3:3f:a2:9f:2d:24:99:10:ad:72:70:
                    38:40:dc:f7:75:7f:91:2d:e8:6b:93:4b:8c:f9:f3:
                    4e:37:08:70:09:65:35:c5:e0:e0:2b:89:71:77:a3:
                    f1:28:52:5a:3b:74:92:f4:c0:41:59:a4:bb:29:25:
                    ce:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:96:F2:73:6C:73:91:1B:76:C5:91:F1:FF:02:6E:F0:7B:02:83:7A
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ipbyc2xzkRt2xZHx_wJu8HsCg3o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.112.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         61:7c:20:fe:3d:36:0e:5b:f9:31:fa:65:b2:d7:a6:11:5a:67:
         62:34:0a:73:ee:05:7c:03:56:9e:f2:bf:f4:d9:e6:dd:ff:46:
         55:c6:c0:5a:78:ac:ee:f0:f2:54:ce:33:3e:c1:9d:6f:44:03:
         38:26:a3:25:45:aa:7e:2f:52:18:be:cd:fb:cb:a6:d2:81:c1:
         c9:5e:33:66:42:52:63:96:ac:33:70:12:d0:16:c2:86:05:85:
         98:f7:a5:8a:6d:90:10:8e:7d:aa:28:9c:93:fa:52:a1:59:19:
         cb:aa:88:61:17:61:2b:d1:82:16:20:55:76:79:36:c1:51:cd:
         39:7f:60:cc:d5:c2:68:7b:28:dd:48:00:c3:c0:59:52:2a:d1:
         ec:6d:8d:1d:67:5e:76:04:e4:33:a3:b6:68:a5:20:f3:22:71:
         7c:07:cc:0f:db:6b:56:b6:d2:9f:2a:de:b1:fc:6b:5f:4e:bc:
         e5:cf:5b:e0:e0:ae:3c:0d:8c:1b:de:f0:40:22:59:c5:94:d0:
         a1:d1:0a:2b:b9:46:9e:e2:03:cd:c0:1a:df:2e:36:01:24:b6:
         64:90:85:64:e1:c7:8c:72:41:e6:fc:83:58:d0:c4:cd:e5:47:
         5e:b0:61:ab:f2:19:66:b1:7c:51:62:a2:4f:a8:e5:33:b6:d1:
         7b:93:b5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org