Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/B-1yhyfttm07cEYyX6cBt7wJ5Gg.roa
File:                     B-1yhyfttm07cEYyX6cBt7wJ5Gg.roa (raw, json)
Hash identifier:          2zzWUW0ekDx5PLD8FYOofulnK4KAikrLcCXBa9/CBjw=
Subject key identifier:   07:ED:72:87:27:ED:B6:6D:3B:70:46:32:5F:A7:01:B7:BC:09:E4:68
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       0B
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/B-1yhyfttm07cEYyX6cBt7wJ5Gg.roa
Signing time:             Mon 18 Mar 2024 01:29:31 +0000
ROA not before:           Mon 18 Mar 2024 01:29:31 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     17698
IP address blocks:        116.12.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar 18 01:29:31 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=07ED728727EDB66D3B7046325FA701B7BC09E468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a9:c3:56:ae:30:5f:1c:64:f5:72:29:65:0c:
                    3f:42:7c:3a:6b:25:e8:41:ae:08:a8:76:b4:d3:d2:
                    06:02:64:2b:d5:c1:bd:63:c8:a8:ae:c2:cb:61:23:
                    be:db:5a:e8:9c:3e:d4:83:30:36:b0:f9:04:c2:48:
                    da:02:2c:d7:14:42:de:10:2e:5a:d1:1d:f2:ef:43:
                    ba:31:53:88:d5:1a:c2:62:3d:5b:b5:38:66:b7:ce:
                    32:19:dc:e3:fa:74:4f:1a:02:24:64:5c:b0:72:47:
                    07:ae:a1:88:df:5e:a2:df:1b:a2:74:cf:45:b1:99:
                    cb:39:8d:c1:1a:2f:33:2c:95:60:1e:4d:5d:a6:0b:
                    52:e2:70:b9:5e:13:4a:5e:21:42:ef:70:1b:58:2e:
                    0b:cf:65:de:c7:3d:30:d4:1f:a2:8e:af:1a:3e:42:
                    9a:ac:14:5d:ac:fd:5f:03:97:7b:69:3c:aa:e5:0e:
                    5e:a6:ef:e5:70:99:a2:49:e2:0e:71:e7:9e:55:0e:
                    b3:14:6f:b9:3e:85:be:94:c7:19:c4:bb:77:98:b9:
                    be:3e:94:c4:52:3c:e7:99:f0:bd:15:01:f9:4b:a3:
                    ac:da:08:81:a6:45:51:9f:65:54:71:17:4e:0a:ef:
                    4c:db:d6:ae:0a:0f:bc:8d:17:40:f8:69:85:8f:c8:
                    a4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:ED:72:87:27:ED:B6:6D:3B:70:46:32:5F:A7:01:B7:BC:09:E4:68
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/B-1yhyfttm07cEYyX6cBt7wJ5Gg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.12.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         98:d9:a7:7e:30:f3:d5:80:bb:dd:5f:b8:41:77:a8:c6:86:33:
         94:88:e3:92:a3:08:95:56:93:b7:d0:8d:bf:04:1c:f0:ba:7a:
         10:c2:08:ea:d8:9e:80:a5:b3:e7:af:0b:9f:c7:ca:6d:37:0e:
         12:6e:ab:8e:46:19:ae:0b:d2:12:a4:05:12:b1:4a:a4:95:d6:
         7a:4a:cc:a2:78:80:9d:e7:50:e8:d3:d5:6b:f6:43:d4:a6:cd:
         89:18:6a:d4:90:10:01:c5:9b:c3:73:56:24:72:6a:ab:4a:80:
         7d:2b:20:29:2f:f2:14:bf:f0:ee:3e:a5:b6:19:99:d0:39:f2:
         74:68:46:f5:ef:6d:1e:f8:8d:d1:c7:74:96:0d:ad:c3:16:14:
         5b:6c:12:89:2a:7c:8f:61:16:8d:36:27:4c:6f:30:08:13:f9:
         c1:69:3f:70:5b:aa:53:02:23:49:89:87:16:af:cf:56:77:c4:
         15:7a:f1:c2:2e:a3:64:d0:00:af:77:9b:0d:83:c1:6d:7e:1b:
         72:81:2f:81:24:be:f5:6d:d1:17:3b:03:08:56:52:67:48:89:
         88:c7:27:3d:11:74:93:30:b2:54:6a:37:95:29:4e:bc:93:85:
         23:22:09:b9:2a:73:5c:c7:fa:54:8a:8e:a0:6e:66:1d:bd:1a:
         c4:2a:e6:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:27 2024 by rpki-client on console-ams.rpki-client.org