Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/mpLmKJTGOJ6J9HCjDdhwzNKrssM.roa
File:                     mpLmKJTGOJ6J9HCjDdhwzNKrssM.roa (raw, json)
Hash identifier:          mv3EM5rpS0jzBBs2De8rBuOrMsC+8J2EvXqY45sA0PA=
Subject key identifier:   9A:92:E6:28:94:C6:38:9E:89:F4:70:A3:0D:D8:70:CC:D2:AB:B2:C3
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01DC
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/mpLmKJTGOJ6J9HCjDdhwzNKrssM.roa
Signing time:             Sun 01 Oct 2023 01:40:00 +0000
ROA not before:           Sun 01 Oct 2023 01:40:00 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        219.114.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:40:00 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=9A92E62894C6389E89F470A30DD870CCD2ABB2C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:6e:07:9b:a6:58:1d:d2:ba:da:cb:8a:9d:
                    cc:ba:7c:86:a9:af:7a:cf:ce:c7:a8:29:4d:f5:22:
                    39:0f:34:4f:ac:02:bb:9e:d7:fc:2a:31:1b:6b:e4:
                    7e:5a:83:45:03:ec:41:0b:6b:3f:85:7e:7e:0d:40:
                    69:f8:70:0d:29:2d:b9:71:73:4b:e5:58:5d:51:13:
                    6a:14:c1:e8:79:4c:dd:78:86:c5:02:c6:e6:3a:ba:
                    2e:bc:1f:17:ce:3c:f2:de:41:b6:fc:22:92:09:e0:
                    e0:cf:ed:4e:18:90:69:e9:ec:b6:e7:37:72:71:f7:
                    39:9a:eb:75:8e:2a:5c:89:85:30:de:59:62:bc:59:
                    4f:cc:3f:10:c3:fe:ae:af:ec:24:6b:bf:ba:f8:ad:
                    8f:2c:ad:d3:0d:a3:f2:54:b6:cd:84:21:86:0a:51:
                    a4:1a:5e:fc:60:d2:94:6c:d6:a8:6d:39:ad:19:b0:
                    40:67:14:7e:96:ee:d5:79:f2:91:89:14:eb:4b:2c:
                    bc:18:ee:a6:bd:3a:f0:a1:fa:5f:5d:cb:39:2b:56:
                    fc:65:25:3b:15:4e:a3:46:12:f2:c6:06:fb:53:96:
                    62:ed:29:48:09:07:8f:7a:f2:27:df:71:45:7c:f5:
                    ee:74:85:03:f2:e8:86:1f:f0:b2:c0:04:8c:f3:6b:
                    40:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:92:E6:28:94:C6:38:9E:89:F4:70:A3:0D:D8:70:CC:D2:AB:B2:C3
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/mpLmKJTGOJ6J9HCjDdhwzNKrssM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ab:49:cc:f4:7c:17:bc:9d:51:aa:e2:bf:02:f8:b7:ea:a8:aa:
         ed:37:aa:d6:d0:b6:f6:94:64:68:47:da:20:30:56:ca:d4:62:
         92:68:8f:f5:a6:89:e5:41:70:45:89:47:15:1d:76:64:ca:a3:
         9a:35:71:84:7a:f0:fe:a0:bf:ff:c4:1b:96:52:d8:5c:98:e2:
         cd:ab:f9:91:8a:98:4f:72:fb:e9:0b:b8:7b:ab:b7:51:72:b1:
         f8:4c:ae:b7:87:9e:a5:59:76:c4:6f:c9:10:12:de:b0:a5:9c:
         a8:84:5d:97:c9:55:9c:4d:52:1c:8f:03:e1:91:14:62:42:bb:
         c1:1a:73:e3:f4:c4:6b:87:55:15:49:53:27:5c:54:5c:32:fb:
         74:8f:70:58:ca:6d:f9:53:18:47:b8:e4:8f:86:5f:10:f4:83:
         86:cf:19:42:10:6e:2f:58:b6:fd:d3:5e:20:d3:92:04:de:68:
         a0:e0:a9:2a:d2:23:25:0a:2b:50:42:3e:6f:1a:5a:75:aa:12:
         fd:38:db:64:e9:20:4e:e1:b0:7b:24:5a:5c:c5:6c:c9:15:0f:
         ec:33:23:28:f7:1b:35:3d:71:be:69:b8:69:9b:b5:79:c1:63:
         4b:f9:ab:a0:dd:92:cd:c0:b3:27:61:06:87:33:eb:71:21:cb:
         44:76:85:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org