Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/MTJeX_qbk2zBL9izpi1r3LWk6_I.roa
File:                     MTJeX_qbk2zBL9izpi1r3LWk6_I.roa (raw, json)
Hash identifier:          yw1dVZGZAgM+qYoLLvNJ5dl+s3wfcxq2yVeFyKNLoX8=
Subject key identifier:   31:32:5E:5F:FA:9B:93:6C:C1:2F:D8:B3:A6:2D:6B:DC:B5:A4:EB:F2
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0264
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MTJeX_qbk2zBL9izpi1r3LWk6_I.roa
Signing time:             Sat 31 Aug 2024 01:36:47 +0000
ROA not before:           Sat 31 Aug 2024 01:36:47 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     24276
IP address blocks:        210.2.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612 (0x264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:36:47 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=31325E5FFA9B936CC12FD8B3A62D6BDCB5A4EBF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f7:30:fc:51:0b:e9:78:d6:9a:21:01:30:37:
                    ff:c8:ef:67:99:dc:29:d9:36:a6:9d:35:9a:97:75:
                    b9:bd:63:9d:39:9b:1b:4d:d0:32:8f:b0:81:db:c9:
                    66:62:e9:39:a1:96:29:62:f1:88:56:d6:cc:ac:90:
                    75:55:10:76:29:b2:64:c0:77:c1:6e:36:95:57:bc:
                    81:83:3d:e1:c8:ae:49:1e:5c:8f:77:22:52:88:f2:
                    8b:eb:68:ea:02:9f:65:bc:8c:f1:66:59:db:2f:79:
                    5e:03:b7:5a:f5:e0:58:50:a1:4e:96:fc:c0:1a:6c:
                    34:86:bf:d9:59:d8:2e:df:aa:ba:90:95:71:a1:9d:
                    0f:99:7c:a2:3b:fb:6f:ed:25:cb:7d:33:95:54:2d:
                    6d:84:a5:15:e0:b6:9c:b5:a7:3d:ef:c6:bb:a6:33:
                    c5:94:6a:72:ff:0c:22:3b:b3:ba:c1:b0:a4:18:9c:
                    bf:71:3d:c7:2c:15:d7:db:19:f0:f7:43:18:d1:ff:
                    5e:03:5c:45:9f:30:5e:53:63:a9:12:c2:8a:12:3e:
                    da:13:e0:e7:71:9a:3f:51:60:bf:9e:f6:03:81:81:
                    4b:77:23:91:bd:43:ab:55:83:7c:fe:64:89:38:6c:
                    ad:3b:55:f3:52:d9:75:87:b3:8b:10:de:0c:54:37:
                    7b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:32:5E:5F:FA:9B:93:6C:C1:2F:D8:B3:A6:2D:6B:DC:B5:A4:EB:F2
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MTJeX_qbk2zBL9izpi1r3LWk6_I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.2.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         14:1f:c5:8c:dd:57:5e:5e:9b:fe:98:2a:42:8f:bf:7c:df:64:
         e8:fb:7b:9f:0e:04:7c:91:71:fe:a7:1a:e1:cd:f9:45:23:6f:
         2f:01:f8:1e:6a:66:d1:24:58:a2:37:77:5a:63:9e:43:b8:20:
         17:f8:b4:f5:08:e3:75:dd:cc:bb:77:df:8a:81:ff:9b:8f:f2:
         25:c1:c2:25:9d:28:1b:65:28:14:86:3c:a8:bf:46:f8:89:e5:
         21:03:54:fd:58:93:be:f8:72:16:07:e4:c5:b3:fd:11:2f:f1:
         8a:f7:5c:92:12:7f:6f:fb:d1:09:d4:f8:c9:c4:76:79:62:ea:
         93:99:38:d8:e6:2b:35:27:a5:ad:83:a5:9b:1a:33:8f:93:9b:
         33:04:19:88:29:00:31:d6:ea:55:fd:18:95:c3:79:60:1d:8f:
         b1:fd:d0:b8:02:74:ed:0b:62:6b:93:9e:4c:42:2a:f4:f5:fd:
         8b:39:03:1a:4d:2f:84:20:61:b3:7f:d5:6e:1e:af:b4:50:d5:
         7b:ed:6b:d7:10:d4:97:ac:a1:72:a3:82:3d:80:24:ab:cc:89:
         fa:93:d8:44:a8:b9:0b:b5:82:81:dc:60:fa:ad:0b:b8:69:b6:
         1e:93:75:2b:ed:dd:21:08:d2:3e:01:f8:a0:1c:27:46:0e:17:
         94:bf:5c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org