Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/MlPAgkbVauMQM8OorWVFTENpZlA.roa
File:                     MlPAgkbVauMQM8OorWVFTENpZlA.roa (raw, json)
Hash identifier:          kKBHOPL/z3JzUqJrRenkyZC93aYuaGfNkFXp0y17BoA=
Subject key identifier:   32:53:C0:82:46:D5:6A:E3:10:33:C3:A8:AD:65:45:4C:43:69:66:50
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0283
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MlPAgkbVauMQM8OorWVFTENpZlA.roa
Signing time:             Sat 31 Aug 2024 01:38:54 +0000
ROA not before:           Sat 31 Aug 2024 01:38:54 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        114.198.224.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 643 (0x283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:38:54 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=3253C08246D56AE31033C3A8AD65454C43696650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5a:3f:43:1b:32:27:b3:5a:48:47:df:16:5a:
                    82:9b:8e:17:0f:5a:26:25:d3:fd:5e:15:5d:75:6d:
                    49:59:5e:4b:3d:88:d5:1b:7c:11:3b:5d:c6:32:aa:
                    30:10:41:87:64:9a:f2:76:4b:0e:39:7b:df:85:6e:
                    c9:d1:d7:2c:cc:f5:f2:f4:43:83:93:0f:8b:b4:2f:
                    ca:61:2e:dd:0d:c5:2b:ab:65:36:2e:30:4e:ab:7c:
                    41:24:bb:ec:c6:74:f2:8a:ec:24:5b:1f:12:03:78:
                    b0:d7:f6:97:58:3a:d9:62:c9:d3:fe:7d:ad:08:07:
                    09:d0:0f:95:81:c9:2d:ff:23:6d:65:b3:cc:eb:88:
                    51:a0:b3:28:ae:cb:d0:ad:a7:b2:8a:ed:db:e3:77:
                    2f:eb:ba:67:a0:52:87:65:26:27:d0:6d:8c:79:07:
                    1d:d5:27:d9:f9:6e:60:41:15:f9:71:0a:6e:93:35:
                    1b:c8:5b:6f:ab:e4:e4:2d:fd:f4:cd:d7:67:51:db:
                    99:49:a6:64:f7:e9:b0:71:e3:08:3a:f1:5d:40:27:
                    45:d7:20:86:26:4d:b4:fa:3b:be:47:9a:ca:67:a0:
                    33:04:fd:9d:06:d8:97:d5:d1:aa:b1:db:70:e9:7e:
                    d6:7e:d8:4c:61:30:3e:32:ad:28:3f:1a:e3:8d:df:
                    10:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:53:C0:82:46:D5:6A:E3:10:33:C3:A8:AD:65:45:4C:43:69:66:50
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MlPAgkbVauMQM8OorWVFTENpZlA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:d6:41:bb:3c:d2:6f:0b:82:0a:44:15:9d:c8:42:a6:6a:fe:
         75:24:96:15:4e:c7:11:c0:58:14:f2:64:29:50:93:96:ab:52:
         50:5d:e9:58:d5:65:4c:88:d5:1b:80:a0:c9:43:dd:d0:c5:64:
         ba:42:75:d7:4f:70:0e:c5:cc:91:f7:b4:c7:db:1d:38:a2:a7:
         7c:ac:87:98:9a:c6:91:81:4f:a2:83:d2:ba:34:48:f1:bc:54:
         4c:c2:59:75:f0:86:3c:f5:02:71:43:48:42:31:1f:f3:1c:97:
         28:dd:5d:64:cb:f7:61:da:0a:1a:88:cc:68:18:aa:49:14:f5:
         79:42:32:5b:39:06:58:51:29:dc:b8:9f:97:d3:ea:b0:09:04:
         05:6d:b9:ab:58:d2:55:75:52:c7:5c:3f:f6:e8:df:34:41:b7:
         32:75:d3:79:3d:65:0c:94:23:30:ac:f6:36:10:c1:4c:00:0c:
         5b:59:22:3e:6b:0a:9b:9d:8e:05:5a:0e:0c:54:27:6b:b1:c3:
         de:fb:27:3d:b3:92:8b:1a:e6:85:9c:be:03:0a:60:78:f1:7c:
         53:cf:a8:0b:21:56:52:1e:6e:52:d4:b5:42:40:8b:92:5d:91:
         ee:b1:33:00:39:05:ce:93:f7:87:41:88:ea:39:0d:69:54:83:
         79:ac:ea:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org