Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Q-7oGAIStJsygQGmJdr5JQKFu6o.roa
File:                     Q-7oGAIStJsygQGmJdr5JQKFu6o.roa (raw, json)
Hash identifier:          QuHVvNrTMQvYQdR4P3zbKvZh8x/1gtM8kDnviuqQq5k=
Subject key identifier:   43:EE:E8:18:02:12:B4:9B:32:81:01:A6:25:DA:F9:25:02:85:BB:AA
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01E5
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Q-7oGAIStJsygQGmJdr5JQKFu6o.roa
Signing time:             Sun 01 Oct 2023 01:40:04 +0000
ROA not before:           Sun 01 Oct 2023 01:40:04 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        116.70.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:40:04 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=43EEE8180212B49B328101A625DAF9250285BBAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8f:55:e3:d3:1f:5d:6d:a6:17:47:cd:09:d5:
                    32:89:85:2f:b5:56:ca:9e:f1:b1:ce:cd:20:cf:54:
                    ce:4d:17:b6:9b:61:d6:df:8d:de:e9:35:c9:56:db:
                    eb:8f:d7:63:60:43:9b:19:9c:8a:40:15:f1:bf:bf:
                    15:94:b0:4f:e5:5d:bb:af:74:d6:2d:58:da:ad:c8:
                    30:fa:6d:23:b4:88:32:95:f8:87:ec:41:4d:93:bf:
                    8b:6d:e7:b8:44:34:7c:e4:98:1a:f7:d8:72:94:44:
                    f1:dc:8f:06:2c:21:99:46:9f:33:75:48:86:dc:74:
                    c7:42:1c:f4:ec:35:07:00:30:ea:c5:35:fe:86:4c:
                    26:1e:a5:80:92:b7:2d:bb:80:74:eb:fe:d6:ed:92:
                    7d:08:27:c0:07:e8:bd:3c:f1:2e:ae:e9:33:0b:23:
                    e0:d2:89:48:bd:0b:f7:b6:29:40:d3:3a:0f:bf:2d:
                    94:98:eb:f0:5b:ea:b1:9c:e3:90:39:47:d6:a4:60:
                    10:fd:c0:64:36:8a:80:50:a2:7c:20:ee:5a:fe:1a:
                    93:0d:b3:dc:a8:b1:a1:97:c7:38:9b:c7:eb:4c:f2:
                    ee:98:e5:7d:3e:e2:7d:ff:23:aa:86:03:ff:17:9a:
                    bb:21:f1:cb:37:40:ef:14:14:af:37:a8:7b:33:b7:
                    67:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EE:E8:18:02:12:B4:9B:32:81:01:A6:25:DA:F9:25:02:85:BB:AA
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Q-7oGAIStJsygQGmJdr5JQKFu6o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.70.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         47:45:48:47:4a:60:e3:7d:e1:ba:01:f4:64:67:2c:a9:07:3c:
         ec:89:9a:d6:88:ff:5a:90:a7:cc:b0:68:45:5a:73:60:3d:1e:
         2f:eb:57:2d:2c:7b:94:87:ea:ed:ac:fd:a0:8d:6d:82:82:bb:
         5f:ed:42:dd:9f:1f:5b:b2:7f:b6:77:67:5b:bf:47:05:85:f1:
         ab:dc:70:9f:8f:c2:ba:10:f9:8b:a7:5e:e4:0e:94:1a:7d:22:
         f1:70:98:0b:ec:c1:81:bf:05:d8:af:17:ba:43:3d:88:6e:6e:
         47:49:3c:84:fc:b6:47:33:19:97:2c:80:e0:fb:68:3b:72:e2:
         58:56:8b:c4:1b:90:c9:db:75:3e:a4:0f:d5:1b:a3:81:28:56:
         62:fb:40:c2:33:e8:03:ba:7b:29:97:60:53:1a:fd:e6:c2:dc:
         f4:67:72:46:d4:f4:14:34:10:ab:35:f0:9f:f9:58:fe:21:62:
         b9:b7:c9:49:4b:6a:cf:07:53:bb:be:92:12:88:ad:c3:0f:a5:
         90:f9:e8:9c:71:60:bc:44:2c:f2:cc:ab:8b:88:b6:a6:d5:6e:
         fd:c7:27:5e:09:62:3e:29:7a:77:be:38:17:ec:3b:6d:da:c7:
         a0:5c:4c:08:8f:6f:a6:72:2d:4f:74:7e:ff:e0:bf:ab:c6:12:
         38:ec:a1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:55 2024 by rpki-client on console-fra.rpki-client.org