Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/3o9Dsfx1ZN6UlAELXhFuUrCo70U.roa
File:                     3o9Dsfx1ZN6UlAELXhFuUrCo70U.roa (raw, json)
Hash identifier:          o/1vfN4RTkIteT0NVqBEzkwGB5P6bWQWnj5yzpEp4/8=
Subject key identifier:   DE:8F:43:B1:FC:75:64:DE:94:94:01:0B:5E:11:6E:52:B0:A8:EF:45
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02DD
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3o9Dsfx1ZN6UlAELXhFuUrCo70U.roa
Signing time:             Sat 31 Aug 2024 01:44:38 +0000
ROA not before:           Sat 31 Aug 2024 01:44:38 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        116.70.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733 (0x2dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:44:38 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=DE8F43B1FC7564DE9494010B5E116E52B0A8EF45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:4f:d6:c5:28:43:eb:d1:a9:0f:6e:d5:b6:
                    aa:bc:44:06:8b:47:5b:6f:05:bf:61:66:1d:a2:3d:
                    d2:b8:be:b7:27:8d:7f:9b:2f:89:64:da:3b:8e:2d:
                    e7:50:b2:be:db:aa:0e:20:bc:f7:24:ce:a7:63:d9:
                    cb:4d:fb:2a:1f:1b:f8:6a:e5:89:7d:ad:4e:ea:74:
                    03:90:bf:74:28:15:54:01:f2:64:3e:49:69:6e:76:
                    8d:c6:b4:a4:c5:39:cc:e8:61:30:2e:18:43:cf:a9:
                    53:62:da:60:15:b5:a4:67:d4:96:1e:e3:d0:32:16:
                    3e:40:fe:f0:bc:b7:ac:e9:aa:dc:0f:d9:65:bd:3e:
                    de:b4:c4:46:41:24:42:56:b5:46:6e:81:81:7a:cc:
                    ae:ce:14:45:c1:0f:64:68:a4:42:4d:2c:3f:ed:af:
                    8a:37:0b:87:bd:6b:23:61:b7:15:6e:7c:00:7b:f6:
                    0f:51:08:d8:be:a8:9a:7b:9f:cf:ba:db:2a:2c:0f:
                    fc:5f:81:de:f3:6c:b6:1c:05:07:2a:cc:55:83:9d:
                    07:26:fd:db:18:9b:86:b9:46:08:bd:97:1c:67:37:
                    3f:95:6e:6e:ba:35:a5:b6:04:e6:e9:29:f5:2b:7d:
                    cd:ce:bf:ae:e4:0e:ea:e4:14:e3:ff:3c:02:b1:a4:
                    6b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8F:43:B1:FC:75:64:DE:94:94:01:0B:5E:11:6E:52:B0:A8:EF:45
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3o9Dsfx1ZN6UlAELXhFuUrCo70U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.70.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         76:3a:b0:7c:36:97:79:ac:65:89:83:32:86:07:f0:52:1c:ed:
         7a:9a:09:2a:3b:61:f3:57:5f:fa:2a:ba:45:b2:11:51:87:13:
         78:a5:e2:81:3d:b0:b3:f3:20:9d:23:72:ff:ed:37:0e:3a:aa:
         fc:f8:88:0b:ab:5f:98:c8:f1:f5:04:fe:ba:66:a5:0c:16:b5:
         05:77:9a:74:0e:b4:65:4b:19:f0:49:d9:5c:70:ce:2b:ec:e2:
         6c:97:1e:ae:b7:18:a8:3c:24:61:ac:49:66:ac:0a:b8:53:b3:
         a3:c7:d7:45:48:6f:75:10:28:c9:6a:d3:e8:26:5d:c2:97:bb:
         da:15:3f:aa:b7:39:a8:c6:45:b5:0b:87:4d:52:22:72:88:44:
         19:87:42:d2:17:68:6f:b3:0a:0c:91:d6:13:74:33:81:3d:ae:
         18:8e:c1:32:d9:78:ff:ec:01:d6:f5:65:e0:e9:2e:d3:43:17:
         16:ff:0a:83:59:ac:30:5e:d8:d4:8b:28:4c:6d:90:19:68:a2:
         54:48:36:30:f2:a3:47:65:9e:59:d8:9a:40:42:e2:4b:b7:ca:
         97:d5:1b:18:f6:07:ea:ce:38:fb:a0:20:6a:0c:47:5d:b5:29:
         e0:39:d0:73:fd:d3:70:06:d7:63:bb:7d:9b:96:a6:46:7d:aa:
         18:01:d5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:33 2024 by rpki-client on console-fra.rpki-client.org