Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/vIGD3b47eY565m-fytAAUPISdts.roa
File:                     vIGD3b47eY565m-fytAAUPISdts.roa (raw, json)
Hash identifier:          OfxYvHIvy0nqI3GWLWcgWn0SG5eBt0QdVCnXnn9CCSM=
Subject key identifier:   BC:81:83:DD:BE:3B:79:8E:7A:E6:6F:9F:CA:D0:00:50:F2:12:76:DB
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01C2
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vIGD3b47eY565m-fytAAUPISdts.roa
Signing time:             Sun 01 Oct 2023 01:38:17 +0000
ROA not before:           Sun 01 Oct 2023 01:38:17 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9617
IP address blocks:        61.46.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:38:17 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=BC8183DDBE3B798E7AE66F9FCAD00050F21276DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cf:75:99:05:d9:d8:96:1f:ff:4c:61:42:a4:
                    9b:07:17:c0:2f:00:fb:d1:65:9b:7d:27:4d:4d:37:
                    de:96:f3:f2:e9:b6:3f:26:bf:3e:c7:d1:4d:1e:20:
                    57:17:83:91:b2:01:be:b6:25:47:44:f7:0d:b3:a6:
                    0e:98:4c:49:b0:37:1a:cf:5e:d1:7c:10:8f:e5:ff:
                    b5:06:f7:b8:37:5a:ae:54:ec:34:01:91:0f:be:04:
                    32:49:b9:3d:62:17:8e:15:9c:61:5a:81:51:95:b0:
                    96:8c:5f:70:cf:b7:1d:0b:e4:a1:68:27:c6:0c:55:
                    2e:af:5d:37:b2:bf:8e:1d:fe:4f:c9:89:33:0e:38:
                    1e:cf:d5:a1:62:79:94:4e:80:d5:94:0b:a5:0e:b2:
                    8a:79:92:95:d0:bf:39:bc:fb:8e:55:cf:3b:a2:c8:
                    f0:7a:56:63:45:c9:7f:f3:4d:2a:28:79:9f:5f:04:
                    1b:c0:d3:67:7e:5b:ab:e7:1d:c5:a4:7d:55:33:2e:
                    87:54:d0:40:b8:f2:3c:f3:e4:60:1d:4e:fe:c6:93:
                    de:ef:e2:02:95:ca:44:71:90:ac:19:d8:64:ac:23:
                    91:68:03:98:78:70:be:2a:9c:f4:84:a7:4d:88:61:
                    a1:36:cb:8a:fe:b0:e8:c5:f3:3f:6b:95:81:5c:f2:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:81:83:DD:BE:3B:79:8E:7A:E6:6F:9F:CA:D0:00:50:F2:12:76:DB
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vIGD3b47eY565m-fytAAUPISdts.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         56:ce:77:2b:3d:9a:67:db:d9:46:c9:c5:43:b9:c9:a7:e4:93:
         33:e1:d2:ed:7a:26:48:c4:1e:12:04:d2:95:8f:d7:fa:1f:59:
         b3:9d:fb:7a:ef:a9:6c:f5:ae:52:b8:fb:0b:f8:03:be:68:28:
         45:b4:db:08:8a:38:6a:68:c6:87:b0:6a:d2:47:10:d7:89:2c:
         d4:8c:db:92:35:a2:d6:89:7e:f1:7d:8b:52:82:ad:d4:1d:36:
         d9:e8:9d:0b:9a:6d:31:55:1e:37:04:86:2f:bb:94:dd:95:eb:
         b3:86:5b:f7:6c:eb:07:e3:1d:8b:42:fd:4a:42:7b:02:b5:1f:
         99:9e:34:61:78:03:db:65:b7:7b:24:17:f1:ab:c5:a3:e8:31:
         19:d8:e4:b4:55:81:7d:51:d6:9c:09:82:a3:c9:c6:c6:47:9a:
         03:33:20:b3:18:39:5d:65:7c:54:08:5c:81:d0:e0:59:5b:5a:
         7e:23:00:1c:ec:dc:d4:9e:bd:8d:54:0c:29:a0:21:07:56:b8:
         59:1c:e7:d2:fe:59:5e:e4:d5:e7:dc:80:5d:02:c5:db:0e:63:
         9f:dc:ba:e9:39:ee:5b:1c:2a:46:0b:85:22:9b:db:76:a9:40:
         45:1a:0c:00:23:f8:80:0d:f7:df:fa:7f:b9:d1:62:63:0f:8b:
         80:82:eb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org