Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/28kPwA5trp3Yuiu_5JwJnF2KfuQ.roa
File:                     28kPwA5trp3Yuiu_5JwJnF2KfuQ.roa (raw, json)
Hash identifier:          4e8ffPeGB6Rmm1Sm66r/2aYen9dvWneqAwVkbncW8H8=
Subject key identifier:   DB:C9:0F:C0:0E:6D:AE:9D:D8:BA:2B:BF:E4:9C:09:9C:5D:8A:7E:E4
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0275
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/28kPwA5trp3Yuiu_5JwJnF2KfuQ.roa
Signing time:             Sat 31 Aug 2024 01:38:49 +0000
ROA not before:           Sat 31 Aug 2024 01:38:49 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        110.232.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:38:49 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=DBC90FC00E6DAE9DD8BA2BBFE49C099C5D8A7EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:39:9b:59:a6:db:98:69:c4:dc:7c:d1:3d:
                    f3:8b:a1:af:4b:cd:32:69:cd:d3:13:85:cd:e7:5f:
                    0b:2c:b3:33:0d:0d:e5:c0:8e:e9:6a:0d:04:13:ea:
                    a8:8b:db:73:b9:41:af:bd:5d:db:50:ef:10:62:a9:
                    6b:0a:da:87:02:bd:72:b9:eb:83:d5:00:02:7e:64:
                    ea:5f:f0:39:e8:4c:b7:5e:25:ac:ec:b5:23:23:2a:
                    31:99:e1:09:b1:d8:44:dc:c5:14:0d:aa:9c:d0:b8:
                    01:41:38:15:ac:2b:ed:b9:f8:24:6b:a5:0d:a8:a8:
                    eb:bf:60:17:22:3e:21:84:86:f4:20:e1:09:a6:04:
                    5c:4b:fb:19:a4:f2:c7:3a:d4:46:39:8d:2b:c2:df:
                    31:9e:75:fe:89:d7:4d:52:76:5e:82:4f:6e:5a:4b:
                    4c:d2:2b:61:20:a4:38:99:b6:28:ac:b3:56:08:6d:
                    39:07:4c:d0:30:3f:07:50:91:77:21:24:cd:00:3b:
                    75:a3:db:4d:1b:5a:30:76:a3:b5:91:30:a6:77:ba:
                    12:6e:04:a8:03:1c:fd:83:f5:b8:eb:94:af:f1:10:
                    84:af:25:d0:99:6a:d1:25:b2:f7:91:25:86:ca:f2:
                    2f:40:c0:5b:01:c4:aa:b6:79:61:02:2b:23:89:00:
                    20:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C9:0F:C0:0E:6D:AE:9D:D8:BA:2B:BF:E4:9C:09:9C:5D:8A:7E:E4
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/28kPwA5trp3Yuiu_5JwJnF2KfuQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:ff:c4:ff:5f:cf:54:6d:fb:c3:73:9b:90:fd:69:35:5b:af:
         83:92:e3:e0:4e:9e:50:24:3e:00:37:aa:6f:ab:b4:9e:2b:e7:
         2d:57:95:52:91:2e:63:bd:6f:0e:4c:18:e0:2b:0d:22:29:54:
         e6:77:ec:74:4e:90:8c:ae:12:8f:c5:91:44:10:b4:90:2f:8e:
         d7:58:54:4f:06:67:a5:7f:d4:2d:10:96:58:76:29:8a:5b:29:
         cb:f7:4a:08:71:f6:f8:8f:16:1a:b8:f1:ea:dc:cf:53:84:d9:
         f5:f4:73:39:c6:9f:ae:13:29:89:43:03:6c:df:16:3b:ca:17:
         25:3c:bf:8b:92:5f:09:d6:57:df:6c:e4:0a:2d:1a:b6:1f:2f:
         bc:00:3e:aa:0c:76:f8:c2:34:1f:f4:69:40:a4:4e:bd:78:dc:
         25:28:00:b3:91:39:85:67:70:fb:0e:85:69:1f:07:f4:1e:61:
         6c:68:80:5a:24:bb:9b:f7:92:f3:50:16:82:be:28:5d:ab:58:
         a4:55:96:cb:0f:92:5d:c0:0b:65:fd:06:8f:01:3b:98:f7:0e:
         47:b8:04:8a:2d:a5:55:c1:92:b4:8c:1f:84:67:9e:37:4f:03:
         22:35:0a:16:da:76:78:2a:a5:d4:66:a8:ad:9b:ef:98:09:b1:
         0b:64:19:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:33 2024 by rpki-client on console-fra.rpki-client.org