Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MW-fgbYNJxkGBsGgfE7Juh8idQU.roa
File:                     MW-fgbYNJxkGBsGgfE7Juh8idQU.roa (raw, json)
Hash identifier:          xCEUUhagX2b0/JnUSHSA96qrlKulqfgL+jasBsU5IOk=
Subject key identifier:   31:6F:9F:81:B6:0D:27:19:06:06:C1:A0:7C:4E:C9:BA:1F:22:75:05
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       096F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MW-fgbYNJxkGBsGgfE7Juh8idQU.roa
Signing time:             Sun 30 Jun 2024 01:33:38 +0000
ROA not before:           Sun 30 Jun 2024 01:33:38 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        219.114.172.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2415 (0x96f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:33:38 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=316F9F81B60D27190606C1A07C4EC9BA1F227505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:58:26:23:f8:75:33:84:07:51:e2:8f:9c:
                    88:7d:60:df:6a:e2:29:a3:62:ee:fc:b4:47:50:85:
                    31:6d:30:e0:82:0f:78:05:1b:d2:1c:e3:18:d4:22:
                    23:bd:82:32:20:e0:2f:09:4b:e5:35:7e:d8:4c:bf:
                    bf:f2:aa:7d:ce:73:1e:e0:f4:4a:2c:f6:f4:74:d0:
                    af:92:e7:61:ac:6f:11:03:b1:18:3a:f3:6e:a1:0c:
                    b7:2f:11:82:0c:cb:85:6f:da:da:89:19:6f:96:37:
                    0b:93:9a:61:87:32:6b:07:77:13:9c:58:67:1c:96:
                    5e:ea:19:db:9e:bc:dc:8a:a2:48:02:1d:ec:5b:2c:
                    13:56:06:99:1f:5a:bf:77:88:a6:58:96:4f:54:a8:
                    3a:6f:f8:6c:c0:15:cd:a8:e0:94:9e:e6:d8:5b:1f:
                    25:6d:99:b0:1a:b8:1d:1e:01:e6:3a:ec:a3:85:4a:
                    e0:1f:91:17:c8:2d:2d:b1:2e:a7:d8:e8:ac:a2:f1:
                    a4:cd:81:31:06:ab:f7:2b:22:c9:a8:2c:0e:f9:d4:
                    92:6d:cc:e8:95:ce:7e:76:9b:84:25:e5:b9:e1:16:
                    18:68:36:6e:b3:cc:b7:9a:28:22:2e:21:c4:23:de:
                    bd:6f:07:cf:fc:e7:15:44:07:1a:9a:ff:2a:ae:0d:
                    83:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6F:9F:81:B6:0D:27:19:06:06:C1:A0:7C:4E:C9:BA:1F:22:75:05
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MW-fgbYNJxkGBsGgfE7Juh8idQU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:40:ed:7b:57:22:d3:94:6c:dd:2f:a7:ef:07:e2:3b:80:3e:
         f5:4f:de:75:96:38:9e:4f:18:b0:84:9f:03:a5:8f:31:44:dd:
         32:69:fe:49:c6:2e:b3:dd:80:52:e5:94:07:14:29:7a:5a:48:
         e7:70:d1:76:5a:79:3e:3d:85:c5:4a:9c:f0:57:f5:36:6a:e5:
         91:13:10:57:04:f0:90:b8:3b:e4:5f:2c:a9:32:41:6d:ad:87:
         e6:51:8d:7a:eb:d8:72:5a:f5:96:e3:13:70:24:f3:db:77:bf:
         41:1e:67:53:47:9d:84:a5:cb:6c:7e:29:56:de:bd:52:b0:b9:
         ff:cd:8c:cc:b8:0d:46:ac:5a:5a:92:48:d4:0a:48:99:b8:63:
         6c:21:df:c9:52:2a:3e:0e:b4:01:7b:c6:ec:5d:c6:25:2e:f2:
         1a:22:ff:73:ef:26:96:96:60:d1:61:ce:6d:7f:67:f3:bb:00:
         ff:f8:9b:c1:e3:32:a8:02:e7:b2:4f:b9:43:18:6e:c5:e4:b9:
         97:bc:77:b2:d2:fb:8a:83:b3:00:80:f4:c6:79:e7:94:99:8a:
         b3:0f:23:30:0c:04:d5:25:33:64:7a:2c:13:2c:d3:8b:9e:87:
         d8:c2:e6:70:c2:d6:f6:29:18:a0:de:42:e7:19:86:5c:07:3b:
         f3:03:f1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:40 2024 by rpki-client on console-ams.rpki-client.org