Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/s175ROIE3Pjca8BeUTgP-MLVlis.roa
File:                     s175ROIE3Pjca8BeUTgP-MLVlis.roa (raw, json)
Hash identifier:          e+Co7HBz8BS3te48s/JcwHJF2VZ47BvrNxiINhwIbf8=
Subject key identifier:   B3:5E:F9:44:E2:04:DC:F8:DC:6B:C0:5E:51:38:0F:F8:C2:D5:96:2B
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0157
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/s175ROIE3Pjca8BeUTgP-MLVlis.roa
Signing time:             Sun 01 Oct 2023 01:33:01 +0000
ROA not before:           Sun 01 Oct 2023 01:33:01 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        117.53.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:33:01 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=B35EF944E204DCF8DC6BC05E51380FF8C2D5962B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:89:d7:bf:c4:39:b8:3d:6e:41:30:3b:8e:
                    8a:24:a7:96:c6:9c:34:49:91:af:76:77:e5:ea:36:
                    0d:a9:bd:a4:c7:0b:3d:3b:12:d9:fd:81:6c:ca:bc:
                    85:96:a6:a9:5e:17:ce:62:f1:a0:db:4d:87:d4:72:
                    1a:bc:7c:87:02:77:36:f8:b7:43:06:0f:36:77:d6:
                    bf:58:d9:f7:95:69:26:64:2a:fd:5c:81:21:3e:b0:
                    28:1b:03:de:2f:6f:36:99:54:82:37:77:ce:0b:fd:
                    f0:1a:5e:3e:a6:b5:3c:b6:43:5b:66:62:e2:e4:48:
                    2a:10:d5:18:81:9b:3e:fb:9f:1b:7a:44:4b:bd:b6:
                    1f:3a:76:d0:03:f5:25:d1:43:60:19:7b:55:a5:42:
                    60:b1:55:c4:c9:02:b8:0c:e4:75:ad:40:16:34:04:
                    e1:e5:30:63:76:17:d8:d3:e3:c3:0d:71:22:8d:1c:
                    8e:87:7a:65:f0:51:ff:90:2a:1e:73:e1:79:e8:bc:
                    1c:3a:a8:c2:da:0d:4c:cb:06:04:dd:5d:64:14:85:
                    3a:e2:b1:c6:16:78:74:2d:7f:e3:7e:28:c1:a7:6d:
                    c9:e0:3b:14:56:b2:4e:df:7f:47:c1:f9:96:df:9d:
                    26:5b:e5:1a:72:57:ee:23:aa:27:b4:de:65:c0:e3:
                    3a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5E:F9:44:E2:04:DC:F8:DC:6B:C0:5E:51:38:0F:F8:C2:D5:96:2B
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/s175ROIE3Pjca8BeUTgP-MLVlis.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.53.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         49:6f:e9:2f:dd:ab:14:ca:e1:24:fa:6a:dd:f6:b3:47:5d:90:
         34:28:3a:4a:c5:37:1b:fa:81:bc:d6:32:ad:53:52:82:7c:dd:
         20:d2:ce:ea:93:17:8e:8a:5b:e3:dd:d0:d3:e6:bd:19:bd:e4:
         5b:33:f1:63:ed:d1:69:61:5c:bf:29:1d:02:53:c2:aa:9b:21:
         d6:8b:74:93:22:62:41:75:4a:30:ae:fe:37:3e:88:be:8e:f8:
         e6:7a:dd:24:50:96:38:b1:62:34:e7:41:c0:31:ef:1f:cb:3d:
         a6:8e:e4:16:71:37:c8:a7:7d:60:58:bd:66:26:23:ca:57:c1:
         86:e0:1b:72:ca:89:7e:d0:32:2d:83:25:d6:43:80:06:ac:4f:
         43:72:0a:c2:19:1a:c1:48:c2:2f:76:e4:c2:c3:e0:00:88:3c:
         18:5b:74:94:e4:d9:33:77:71:c3:ba:a5:ea:7c:92:9c:d3:ad:
         de:41:cb:4e:1c:14:c7:63:a9:f5:9d:59:1c:c6:53:1a:5c:5e:
         90:ff:e9:9f:e7:bb:34:c4:3b:3a:a4:e6:82:c1:9c:b2:00:2e:
         de:a2:3a:ad:cb:8f:c7:e3:2d:d5:ff:77:4a:69:f5:ea:a1:fb:
         d4:72:7a:da:5f:04:ce:15:e9:2e:0d:86:37:91:18:91:35:20:
         07:7c:1c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org