Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/rOsuchf_YKnb6Bb9-jPaM6kk0HE.roa
File:                     rOsuchf_YKnb6Bb9-jPaM6kk0HE.roa (raw, json)
Hash identifier:          go8QP1stSghEPc29bdY3+hWc/KzZxpF+K6uTeHsZEwQ=
Subject key identifier:   AC:EB:2E:72:17:FF:60:A9:DB:E8:16:FD:FA:33:DA:33:A9:24:D0:71
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01CB
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/rOsuchf_YKnb6Bb9-jPaM6kk0HE.roa
Signing time:             Sun 01 Oct 2023 01:38:22 +0000
ROA not before:           Sun 01 Oct 2023 01:38:22 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        119.26.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:38:22 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=ACEB2E7217FF60A9DBE816FDFA33DA33A924D071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:51:b8:e8:45:64:f6:19:1d:c0:d5:0d:d1:
                    b7:2d:c0:41:91:33:08:e7:9f:ea:51:a6:b2:03:ff:
                    44:08:7c:60:dc:88:94:ee:ed:f0:bd:c1:0f:b3:5c:
                    ea:bf:47:ad:5b:f6:52:c8:40:8d:94:5c:e7:50:11:
                    15:c3:69:53:29:34:42:32:73:8d:95:d5:77:4c:a3:
                    41:4f:bc:0b:73:40:e4:59:c3:d0:58:72:22:57:2e:
                    28:7e:02:ea:d6:10:4c:75:ea:e3:14:f8:77:39:e5:
                    e0:17:1c:d0:82:eb:a9:7b:43:42:3f:e9:c0:07:b5:
                    d4:72:16:76:e3:3c:2d:4d:97:71:38:57:3b:90:08:
                    3a:ff:e4:f6:94:78:88:8e:6c:90:81:62:66:1f:52:
                    2b:ba:97:51:95:54:bf:75:c9:e5:c5:5b:2d:07:21:
                    d4:14:44:4b:c4:f0:d6:b4:5e:37:f5:5a:61:47:3a:
                    8e:73:e7:34:8e:40:7f:30:b9:dd:c8:77:15:4c:44:
                    f4:3c:1a:f9:1c:fb:97:42:da:0f:bf:f6:38:ec:06:
                    03:a7:0b:ea:19:2c:94:1e:ce:9c:10:91:38:30:16:
                    6f:3c:c0:7f:f7:fd:d3:0b:35:21:95:3f:90:07:0c:
                    37:70:4e:86:78:3d:a5:86:b8:e9:f7:96:79:32:13:
                    d5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EB:2E:72:17:FF:60:A9:DB:E8:16:FD:FA:33:DA:33:A9:24:D0:71
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/rOsuchf_YKnb6Bb9-jPaM6kk0HE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.26.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         e7:ab:7e:f1:fa:3b:45:ce:38:50:65:b5:aa:ee:be:88:3a:0b:
         96:ff:d0:cf:89:99:17:20:d2:c0:83:04:99:a6:38:72:f8:63:
         6b:22:eb:6b:69:27:24:e3:d1:1b:f2:a4:10:31:cd:b4:cc:a5:
         f8:21:93:2a:84:9b:c3:fd:82:1a:d1:c1:57:07:e4:b0:8d:08:
         d4:f3:16:8a:23:fb:ce:50:5c:42:b1:88:b5:a0:c8:cd:85:96:
         43:75:85:e2:60:b4:b7:2a:df:e4:ed:5f:c2:b8:0f:36:e8:87:
         d4:cc:82:be:e1:be:ff:df:0d:12:b3:f2:51:e2:7e:9f:b4:51:
         cf:dd:83:b4:14:25:31:b6:a6:07:3b:f6:87:55:48:1d:27:e7:
         90:8a:9d:93:14:f6:47:8f:94:7d:31:02:26:dd:6e:a0:70:52:
         dd:c8:1b:c1:fe:dd:69:95:00:e8:89:f1:09:5e:42:57:06:38:
         27:3d:e4:f6:88:e4:88:38:3e:89:88:b8:23:c9:31:67:1c:6c:
         69:75:59:f9:2e:1c:2b:1f:72:41:09:6d:f3:d2:a4:0e:47:03:
         8e:7f:70:58:36:45:b1:25:0f:64:94:7a:7e:7a:8a:6f:e1:67:
         76:6c:05:0f:86:db:5d:3c:41:4d:54:7e:98:ff:38:e5:c7:fb:
         16:df:b4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org