Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/MQgeRIxEwBOQviKkg5G5Xpme0nE.roa
File:                     MQgeRIxEwBOQviKkg5G5Xpme0nE.roa (raw, json)
Hash identifier:          KND2l3QSFKgZ6b+6XaL8TTJidp0Ow9XDzJ/3KZmqBpk=
Subject key identifier:   31:08:1E:44:8C:44:C0:13:90:BE:22:A4:83:91:B9:5E:99:9E:D2:71
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0172
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MQgeRIxEwBOQviKkg5G5Xpme0nE.roa
Signing time:             Sun 01 Oct 2023 01:34:23 +0000
ROA not before:           Sun 01 Oct 2023 01:34:23 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9617
IP address blocks:        211.120.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:23 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=31081E448C44C01390BE22A48391B95E999ED271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:58:6d:21:ed:b5:6f:ca:f0:57:1c:d7:1e:98:
                    41:f7:1c:b5:3e:81:03:c0:7d:47:e6:c5:5e:8b:11:
                    07:04:6e:37:8d:5f:53:c1:16:af:54:f6:ba:86:60:
                    00:27:b3:55:c1:96:38:a0:78:d8:14:3e:07:9a:4e:
                    f6:16:91:f7:c4:47:6a:66:e9:dd:fe:a3:ec:08:f0:
                    e2:f4:6a:73:77:31:d3:14:b0:c6:d3:f6:44:32:0d:
                    72:f5:db:a5:5d:ba:b3:70:f4:1c:a1:de:84:17:83:
                    77:1b:65:e3:19:32:bd:49:57:a9:8a:d2:c7:28:1f:
                    e3:95:3f:f6:a0:97:c2:67:e1:dc:1d:c6:6c:4c:10:
                    da:61:fb:f4:42:92:d6:f1:e8:b0:a3:37:b8:ac:c0:
                    fd:39:34:2d:95:e0:4a:92:d8:b5:1f:ed:bb:53:b9:
                    bb:c7:3b:77:3f:e3:b7:19:c8:88:a2:3d:54:5c:5d:
                    98:55:80:28:e6:c8:1e:88:d9:e3:51:76:0f:7d:f3:
                    14:c2:70:a9:03:70:84:22:d2:45:69:ce:b5:b0:99:
                    3e:2b:60:a7:e4:81:ce:74:2e:6d:4f:0a:e6:2e:52:
                    cb:f1:90:5e:38:02:42:af:3a:af:6b:1a:ac:26:f2:
                    e2:9e:0f:08:c6:5c:06:bc:cb:ac:3e:ae:bf:0a:38:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:08:1E:44:8C:44:C0:13:90:BE:22:A4:83:91:B9:5E:99:9E:D2:71
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MQgeRIxEwBOQviKkg5G5Xpme0nE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.120.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         52:44:c2:61:c4:42:6f:c3:10:ad:43:ed:dd:2e:2c:0b:de:2b:
         66:7b:57:57:a5:16:51:50:a2:db:7c:fe:bd:23:ab:bd:57:20:
         92:f7:77:f1:98:c8:6c:d0:cf:4a:53:ee:3e:a0:ce:43:18:d3:
         41:e6:bb:45:97:c0:ec:55:62:5b:cf:a3:d1:d7:fa:d3:a1:81:
         3d:5a:4a:4e:07:5c:2f:f2:6d:b9:e7:fb:6c:73:1c:3f:74:ef:
         e0:92:f7:d5:b2:dc:fe:44:52:2a:f6:f2:15:8c:94:e2:61:e0:
         56:8c:58:8d:b2:a2:10:2a:81:c1:4f:8d:77:e7:c9:3e:77:64:
         29:4c:a1:12:0d:57:91:8a:85:b1:04:5b:a1:e5:42:eb:51:0a:
         c1:8b:c6:8a:65:6a:bd:2e:a7:73:ca:98:dd:18:64:66:05:a4:
         77:a1:32:4d:89:07:ee:4b:f3:c0:9f:bd:5e:4d:3c:13:57:4f:
         18:a0:d9:01:c1:64:62:f5:d8:23:81:d0:9a:06:89:35:9a:b7:
         f4:be:96:36:1c:51:cc:72:20:ea:23:ad:cb:63:b7:29:69:51:
         ae:38:58:17:5c:19:3a:24:c1:8c:47:33:e6:65:4b:37:81:0c:
         af:59:16:0c:6f:3b:7b:77:fd:20:1c:3d:9a:64:66:e0:e6:f4:
         af:84:a2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org