Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/MRAcC7KAodxUoKU8EJn3RtenGHQ.roa
File:                     MRAcC7KAodxUoKU8EJn3RtenGHQ.roa (raw, json)
Hash identifier:          ZIklPhGUTBTiw3K5CVePUDPc9WtDxbGLUi1oWWxJSYQ=
Subject key identifier:   31:10:1C:0B:B2:80:A1:DC:54:A0:A5:3C:10:99:F7:46:D7:A7:18:74
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0178
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MRAcC7KAodxUoKU8EJn3RtenGHQ.roa
Signing time:             Sun 01 Oct 2023 01:34:26 +0000
ROA not before:           Sun 01 Oct 2023 01:34:26 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4721
IP address blocks:        110.92.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:26 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=31101C0BB280A1DC54A0A53C1099F746D7A71874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:f8:be:f6:e8:bc:dd:6b:45:dc:6a:93:15:
                    67:89:d7:47:9c:06:2a:18:2e:99:bf:c2:9b:c2:7a:
                    79:34:cf:7f:fc:8b:fc:76:21:5f:50:75:db:62:dd:
                    18:ad:fa:ce:1a:4e:56:5c:ee:d5:9c:b4:98:52:1b:
                    d6:f6:e9:a4:c5:a0:42:37:94:e8:59:20:08:b1:fb:
                    7e:6c:0d:8a:e4:44:04:30:66:db:68:b5:98:61:0c:
                    f9:11:9d:8f:97:bb:36:1a:20:16:25:0f:bb:69:03:
                    33:20:6d:c4:dd:48:7f:a1:8f:07:7d:e1:7f:89:e8:
                    76:9f:12:8f:57:b9:8b:1c:5e:ff:5b:09:2d:1c:40:
                    cb:48:9b:93:ff:b8:87:7c:df:03:20:74:9e:56:44:
                    03:fe:ec:80:64:e3:ab:ba:d7:e9:2f:76:11:bf:28:
                    09:c9:1d:d4:95:12:a6:33:94:a7:ab:fb:3a:5b:dd:
                    13:d8:b8:21:04:b9:86:2c:40:d9:1f:80:f1:db:a6:
                    a2:e4:53:87:aa:05:8f:a3:ed:e7:a9:02:e4:4d:92:
                    9d:65:ea:3a:6f:74:cb:db:02:6c:f3:dd:f4:4d:e4:
                    a7:bf:c5:66:4d:58:6d:f7:7c:b5:d3:e3:ed:60:ac:
                    d9:1f:85:0f:88:cd:45:92:b3:a3:39:65:fd:0b:20:
                    fc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:10:1C:0B:B2:80:A1:DC:54:A0:A5:3C:10:99:F7:46:D7:A7:18:74
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MRAcC7KAodxUoKU8EJn3RtenGHQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.92.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         df:30:90:eb:10:73:8e:f5:2c:8d:3d:13:ec:25:50:e5:b2:a0:
         e9:86:0a:1a:ab:7e:66:50:0b:65:b6:2b:29:e5:3b:47:6a:3f:
         7b:51:87:71:8b:cc:76:ef:27:20:54:8d:f8:0c:b2:a2:c3:f8:
         c0:ba:5e:59:ce:a2:49:dc:0c:da:93:06:e8:b5:e6:80:65:f0:
         b5:80:8e:80:ac:61:64:21:3b:cd:e5:48:71:ae:fd:d1:ca:f0:
         9c:40:54:d3:df:d3:c3:15:be:4f:2d:97:72:4b:53:36:52:1d:
         50:1d:7e:3e:dc:a3:c3:87:27:5a:8e:bc:ef:8e:b6:e8:b6:99:
         44:99:79:7c:b6:45:e7:69:64:8b:c4:a6:13:9f:f7:fa:69:09:
         bc:11:90:6e:e4:43:7d:c1:a6:af:b6:7d:bf:19:e9:79:a9:d6:
         46:ba:1c:a2:58:2e:54:5d:2d:f1:31:fb:8c:c3:45:c9:e3:23:
         49:f4:29:89:8b:2e:31:c4:cd:55:13:db:7b:0d:a9:b0:d5:7e:
         63:ae:c1:71:e9:a3:12:00:1d:b3:34:20:ff:fc:08:92:1b:cd:
         5f:a8:22:1a:70:0d:cd:26:f1:b4:d7:b9:38:26:83:15:d5:10:
         83:d2:f3:65:87:a3:c5:5b:57:7e:11:1d:8a:ea:37:99:b0:ed:
         e5:9b:42:1c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw
MTM0MjZaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDMxMTAxQzBCQjI4MEEx
REM1NEEwQTUzQzEwOTlGNzQ2RDdBNzE4NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4EPi+9ui83WtF3GqTFWeJ10ecBioYLpm/wpvCenk0z3/8i/x2
IV9Qddti3Rit+s4aTlZc7tWctJhSG9b26aTFoEI3lOhZIAix+35sDYrkRAQwZtto
tZhhDPkRnY+XuzYaIBYlD7tpAzMgbcTdSH+hjwd94X+J6HafEo9XuYscXv9bCS0c
QMtIm5P/uId83wMgdJ5WRAP+7IBk46u61+kvdhG/KAnJHdSVEqYzlKer+zpb3RPY
uCEEuYYsQNkfgPHbpqLkU4eqBY+j7eepAuRNkp1l6jpvdMvbAmzz3fRN5Ke/xWZN
WG33fLXT4+1grNkfhQ+IzUWSs6M5Zf0LIPypAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUMRAcC7KAodxUoKU8EJn3RtenGHQwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL01SQWNDN0tBb2R4VW9LVThFSm4zUnRlbkdIUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARuXFAwDQYJKoZIhvcNAQELBQADggEBAN8wkOsQc471LI09E+wlUOWyoOmG
ChqrfmZQC2W2KynlO0dqP3tRh3GLzHbvJyBUjfgMsqLD+MC6XlnOokncDNqTBui1
5oBl8LWAjoCsYWQhO83lSHGu/dHK8JxAVNPf08MVvk8tl3JLUzZSHVAdfj7co8OH
J1qOvO+Otui2mUSZeXy2RedpZIvEphOf9/ppCbwRkG7kQ33Bpq+2fb8Z6Xmp1ka6
HKJYLlRdLfEx+4zDRcnjI0n0KYmLLjHEzVUT23sNqbDVfmOuwXHpoxIAHbM0IP/8
CJIbzV+oIhpwDc0m8bTXuTgmgxXVEIPS82WHo8VbV34RHYrqN5mw7eWbQhw=
-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org