Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/MzocXtxSVFqe_6R2E6ISSIZMz24.roa
File:                     MzocXtxSVFqe_6R2E6ISSIZMz24.roa (raw, json)
Hash identifier:          qP1J/hCryk8nwXrR+Bi6xYGct65Xf1zOzzyYOxaSr0k=
Subject key identifier:   33:3A:1C:5E:DC:52:54:5A:9E:FF:A4:76:13:A2:12:48:86:4C:CF:6E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0269
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MzocXtxSVFqe_6R2E6ISSIZMz24.roa
Signing time:             Sat 31 Aug 2024 01:36:48 +0000
ROA not before:           Sat 31 Aug 2024 01:36:48 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        61.205.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:36:48 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=333A1C5EDC52545A9EFFA47613A21248864CCF6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:98:24:52:a6:60:c1:d3:52:de:46:57:f2:fc:
                    24:be:90:e7:80:74:50:2a:70:29:a3:42:38:98:cc:
                    e1:2d:e8:d5:33:20:c4:f8:5c:66:ad:01:86:bf:fc:
                    bf:20:b4:4f:5a:29:53:db:78:98:2f:2b:54:cb:ed:
                    fa:7f:3d:2d:28:3a:a2:ca:6f:d1:04:02:d1:20:28:
                    4f:f0:99:0d:7f:97:33:c1:6a:5a:27:23:75:6f:5d:
                    98:5f:58:28:49:5e:25:40:73:af:c9:82:ec:01:53:
                    47:33:33:ea:14:b5:93:06:4c:f8:59:7b:a3:26:4f:
                    dc:db:fb:6a:3b:1c:cd:8c:77:33:fd:67:eb:d6:ee:
                    05:49:fe:44:2e:d8:9e:8c:80:b7:8d:cb:1c:a3:1a:
                    8a:26:1a:ff:a1:4e:dc:9e:20:1d:7a:f9:0f:2e:b5:
                    33:60:8c:46:48:02:ae:dd:63:9b:f4:7f:28:40:ad:
                    bf:1a:8f:97:05:75:75:7c:53:08:70:05:30:38:83:
                    8d:f7:e9:c3:be:f1:61:bc:51:34:24:a7:09:88:c5:
                    e7:16:3c:a7:f5:6f:66:f1:3d:b9:70:45:47:3c:25:
                    a3:18:e8:98:94:ee:d0:83:84:c1:7c:14:e1:c7:1f:
                    2f:d7:d4:d0:91:fc:d3:2b:4e:dc:1d:57:b8:cc:44:
                    c4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3A:1C:5E:DC:52:54:5A:9E:FF:A4:76:13:A2:12:48:86:4C:CF:6E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MzocXtxSVFqe_6R2E6ISSIZMz24.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3f:7c:0a:5a:4e:23:c7:2b:b4:08:04:5d:61:1b:cb:46:e1:4b:
         bd:fd:47:98:ad:7d:d1:f3:a6:cf:48:86:36:52:76:1b:54:f3:
         61:19:ee:d9:60:83:98:87:c2:a6:9d:b1:61:f0:08:a5:94:e4:
         fa:33:2a:6c:ed:a1:8d:a8:ac:7f:bb:60:13:f9:25:9c:3c:3b:
         0e:c2:9a:12:77:67:95:91:19:bd:95:24:18:5e:50:6d:9f:2c:
         ae:db:0d:09:d2:d1:de:53:93:37:4a:42:a1:76:07:81:8e:70:
         f1:26:a5:8d:96:fa:f1:87:b6:51:60:3d:ed:4c:f6:b2:59:ff:
         33:8f:5b:00:48:7e:be:06:b6:c5:95:aa:c7:8d:7f:cf:a7:b7:
         2e:f2:72:3d:fa:2c:a1:39:00:e2:f1:7d:c5:c5:a5:3b:63:94:
         97:07:8f:dc:69:8a:0a:0b:41:c2:82:4e:d6:79:a0:68:c1:37:
         a5:35:cb:45:69:68:47:7a:fb:46:2e:da:c3:e9:fd:98:e9:a5:
         b3:b2:a8:a8:55:ed:4f:39:b1:ea:6e:f2:b4:6c:df:47:a0:55:
         4d:e0:86:d8:f7:35:a9:ee:86:46:dc:47:68:56:2c:9c:48:d8:
         95:8c:17:6b:4f:75:0c:61:ce:37:74:ae:47:2b:1d:3b:60:59:
         f2:13:ed:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org