Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/MlAtWDFTvl5ochwOgzVse5ym5uM.roa
File:                     MlAtWDFTvl5ochwOgzVse5ym5uM.roa (raw, json)
Hash identifier:          UIrxnGoW3qDf4lrZ205mvtOw1K7FjSKVVU7C9fbKp50=
Subject key identifier:   32:50:2D:58:31:53:BE:5E:68:72:1C:0E:83:35:6C:7B:9C:A6:E6:E3
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01E5
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/MlAtWDFTvl5ochwOgzVse5ym5uM.roa
Signing time:             Fri 31 May 2024 01:34:47 +0000
ROA not before:           Fri 31 May 2024 01:34:47 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     4713
IP address blocks:        220.96.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May 31 01:34:47 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=32502D583153BE5E68721C0E83356C7B9CA6E6E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1e:11:2b:0a:b7:02:b1:77:6d:a3:85:a6:fd:
                    7b:fd:63:88:a9:28:90:8f:b4:3a:3c:8c:8e:27:fc:
                    c8:f3:58:6c:4b:55:f6:40:35:12:5c:b0:dc:79:c5:
                    6f:30:ec:71:b1:6d:5d:a3:8f:6c:18:3a:11:1d:e9:
                    fa:a0:21:17:1c:9e:8c:d7:34:39:5a:8a:a4:c6:73:
                    fe:86:24:89:56:7e:91:a7:f8:cc:c9:3f:bd:51:23:
                    8d:9e:ba:6f:69:e4:0d:9b:55:84:0e:71:76:c6:cd:
                    d9:33:bf:7a:85:97:2c:a0:8a:ae:3a:37:71:40:6f:
                    a4:40:21:f5:6d:7c:80:38:b0:a5:fa:fd:a7:94:32:
                    90:91:9f:6d:c7:38:df:52:79:a0:7a:a7:dc:11:33:
                    78:77:e9:8e:ab:74:fb:d0:94:ce:de:43:66:75:2c:
                    98:cd:a9:59:91:82:46:12:67:b9:e5:28:e2:a2:b1:
                    65:50:ca:7f:ea:fb:07:d2:26:5a:a5:a5:8d:a4:1e:
                    b6:fb:92:7d:cb:b0:aa:c6:30:15:60:89:e3:fa:3c:
                    19:a2:09:43:d0:3b:93:50:d2:cd:ee:ad:b8:57:9b:
                    fd:41:f1:d5:84:47:68:8b:bc:d0:e0:9c:03:21:30:
                    73:04:7a:84:2b:36:1c:5e:4d:c5:bc:3f:0a:98:36:
                    d4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:50:2D:58:31:53:BE:5E:68:72:1C:0E:83:35:6C:7B:9C:A6:E6:E3
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/MlAtWDFTvl5ochwOgzVse5ym5uM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.96.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         4e:50:ea:ff:9d:f0:b2:cf:27:d6:eb:0f:29:dd:44:c5:39:2f:
         91:b3:9c:b2:bf:c2:27:d1:95:2a:41:a9:07:bd:1d:62:3f:08:
         1f:38:be:ed:4e:d4:60:f1:91:06:ee:60:04:0f:44:9f:ed:97:
         4a:be:86:21:2f:ae:3e:70:bc:d4:8c:a0:e1:c4:fd:ed:bd:da:
         fe:7b:25:1c:14:1f:62:05:fe:59:7c:a6:3f:fe:db:27:02:6b:
         aa:16:57:d5:fb:94:f7:53:3b:b4:9d:e9:03:a9:7c:d2:09:8b:
         b8:46:c4:bc:af:17:42:d6:1c:29:d5:e2:31:4c:e9:ed:ce:e5:
         2e:fb:ae:be:41:95:7b:50:8b:fc:ad:f5:dd:f6:1c:d9:84:7c:
         de:c3:95:e4:46:48:3b:64:5e:8f:70:a9:fc:0c:b4:30:8e:67:
         76:2c:1a:48:6c:97:d1:bf:c8:4f:c0:3d:71:7b:e5:f1:ed:f2:
         b2:8a:42:5d:2e:72:f6:cf:2c:e0:0a:c9:16:14:71:2e:d4:a8:
         cc:de:64:e0:95:b7:76:2c:30:13:be:21:c5:93:84:02:83:d2:
         6a:d1:c3:83:0b:cf:41:60:28:58:65:bf:87:e6:ba:dc:66:58:
         30:15:0c:1a:7f:36:74:e1:4d:b5:14:8f:10:e6:ab:cb:e9:ba:
         2b:9c:72:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:33 2024 by rpki-client on console-fra.rpki-client.org