Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/mk89JANMbgeF0s9HPm_ruW5-GmU.roa
File:                     mk89JANMbgeF0s9HPm_ruW5-GmU.roa (raw, json)
Hash identifier:          23xxjEEmVnJxCGp6jBT3VqeQH4KmH74C/STjiOJCLY4=
Subject key identifier:   9A:4F:3D:24:03:4C:6E:07:85:D2:CF:47:3E:6F:EB:B9:6E:7E:1A:65
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0171
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/mk89JANMbgeF0s9HPm_ruW5-GmU.roa
Signing time:             Sun 01 Oct 2023 01:34:23 +0000
ROA not before:           Sun 01 Oct 2023 01:34:23 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        61.205.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:23 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=9A4F3D24034C6E0785D2CF473E6FEBB96E7E1A65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:be:34:9b:7d:1d:89:f5:12:3e:26:e2:94:
                    ac:a7:c2:f2:ef:dd:62:63:29:bb:67:c0:eb:dd:49:
                    6f:e8:66:21:64:07:b8:5a:41:44:73:05:0c:e8:3a:
                    05:c6:83:fb:cd:43:f6:b2:cb:57:33:79:2a:86:98:
                    ab:62:d0:32:05:c6:b3:53:85:b5:22:2a:f3:ed:3b:
                    14:64:e8:b5:d9:99:d6:df:ab:21:97:d1:63:ca:d4:
                    47:bd:37:43:cb:40:84:d9:af:0d:67:b5:b7:04:4b:
                    ba:27:3f:4b:1e:72:e7:ca:6f:16:8f:d5:4a:fc:08:
                    35:8a:3f:26:a1:83:0d:25:13:08:15:f2:b7:a5:7d:
                    49:af:ca:79:a1:a9:3c:b8:8d:38:ba:a1:03:bb:33:
                    c9:f8:5b:fe:c2:0d:4f:e9:70:3c:47:1f:26:c0:46:
                    4f:da:32:55:14:30:e9:2c:eb:fd:9f:27:dd:f1:f8:
                    d7:9b:48:90:9b:c5:84:ef:d2:19:b4:c5:67:66:79:
                    eb:e3:42:5f:b3:3b:dc:30:76:54:4d:fb:07:fe:cb:
                    c9:33:e2:fd:93:ef:66:aa:ec:06:2d:b1:8d:e7:04:
                    48:6a:0f:0c:57:6c:78:dd:1a:40:3e:87:8e:e0:e6:
                    52:a8:26:ad:18:b0:dd:12:8a:b2:d5:a1:fc:04:8f:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4F:3D:24:03:4C:6E:07:85:D2:CF:47:3E:6F:EB:B9:6E:7E:1A:65
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/mk89JANMbgeF0s9HPm_ruW5-GmU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         88:b3:5d:f3:12:71:91:c1:d5:ff:bc:24:e8:28:25:3f:48:45:
         02:66:34:79:19:1b:a0:71:b1:7b:68:8d:57:af:fd:80:f8:f6:
         17:f0:f6:a6:a9:3e:e5:af:76:98:ce:f0:42:dc:2a:93:4a:71:
         9f:e0:74:db:44:59:f0:1f:76:56:2b:8e:f4:db:8b:19:d3:bd:
         4a:9f:a9:2d:44:c6:05:de:12:13:d4:4c:2d:25:c1:b7:88:83:
         03:39:21:ae:47:8e:25:43:cb:1d:68:9f:04:fb:b8:84:0b:28:
         35:f0:20:d2:f9:ae:23:be:20:47:45:24:d1:f2:7a:3a:6b:af:
         ed:06:39:4a:61:e2:56:08:ed:f0:7e:56:22:00:2d:6e:4c:c8:
         2e:c0:62:2e:10:14:7e:95:cb:72:28:1a:62:34:46:27:f4:4d:
         a2:ac:29:3c:39:7f:ee:8b:84:06:dc:73:14:9b:ef:35:8f:2d:
         da:4e:ba:05:60:c2:35:7f:9c:b2:6d:bf:0e:f3:1d:1b:fb:08:
         c2:34:ad:5a:e2:1d:c7:8b:58:a5:b6:56:7f:44:64:1d:b0:1d:
         9a:c5:0b:79:34:b9:87:f8:aa:8c:d9:b0:3e:76:83:3b:d7:35:
         d1:92:6e:27:58:39:79:b5:12:64:17:fe:50:1d:9f:aa:d6:ec:
         c5:4d:f3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org