Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/zwGmMq20_-8BuPMGjhCZagowrPI.roa
File:                     zwGmMq20_-8BuPMGjhCZagowrPI.roa (raw, json)
Hash identifier:          lp5YnQRBp5HdPxqqYZBvxH+J0VAGhGHTJakLpB+NEJA=
Subject key identifier:   CF:01:A6:32:AD:B4:FF:EF:01:B8:F3:06:8E:10:99:6A:0A:30:AC:F2
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0140
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zwGmMq20_-8BuPMGjhCZagowrPI.roa
Signing time:             Sun 01 Oct 2023 01:30:18 +0000
ROA not before:           Sun 01 Oct 2023 01:30:18 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9378
IP address blocks:        180.131.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:30:18 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=CF01A632ADB4FFEF01B8F3068E10996A0A30ACF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b2:56:f4:b4:27:01:d4:4a:55:c1:01:db:57:
                    96:d7:54:4f:87:f7:8b:75:f9:0e:5f:75:c2:1f:d8:
                    b2:7b:24:89:eb:f9:e7:78:ee:fd:91:ab:87:14:25:
                    eb:96:e3:1e:8e:4e:fc:47:3b:5c:b9:00:58:c5:46:
                    b9:23:da:bc:02:ef:97:93:ca:65:09:cd:7e:bb:85:
                    1f:8e:f5:5f:c5:68:2e:2e:2f:ad:80:5c:20:d7:aa:
                    35:8b:09:df:05:c5:b6:ec:be:88:47:66:30:80:e6:
                    f8:ce:0c:fa:19:df:91:2f:c8:8e:fc:ed:81:dc:13:
                    40:d3:fb:b1:ec:e2:03:50:a2:a5:8d:c9:61:35:12:
                    76:13:0e:f3:8c:e2:b3:3b:18:31:d8:7d:3b:08:09:
                    9d:3e:8f:4b:71:cb:73:99:b5:e4:4c:60:d4:02:ee:
                    9c:be:ec:22:15:ee:70:bd:45:c7:4a:ba:75:7d:a6:
                    0e:84:d7:1e:bc:e0:20:e4:7a:a3:09:c6:7e:a3:bd:
                    5d:55:47:64:aa:6e:be:c2:2c:2d:1c:e9:e0:86:7e:
                    9d:58:76:f8:de:54:db:cf:ba:e4:fe:62:51:a2:09:
                    60:fd:b3:dd:22:9b:67:70:0c:a5:f8:09:24:cf:e4:
                    a4:65:b7:45:db:1c:02:1c:b0:e4:39:ba:7d:2d:63:
                    63:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:01:A6:32:AD:B4:FF:EF:01:B8:F3:06:8E:10:99:6A:0A:30:AC:F2
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zwGmMq20_-8BuPMGjhCZagowrPI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:9c:80:8a:80:c1:24:8a:c8:de:ab:56:e6:37:49:5c:74:64:
         92:bc:dc:6c:ef:b8:b5:d5:ba:af:d8:77:5e:00:2d:9d:a6:5d:
         f9:fb:f4:79:c6:c7:68:9e:48:59:73:2a:cc:3c:d0:df:b6:88:
         9b:1e:57:be:ad:da:ed:15:99:85:40:3e:f2:54:af:63:bd:2b:
         3e:6b:26:6f:f5:68:ae:13:2d:f9:7d:06:b0:f1:f9:ad:d7:5b:
         93:7d:ba:ac:35:71:84:04:00:ec:c7:fa:ca:da:8c:51:55:24:
         b8:e0:be:fa:b8:77:41:a7:4d:22:93:7c:de:ec:cf:92:c9:b6:
         ed:d5:11:5f:f2:c3:81:c1:9d:ef:76:00:66:ae:7f:bb:43:f5:
         b3:43:2c:b2:2c:39:42:a9:23:f5:72:b7:11:d3:63:30:2b:d3:
         68:fd:b6:67:ca:43:1b:f3:af:da:78:fa:60:40:55:d4:4e:79:
         91:e4:70:0f:3e:00:c1:3e:5b:7a:3e:05:f7:98:94:13:e4:15:
         fe:f9:42:ac:46:6d:03:41:ce:92:67:2b:cd:0e:cd:e0:6d:41:
         45:7a:d6:98:d0:17:9e:bc:1a:87:ca:fe:f8:41:a4:9a:b0:14:
         0f:0f:e2:36:ea:31:f0:9e:b1:33:fa:8c:19:54:37:7a:a8:d8:
         fd:ee:f3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org