Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/peP0JF74ppBE2-lTeOH3ST7e7mE.roa
File:                     peP0JF74ppBE2-lTeOH3ST7e7mE.roa (raw, json)
Hash identifier:          NY5mqe+ufzwFDtrHvHJPIJek/fi1vnkjXNe54wb7+fY=
Subject key identifier:   A5:E3:F4:24:5E:F8:A6:90:44:DB:E9:53:78:E1:F7:49:3E:DE:EE:61
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01C6
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/peP0JF74ppBE2-lTeOH3ST7e7mE.roa
Signing time:             Sun 01 Oct 2023 01:38:19 +0000
ROA not before:           Sun 01 Oct 2023 01:38:19 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9617
IP address blocks:        61.192.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:38:19 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=A5E3F4245EF8A69044DBE95378E1F7493EDEEE61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:42:39:f2:6b:19:d8:a0:1d:a6:9d:07:71:
                    c8:a2:bf:27:0d:04:23:58:5e:ed:78:ba:02:99:a7:
                    c0:d2:b6:5a:c2:76:e4:c5:3f:8b:43:79:67:9c:30:
                    38:da:09:d5:2b:f8:1c:4e:27:1c:71:96:54:24:16:
                    15:47:c5:b4:be:c9:92:93:e2:8a:59:17:af:cc:c3:
                    c9:c2:a7:34:77:5b:26:ff:13:28:85:03:4c:19:42:
                    a6:14:d4:ca:9d:a0:5d:6c:64:2e:81:ce:a0:db:b6:
                    c7:8e:67:d9:86:41:0a:05:58:ed:9d:68:70:e4:9f:
                    cb:74:e8:13:61:93:f3:c4:d2:2b:4c:ea:87:70:19:
                    26:a8:05:88:0f:86:e2:5d:39:c5:0b:9e:13:86:9c:
                    0d:32:3a:d5:45:85:db:1c:56:49:bc:68:ab:ee:72:
                    95:1b:c4:6f:0f:d4:3e:41:92:fb:f8:5e:4f:3d:38:
                    99:88:26:c4:8c:05:e5:e8:9f:c3:46:19:80:27:91:
                    be:47:f4:79:72:7c:e0:72:d2:84:51:a4:f8:18:bf:
                    81:2d:b1:4d:10:8c:8a:25:01:34:7b:ee:39:88:5a:
                    8f:f3:79:95:38:e5:11:27:1c:dd:a8:59:76:19:31:
                    f6:a6:99:28:ac:f8:62:0a:f6:ef:cc:21:b4:23:31:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E3:F4:24:5E:F8:A6:90:44:DB:E9:53:78:E1:F7:49:3E:DE:EE:61
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/peP0JF74ppBE2-lTeOH3ST7e7mE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.192.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         62:b1:ea:45:48:e3:c3:10:de:fc:ba:ab:ec:2f:33:9f:e0:f7:
         12:97:56:44:92:f8:be:a8:2b:3e:71:35:a3:d2:8d:17:94:ec:
         69:d3:ca:0d:db:29:73:82:e9:c2:fd:d5:5c:fe:3e:e9:54:19:
         6a:71:bc:25:70:48:8c:4f:53:56:b0:3c:88:cf:59:47:ee:3d:
         5b:21:63:da:2a:75:fb:eb:6b:18:d7:aa:27:c4:6f:fe:f2:d6:
         5c:39:ec:96:79:36:21:6d:16:f8:94:b7:a8:41:12:9b:88:02:
         77:5e:6c:ae:57:43:4b:22:6f:bc:dc:93:96:c9:87:89:75:de:
         01:1c:6b:e5:e1:f6:d7:8c:2d:91:73:14:60:a9:d7:f2:2e:4a:
         36:ba:24:c3:a1:a6:6b:0c:d0:cc:4f:c2:7a:8a:3f:43:17:ab:
         42:a9:f6:17:38:36:60:db:ec:49:d0:d5:5e:19:da:e7:c0:9c:
         61:c7:df:98:c5:8c:fd:15:b7:8a:89:6a:64:c5:47:14:7c:0d:
         8d:40:db:ba:72:48:30:1c:0a:c2:31:e8:7e:a8:df:3c:8c:ef:
         80:d4:b9:b7:ce:db:1d:af:64:53:26:5a:9e:36:6e:93:36:ca:
         d5:38:37:69:63:da:3a:e7:ec:be:37:00:bc:e7:0b:85:b1:d8:
         bb:b5:cf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org