Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/jvlJwbr-8OjQYPYzPwNNOpEBaIs.roa
File:                     jvlJwbr-8OjQYPYzPwNNOpEBaIs.roa (raw, json)
Hash identifier:          HZrfgBhYDbDs7PdibDV6k6TdkSJcURmTeVP7lYDD0xQ=
Subject key identifier:   8E:F9:49:C1:BA:FE:F0:E8:D0:60:F6:33:3F:03:4D:3A:91:01:68:8B
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01C5
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/jvlJwbr-8OjQYPYzPwNNOpEBaIs.roa
Signing time:             Sun 01 Oct 2023 01:38:19 +0000
ROA not before:           Sun 01 Oct 2023 01:38:19 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        61.125.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:38:19 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=8EF949C1BAFEF0E8D060F6333F034D3A9101688B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bd:c5:7a:ac:91:ca:cf:de:f8:94:e5:fe:c4:
                    92:c8:b8:95:d7:ed:3e:49:8f:ac:1b:21:d7:d8:eb:
                    e7:54:10:8e:c0:27:e1:0c:12:75:a6:1d:33:56:0e:
                    31:2d:23:22:1d:90:9d:b0:cf:84:66:80:30:62:49:
                    66:d4:ac:5a:5c:32:cd:1a:9c:3d:0d:44:fb:de:81:
                    67:a5:4c:fa:b2:16:ab:36:d9:82:4c:b3:18:d7:21:
                    5b:2a:9c:16:21:d6:87:cc:73:0a:1c:58:79:da:3a:
                    99:4c:95:37:72:59:7d:d4:29:19:27:0c:48:c5:f2:
                    72:8b:26:b2:68:d9:e6:c1:b1:3b:84:d0:03:dd:fc:
                    f3:7f:a0:49:be:30:41:29:a3:81:52:73:c3:6d:22:
                    b7:25:16:ab:ac:c9:66:82:20:e3:aa:a4:d5:56:02:
                    5e:0a:3e:ee:67:9d:4f:96:22:5a:1c:7e:c2:46:56:
                    6a:49:7a:97:11:c5:f1:4d:02:0a:17:19:91:1e:b4:
                    3e:4d:66:ad:7a:a5:40:c7:1d:e4:f4:6f:69:09:4e:
                    65:18:03:82:d2:af:0d:36:75:e9:ad:b0:59:20:1b:
                    34:7e:47:3b:71:b2:6e:93:ff:31:bf:52:1f:1f:c7:
                    da:09:0a:cb:21:bf:b6:25:56:5c:8c:3a:96:b7:79:
                    47:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F9:49:C1:BA:FE:F0:E8:D0:60:F6:33:3F:03:4D:3A:91:01:68:8B
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/jvlJwbr-8OjQYPYzPwNNOpEBaIs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.125.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         09:03:90:2d:8f:ef:96:47:e5:6c:61:6e:9f:38:2e:34:d9:20:
         29:d9:aa:aa:80:24:de:8d:b1:7a:3b:6f:53:3b:6b:b2:41:7f:
         58:c6:45:d3:24:74:86:85:0b:8f:08:b8:e3:31:6c:10:ba:32:
         db:ee:11:9b:bc:b9:5b:75:84:b5:48:c7:17:d8:00:82:52:ae:
         15:cf:57:96:50:65:4e:e0:f8:3a:49:07:25:c3:bc:71:d7:29:
         af:3c:45:a7:cb:ab:e9:0c:8b:b1:0a:22:45:6c:e2:32:83:a7:
         e4:51:df:b6:34:70:48:d5:8e:e6:82:38:2b:d1:24:df:5a:76:
         d5:f1:49:4c:4e:20:d9:c5:af:d5:84:c4:f2:2b:6a:25:36:ae:
         02:29:9b:a6:20:70:a2:9b:19:0a:af:23:e0:b0:13:00:ca:f2:
         5c:cb:81:58:f2:20:d9:94:e3:e4:48:24:4c:e6:65:11:a6:d4:
         6e:f6:7e:3b:ba:a8:44:b7:7a:0b:72:87:8c:15:31:6b:aa:77:
         f1:c4:e8:51:83:55:79:47:02:db:4f:bc:61:62:9e:6a:7f:14:
         89:50:50:29:77:2a:4b:db:74:c4:09:42:f6:9c:92:63:b2:ac:
         79:92:02:d9:e0:a3:02:0c:1a:e1:db:1b:d3:99:d4:2f:3d:e2:
         3d:69:ba:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org