Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/MYiWu-rIbmwk0IMLEphy5WPiZC4.roa
File:                     MYiWu-rIbmwk0IMLEphy5WPiZC4.roa (raw, json)
Hash identifier:          hPqxVUpCCH8zQQLuQ4kW5F6wSqtAIxlQv1Cw+olRVMw=
Subject key identifier:   31:88:96:BB:EA:C8:6E:6C:24:D0:83:0B:12:98:72:E5:63:E2:64:2E
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       05
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/MYiWu-rIbmwk0IMLEphy5WPiZC4.roa
Signing time:             Tue 29 Aug 2023 00:42:35 +0000
ROA not before:           Tue 29 Aug 2023 00:42:35 +0000
ROA not after:            Sun 18 Aug 2024 03:04:44 +0000
asID:                     17682
IP address blocks:        218.40.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Aug 29 00:42:35 2023 GMT
            Not After : Aug 18 03:04:44 2024 GMT
        Subject: CN=318896BBEAC86E6C24D0830B129872E563E2642E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fa:13:85:e0:37:1b:8d:60:23:12:56:1e:7b:
                    e9:f9:24:ef:c4:74:32:fa:7b:63:5e:ac:db:f9:0b:
                    7d:f6:0c:87:94:33:95:f2:b2:7a:8d:c7:16:87:89:
                    3b:7b:de:5e:6a:9c:c1:8f:59:78:94:7b:83:ff:cc:
                    e4:6a:3f:a9:60:44:50:ce:52:3b:17:de:20:36:68:
                    91:be:6a:b5:f2:90:19:83:dc:bb:5b:c4:aa:d5:2e:
                    48:4a:d1:a9:7d:c1:fa:f7:ad:42:fe:87:98:c1:1f:
                    50:66:3d:a7:66:d6:d5:9f:9a:88:44:67:69:6c:db:
                    48:8b:e0:b8:7a:33:1f:dc:d2:d9:de:97:94:2b:df:
                    72:a7:1b:ec:0d:00:98:75:bc:2c:c7:74:96:2f:69:
                    18:ed:e6:2a:c4:45:2f:a0:a8:d7:d4:82:d0:da:52:
                    54:e3:4e:5c:6a:0b:2c:48:38:55:74:26:18:49:d8:
                    ba:bb:d2:fd:5c:1e:f4:2c:23:9e:63:b8:be:1a:61:
                    d5:81:34:a9:63:9d:ff:ed:bb:82:7a:77:5d:5e:1a:
                    b3:21:29:ef:69:de:70:0f:01:6f:b2:a0:d1:33:cb:
                    58:36:c7:75:f8:d0:40:eb:43:a2:a0:08:87:c7:6b:
                    25:f7:6f:c4:95:83:57:56:a9:b0:14:43:45:3d:52:
                    00:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:88:96:BB:EA:C8:6E:6C:24:D0:83:0B:12:98:72:E5:63:E2:64:2E
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/MYiWu-rIbmwk0IMLEphy5WPiZC4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:94:90:45:f8:04:1e:6e:74:16:87:ce:89:1b:29:80:e0:a0:
         c7:43:c0:1b:13:ee:f5:03:8b:60:49:e0:38:59:1e:ea:0d:d2:
         58:2e:e3:b1:cf:51:3b:c7:e7:c7:d1:55:a4:9d:e0:62:90:90:
         25:f8:a3:12:1d:62:6c:f8:15:ab:bf:67:a6:86:8e:77:7f:a2:
         6d:09:b7:08:59:0e:0c:bc:07:5c:3d:a0:a1:c1:9d:e9:0b:0c:
         b6:8b:2a:b1:c4:f6:2d:b2:03:11:06:5f:d6:c3:43:e6:a7:bf:
         04:5d:49:db:92:5a:36:fa:af:71:8b:73:d1:d3:25:48:bb:ec:
         c7:2d:3d:9c:06:fd:2a:24:4c:b5:38:2c:ce:b9:94:4c:2c:84:
         70:d7:d3:e8:33:55:b6:65:a2:2f:d1:c2:3f:cc:09:26:9e:75:
         66:67:d2:38:ba:76:6c:38:35:21:d3:f6:a8:72:06:02:bf:5d:
         75:8b:59:73:ec:b0:df:2e:55:35:b1:ee:24:69:b5:40:bf:3d:
         eb:95:18:8d:65:2e:57:7b:ec:62:40:c1:9b:65:79:e0:e4:ba:
         5d:35:94:db:7e:a8:9f:7f:89:f5:b0:ad:3d:fe:eb:5f:cc:7f:
         3f:df:0f:89:c2:07:76:31:ea:6c:c7:48:44:93:3e:59:b4:9f:
         f1:d7:3f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:27:11 2024 by rpki-client on console-fra.rpki-client.org