Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/997/Fbxvf9h8Uffe3_zS3HQAtIDwUpc.roa
File:                     Fbxvf9h8Uffe3_zS3HQAtIDwUpc.roa (raw, json)
Hash identifier:          WFKuZkyoI6Vqpuet06cWxMh84drHh6HuksyNJQYuVh4=
Subject key identifier:   15:BC:6F:7F:D8:7C:51:F7:DE:DF:FC:D2:DC:74:00:B4:80:F0:52:97
Certificate issuer:       /CN=B7187C4D4BDDD435728B412888E0655334208E0B
Certificate serial:       38
Authority key identifier: B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/Fbxvf9h8Uffe3_zS3HQAtIDwUpc.roa
Signing time:             Fri 01 Sep 2023 01:29:51 +0000
ROA not before:           Fri 01 Sep 2023 01:29:51 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     17707
IP address blocks:        202.5.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7187C4D4BDDD435728B412888E0655334208E0B
        Validity
            Not Before: Sep  1 01:29:51 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=15BC6F7FD87C51F7DEDFFCD2DC7400B480F05297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:17:37:82:2d:a3:8d:7c:d8:e4:2e:b2:85:90:
                    c5:d0:e6:42:14:f9:e1:6b:2e:8b:55:93:39:08:5d:
                    29:7f:c6:43:15:b2:a6:72:a7:e6:16:d6:57:21:f3:
                    47:af:81:53:c0:2c:b2:a4:12:00:2d:51:a1:a5:c3:
                    7c:e6:24:20:12:14:ed:2f:98:dc:a1:b7:40:4f:49:
                    91:e6:b4:5e:a7:95:ce:d1:79:60:c4:57:3d:90:eb:
                    75:28:40:ca:f8:b5:d2:d1:08:fe:4f:57:36:d5:ae:
                    c9:c9:44:1e:a6:56:48:27:18:05:c6:93:03:64:e5:
                    2b:35:cf:e8:8b:19:d4:b3:5c:7d:5f:70:12:34:39:
                    fc:40:47:75:aa:44:72:75:00:45:3a:9f:85:4e:e4:
                    7e:63:07:da:6e:38:c4:78:51:69:e5:63:bf:b4:01:
                    f0:13:58:2b:90:58:ad:9d:b6:bd:0c:79:78:af:7c:
                    de:49:0a:3f:94:7d:17:52:25:db:00:c9:9b:99:9e:
                    61:6d:cb:95:48:5c:cb:64:83:56:66:be:94:77:c1:
                    47:b7:e4:34:a0:4c:d8:58:06:e3:03:b6:f8:f8:6a:
                    3d:e0:06:f6:e0:ec:ef:b3:a3:88:dd:74:d4:df:70:
                    83:fd:20:63:a2:6e:ae:1c:6e:d9:04:79:30:e9:a3:
                    ab:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BC:6F:7F:D8:7C:51:F7:DE:DF:FC:D2:DC:74:00:B4:80:F0:52:97
            X509v3 Authority Key Identifier:
                keyid:B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/Fbxvf9h8Uffe3_zS3HQAtIDwUpc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:e5:b8:01:f1:0d:45:cb:7f:a0:4a:89:2a:94:88:5f:c8:eb:
         bf:dc:7b:b3:35:84:36:d3:ab:fb:30:6e:a9:ec:73:8b:c4:97:
         97:5e:7f:db:7d:90:5d:ed:a8:26:a0:a1:ce:bf:19:c7:e5:33:
         3a:9b:9a:ff:35:8e:66:d8:5c:e8:5f:dc:66:7a:64:f3:44:6d:
         d0:dd:92:3c:da:cf:32:0e:ee:f8:f4:19:c4:44:b6:89:a1:47:
         2a:20:bd:d6:fe:11:ad:62:ee:0a:47:49:88:f7:bd:98:cc:6d:
         9a:04:6b:3c:41:2b:33:bd:ba:90:43:10:79:00:0e:0b:41:94:
         15:27:9e:98:fc:20:58:7f:2a:52:53:61:94:6c:0f:38:61:e2:
         6a:92:a5:cd:03:c0:e6:bd:b1:38:d4:31:cb:52:f1:93:f9:82:
         c1:d0:44:cb:a0:e7:b7:92:ad:0f:57:35:ba:50:24:b4:8b:9e:
         b6:af:09:aa:ce:c2:cb:8d:34:eb:38:44:f0:63:3e:6c:17:e3:
         c7:c2:20:a0:2f:85:00:64:c7:98:95:fa:9f:07:4f:37:84:9d:
         93:85:43:9b:e1:fb:dd:3a:ca:5e:e9:4d:d6:2b:32:c1:f3:b8:
         ac:89:ee:24:41:9b:c8:6e:9e:a3:7c:99:71:bd:9a:f3:23:31:
         e0:c6:f4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:45 2024 by rpki-client on console-ams.rpki-client.org