Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/msheLEipwpgrW2P7WjyhgqHetzk.roa
File:                     msheLEipwpgrW2P7WjyhgqHetzk.roa (raw, json)
Hash identifier:          GlNjV5RgMc+CE74caNSXB2FF7LDG654vRg9FMNeWdyw=
Subject key identifier:   9A:C8:5E:2C:48:A9:C2:98:2B:5B:63:FB:5A:3C:A1:82:A1:DE:B7:39
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       56
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/msheLEipwpgrW2P7WjyhgqHetzk.roa
Signing time:             Sat 31 Aug 2024 01:31:50 +0000
ROA not before:           Sat 31 Aug 2024 01:31:50 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9374
IP address blocks:        203.148.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Aug 31 01:31:50 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=9AC85E2C48A9C2982B5B63FB5A3CA182A1DEB739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:6e:4c:b7:97:08:73:84:03:b1:70:73:8b:
                    d3:71:bd:89:93:48:a7:f7:40:3d:73:da:eb:42:ab:
                    1f:fa:13:50:3f:ce:bd:0e:43:11:ec:c0:f9:06:8c:
                    f1:e7:be:f5:70:fd:f1:b2:fd:a9:b9:a2:c3:a1:c4:
                    91:d1:fb:0b:8c:2a:14:89:1e:ad:fd:9b:eb:4c:cf:
                    d8:b9:65:81:84:f1:e6:b8:d6:17:a7:e3:8f:c3:6d:
                    91:74:e6:b7:0f:b6:cd:42:d7:12:d6:35:17:1f:50:
                    3e:d1:85:c9:83:bf:03:3d:16:d4:96:72:d4:2b:e4:
                    8c:5a:34:8b:af:a1:a8:70:ed:67:d3:0c:5b:9e:cd:
                    e3:8a:60:b7:dd:6b:42:45:c0:86:14:f9:9c:3b:de:
                    64:fd:02:cd:2c:6e:58:10:0c:8b:ff:5b:48:3c:40:
                    ed:d7:87:5d:c5:f0:a9:19:60:0c:e1:3e:b2:cb:e6:
                    d4:96:d5:ef:bc:9e:77:92:47:bb:95:15:cc:3c:82:
                    4b:22:ff:0a:88:48:27:62:bb:f6:a2:6b:51:ac:a8:
                    ee:01:8e:96:f4:eb:1f:f8:f4:d6:78:e2:5d:f8:49:
                    b9:8e:18:3a:f3:9d:93:c1:72:ec:e3:d7:c7:cf:71:
                    93:f6:60:65:23:a1:f3:6c:e5:56:9a:0d:8d:c7:74:
                    28:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C8:5E:2C:48:A9:C2:98:2B:5B:63:FB:5A:3C:A1:82:A1:DE:B7:39
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/msheLEipwpgrW2P7WjyhgqHetzk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.148.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         03:d6:61:67:24:5d:0e:b0:d4:1b:a2:cb:fe:c2:4a:2e:c0:d7:
         49:64:fd:9b:8a:f6:cd:56:79:32:b3:ea:6b:77:4d:0d:e8:94:
         7e:c4:c5:cf:22:25:40:51:f0:70:7d:f9:f3:f8:09:f4:c5:f8:
         09:8b:51:7a:b8:df:dc:da:8a:32:41:5e:24:27:7d:7f:b7:09:
         c3:3e:04:88:09:e3:5e:1d:b1:32:98:a0:ba:f1:d2:30:7e:48:
         5e:6b:43:f9:92:f3:6b:04:fb:42:8e:b5:39:42:ef:95:f5:3a:
         1e:a0:64:2e:10:1a:dc:bf:58:87:1f:24:8e:08:14:51:38:95:
         5e:8b:a6:cc:ad:bc:07:ff:3a:fa:08:35:d4:78:42:5b:f4:f9:
         fb:9e:20:8c:86:5c:57:53:aa:c5:9e:ca:8c:5d:2b:a2:6b:e1:
         5e:9e:f7:92:dd:f7:c6:1e:8b:55:65:f4:bb:e6:4c:05:91:25:
         80:ce:81:e7:10:55:5e:ed:20:31:d6:ae:ad:49:19:16:37:10:
         8e:6f:88:4b:ef:74:51:d3:72:cd:48:e3:5a:a5:b1:6c:d7:00:
         aa:10:f2:0c:81:2a:1f:b2:3e:6f:af:85:6a:16:50:08:11:f5:
         34:9d:ba:20:40:a8:ac:07:a2:28:78:90:ea:2e:a4:56:a0:4f:
         ab:d4:d4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:17 2024 by rpki-client on console-fra.rpki-client.org