Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/mGu0I3Ma-sS9_rGfz1hQMa6Qpkw.roa
File:                     mGu0I3Ma-sS9_rGfz1hQMa6Qpkw.roa (raw, json)
Hash identifier:          3+zYh1ZOQemgw9ps4ePZgw8pVtbUdgFsP1ZL/hZW+uU=
Subject key identifier:   98:6B:B4:23:73:1A:FA:C4:BD:FE:B1:9F:CF:58:50:31:AE:90:A6:4C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02DF
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/mGu0I3Ma-sS9_rGfz1hQMa6Qpkw.roa
Signing time:             Thu 10 Oct 2024 01:12:18 +0000
ROA not before:           Thu 10 Oct 2024 01:12:18 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        14.128.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735 (0x2df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 10 01:12:18 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=986BB423731AFAC4BDFEB19FCF585031AE90A64C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:49:c3:31:e2:ca:38:67:2c:eb:9e:ce:07:b7:
                    70:6e:f7:1f:91:20:b6:a4:9d:30:ff:1b:b4:a2:47:
                    a3:6a:2b:3d:8a:41:f1:a5:39:ce:61:b9:6f:a0:ab:
                    cc:eb:22:b3:73:bf:82:7f:aa:b0:0d:20:d2:ff:57:
                    76:15:af:cb:0d:4e:12:59:7f:4b:05:0c:42:92:7f:
                    2e:c9:5e:15:23:f0:51:0c:9b:3b:5b:17:f5:c5:1d:
                    96:ce:49:47:a5:4b:d7:3a:7f:3a:be:bf:95:ec:fb:
                    89:20:60:e6:b7:5e:07:97:f4:55:3d:66:75:11:d7:
                    3e:86:f9:99:90:36:f1:df:41:87:36:4e:dc:cb:38:
                    65:d5:66:5e:3b:32:f4:6f:9d:21:d3:e1:46:d9:c3:
                    d5:ac:d2:8c:6c:77:3c:6d:d3:96:b5:aa:88:09:54:
                    20:76:7c:e4:f0:f3:3b:99:ac:c1:4a:d0:a5:bd:91:
                    60:97:6e:a9:a8:6a:15:e7:20:12:f0:22:43:7a:3f:
                    f0:08:eb:6a:ec:a0:b5:5e:43:ea:3d:fe:58:85:db:
                    61:f3:46:a4:c7:79:94:a5:fe:a1:ab:e8:b4:a7:73:
                    de:cd:94:97:b1:df:3d:b1:38:47:1f:67:5c:72:41:
                    1c:c7:48:f2:b9:c4:db:03:49:bf:36:0b:9c:6e:69:
                    ea:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6B:B4:23:73:1A:FA:C4:BD:FE:B1:9F:CF:58:50:31:AE:90:A6:4C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/mGu0I3Ma-sS9_rGfz1hQMa6Qpkw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.128.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1f:2a:dd:1c:ab:d8:9e:c7:5b:c3:8c:54:a4:77:da:bf:bb:9c:
         30:fe:87:c3:15:94:dd:8f:ee:20:f4:23:a8:66:ca:42:e3:2d:
         44:b5:c3:60:92:a7:72:13:f0:f6:01:65:d3:26:a1:45:39:5d:
         c9:0d:fe:5f:25:cd:23:da:d4:8e:46:e5:37:15:10:87:0b:f8:
         96:00:46:51:7b:97:38:92:38:12:81:54:35:14:0d:8a:3d:b0:
         6a:09:d3:9c:6c:87:ba:af:c8:0a:7f:c8:08:0c:7b:f8:f1:fe:
         a3:0a:7f:50:b7:fb:60:44:86:7c:38:25:79:7d:07:39:e0:7d:
         cd:5e:34:c6:d2:2f:d6:64:00:a5:b4:9d:f4:92:7d:ee:cb:5d:
         5d:c3:c1:1a:45:76:4e:79:50:e9:92:44:30:1c:63:f9:d9:41:
         9d:16:d1:fa:33:72:f9:c8:09:7b:e7:94:a3:d4:0a:36:40:03:
         c6:e2:0e:3b:1d:ff:4f:af:62:e6:96:6f:98:10:39:dc:04:a7:
         18:eb:43:76:4f:13:14:39:42:65:2f:c1:96:07:5f:11:75:ab:
         6f:fa:3c:e0:ab:a3:69:5c:05:40:d2:df:b8:dd:05:71:66:3f:
         84:c1:0b:9d:e1:24:cf:8f:cc:0a:5c:a1:c3:f2:72:d8:3e:8e:
         7d:66:45:d0
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMTAw
MTEyMThaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDk4NkJCNDIzNzMxQUZB
QzRCREZFQjE5RkNGNTg1MDMxQUU5MEE2NEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXScMx4so4Zyzrns4Ht3Bu9x+RILaknTD/G7SiR6NqKz2KQfGl
Oc5huW+gq8zrIrNzv4J/qrANINL/V3YVr8sNThJZf0sFDEKSfy7JXhUj8FEMmztb
F/XFHZbOSUelS9c6fzq+v5Xs+4kgYOa3XgeX9FU9ZnUR1z6G+ZmQNvHfQYc2TtzL
OGXVZl47MvRvnSHT4UbZw9Ws0oxsdzxt05a1qogJVCB2fOTw8zuZrMFK0KW9kWCX
bqmoahXnIBLwIkN6P/AI62rsoLVeQ+o9/liF22HzRqTHeZSl/qGr6LSnc97NlJex
3z2xOEcfZ1xyQRzHSPK5xNsDSb82C5xuaerbAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUmGu0I3Ma+sS9/rGfz1hQMa6QpkwwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L21HdTBJM01hLXNTOV9yR2Z6MWhRTWE2UXBrdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYOgEAwDQYJKoZIhvcNAQELBQADggEBAB8q3Ryr2J7HW8OMVKR32r+7nDD+
h8MVlN2P7iD0I6hmykLjLUS1w2CSp3IT8PYBZdMmoUU5XckN/l8lzSPa1I5G5TcV
EIcL+JYARlF7lziSOBKBVDUUDYo9sGoJ05xsh7qvyAp/yAgMe/jx/qMKf1C3+2BE
hnw4JXl9Bzngfc1eNMbSL9ZkAKW0nfSSfe7LXV3DwRpFdk55UOmSRDAcY/nZQZ0W
0fozcvnICXvnlKPUCjZAA8biDjsd/0+vYuaWb5gQOdwEpxjrQ3ZPExQ5QmUvwZYH
XxF1q2/6POCro2lcBUDS37jdBXFmP4TBC53hJM+PzApcocPyctg+jn1mRdA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:21 2024 by rpki-client on console-fra.rpki-client.org