Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/pUA14l1HbTZjK7kBYz6uLl5xueI.roa
File:                     pUA14l1HbTZjK7kBYz6uLl5xueI.roa (raw, json)
Hash identifier:          E4GmV7TewtgyfN6cyOux2HQAZ/XC4MAumtAvc1RF8Nw=
Subject key identifier:   A5:40:35:E2:5D:47:6D:36:63:2B:B9:01:63:3E:AE:2E:5E:71:B9:E2
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       018E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/pUA14l1HbTZjK7kBYz6uLl5xueI.roa
Signing time:             Sun 01 Oct 2023 01:34:34 +0000
ROA not before:           Sun 01 Oct 2023 01:34:34 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4721
IP address blocks:        123.98.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:34 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=A54035E25D476D36632BB901633EAE2E5E71B9E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9f:68:de:69:82:67:f2:69:be:44:af:4a:1c:
                    cc:a2:a5:85:35:65:33:8b:03:1f:fc:f0:1a:db:69:
                    ea:c8:1b:50:76:9b:16:ae:5c:a2:01:ce:5f:1f:79:
                    62:5f:5a:11:b0:a7:58:d9:5c:a4:ac:91:92:89:6d:
                    e8:43:6b:a8:6f:cb:cb:8c:c4:05:c4:88:a4:7f:f2:
                    f8:59:a6:73:a0:98:52:7b:b6:f0:32:86:72:ff:cd:
                    2d:da:6c:94:6b:fd:d2:44:88:09:b0:5a:de:aa:bd:
                    3d:6e:93:d0:e7:d7:30:66:73:c9:9d:74:d4:39:5d:
                    25:3f:7c:b4:b9:8f:bd:27:c5:3d:be:57:15:b6:b7:
                    2b:96:11:65:6a:6f:d9:fc:8b:29:3f:16:68:3d:c5:
                    5b:8f:9b:26:44:81:b1:93:6b:ad:d6:0c:90:84:75:
                    1c:b6:15:3c:97:cc:3e:ca:b4:3f:cd:02:55:0f:22:
                    0d:a3:a9:d1:c5:75:62:04:2c:c1:f5:71:d2:2e:28:
                    95:7e:6b:0f:b1:57:e9:26:73:dd:a3:e2:44:4e:d9:
                    a4:c7:27:83:c6:0a:39:9c:c7:bc:d1:40:60:c0:84:
                    7f:c1:6b:94:55:f0:68:5c:e2:c3:29:76:02:bf:8b:
                    f9:d9:6a:51:19:9e:6c:c1:68:c2:b7:4b:7b:ee:49:
                    88:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:40:35:E2:5D:47:6D:36:63:2B:B9:01:63:3E:AE:2E:5E:71:B9:E2
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/pUA14l1HbTZjK7kBYz6uLl5xueI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.98.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ac:89:b1:a7:a1:4a:93:4c:3a:86:7d:0d:ba:4e:e5:99:76:49:
         5a:96:21:2b:32:14:c3:78:f4:74:61:b6:cf:e2:d7:0b:14:08:
         d1:7e:fb:a6:45:80:a9:71:ad:30:cb:94:bd:69:6b:76:90:7c:
         91:5e:29:9b:42:f7:e6:fc:fa:09:07:bb:c7:6e:2b:52:bb:6d:
         98:69:b1:4b:3b:ae:b3:ff:be:93:ac:bf:f8:98:74:45:0e:b2:
         52:72:53:f9:ea:6c:3b:17:da:e7:a5:5b:1a:30:62:0c:83:b7:
         03:b8:69:42:9a:38:02:17:08:07:32:59:c3:55:70:42:1f:7e:
         ab:e5:b0:ce:1e:c3:22:c9:08:f7:a9:e4:d4:a9:91:f8:c5:e5:
         c4:04:87:c6:97:d8:45:94:54:71:b5:a3:a6:62:9e:d2:34:3f:
         2c:65:dd:c2:6b:92:08:8d:d1:b4:14:53:83:96:ad:8b:9e:63:
         1b:68:8b:cb:56:a3:5e:58:18:06:d6:31:66:cc:02:1d:11:77:
         43:af:f3:77:de:76:a5:c5:d3:57:f1:ab:1c:9a:82:c7:99:3a:
         84:c4:a4:84:51:d6:d3:f2:b4:00:72:54:e5:5d:93:58:67:2c:
         d3:c2:20:cd:fc:23:ca:a8:fc:b7:78:e7:06:87:ae:2f:97:3c:
         70:35:7f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org