Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/MVzRGp3eV-Dzl5FkM4G9GaXRwUo.roa
File:                     MVzRGp3eV-Dzl5FkM4G9GaXRwUo.roa (raw, json)
Hash identifier:          uN0xp92DP/2vYPvY7QfQ8QbuqPB5C9dMIK3p388mWhw=
Subject key identifier:   31:5C:D1:1A:9D:DE:57:E0:F3:97:91:64:33:81:BD:19:A5:D1:C1:4A
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       61
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/MVzRGp3eV-Dzl5FkM4G9GaXRwUo.roa
Signing time:             Fri 31 May 2024 01:28:12 +0000
ROA not before:           Fri 31 May 2024 01:28:12 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     17675
IP address blocks:        210.193.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: May 31 01:28:12 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=315CD11A9DDE57E0F39791643381BD19A5D1C14A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d7:14:42:7d:f2:09:c8:13:1b:f3:13:53:57:
                    2e:59:10:d6:29:31:f2:39:b9:fe:1c:68:c1:83:b9:
                    5c:09:81:13:da:7c:8a:84:d1:ef:8b:b4:34:85:8c:
                    15:f4:55:77:e8:30:c3:9e:6a:99:d7:02:4d:6c:7d:
                    63:08:80:d2:0a:bd:49:7f:92:db:9a:24:92:5d:8d:
                    54:f0:ec:94:39:da:7d:28:41:1f:0c:0e:21:36:5c:
                    55:4c:88:49:6c:6d:6e:7a:02:09:de:d1:5b:86:24:
                    26:e4:0a:8f:26:71:e5:24:dd:b1:db:ac:76:28:c1:
                    30:88:cb:92:e3:ff:6a:16:08:43:64:66:dc:dc:a9:
                    74:c0:d3:6c:70:d5:f4:36:9f:51:bb:a9:21:6f:58:
                    e7:92:ce:19:46:6d:29:4e:62:58:64:e3:22:fe:73:
                    e8:be:ba:12:3d:58:f7:b2:3f:4a:cf:44:c6:1f:c3:
                    38:c7:ac:37:07:50:37:45:7e:e8:8b:f7:82:a4:7c:
                    d9:6c:b0:f1:58:8b:06:e5:0b:1a:08:06:d4:d0:41:
                    d5:98:0d:0c:53:f8:bb:04:3a:2d:75:c9:be:74:3a:
                    61:80:b0:7f:a4:8d:5a:24:1e:59:fb:a2:3a:00:c0:
                    ec:80:f7:4b:15:2c:56:65:dd:66:7a:0b:5a:12:5f:
                    6d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5C:D1:1A:9D:DE:57:E0:F3:97:91:64:33:81:BD:19:A5:D1:C1:4A
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/MVzRGp3eV-Dzl5FkM4G9GaXRwUo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.193.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         33:29:d9:9c:e6:43:b7:fc:9e:fd:cf:45:ed:a5:46:b0:96:49:
         9c:53:ea:07:0e:d4:9f:ca:01:35:fe:eb:92:2f:f4:1f:66:7d:
         c8:1e:1e:ae:5f:8b:5c:d6:ad:90:53:d8:66:36:8c:80:d0:51:
         75:5b:c4:6f:19:8e:46:db:98:31:30:6f:0c:07:03:c3:7d:9d:
         e7:43:ce:d1:41:bc:d2:a3:f7:ac:23:b5:db:1f:94:be:f3:67:
         a2:50:30:29:3d:6b:ad:32:ca:bf:e8:b8:61:98:a0:32:cd:42:
         70:30:06:a5:62:3d:44:4f:5a:63:81:06:c9:89:b1:72:5f:db:
         9a:a3:1b:e7:0e:e0:5f:df:98:10:e1:57:fb:0f:3c:37:39:93:
         86:f9:ae:6b:c5:93:75:38:c3:93:3b:cf:07:12:74:ab:42:69:
         4a:27:9c:40:52:d2:e6:d4:94:ad:50:8c:f9:97:c0:be:3c:b8:
         28:c8:e8:47:a9:07:34:47:2f:06:73:75:2b:ab:1d:0f:be:30:
         ea:bf:22:70:12:0d:d6:d5:b0:6d:21:0a:f4:2b:a2:b6:b0:3a:
         71:04:02:29:79:d6:31:eb:e0:d8:0b:9f:8d:2c:b9:50:5b:34:
         8c:90:e6:af:de:ec:a1:f8:5a:a9:c5:a0:03:ce:a5:e1:67:9b:
         9d:75:15:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:05 2024 by rpki-client on console-fra.rpki-client.org