Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/QbQwGeRTh1K6uah9gqyXZ4aL4yc.roa
File:                     QbQwGeRTh1K6uah9gqyXZ4aL4yc.roa (raw, json)
Hash identifier:          JohzsPYGcR4/VZqFIFAzGLR4uU+BiCbfh0lIMtUuJIY=
Subject key identifier:   41:B4:30:19:E4:53:87:52:BA:B9:A8:7D:82:AC:97:67:86:8B:E3:27
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0249
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/QbQwGeRTh1K6uah9gqyXZ4aL4yc.roa
Signing time:             Sat 31 Aug 2024 01:33:35 +0000
ROA not before:           Sat 31 Aug 2024 01:33:35 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     18136
IP address blocks:        27.126.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:33:35 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=41B43019E4538752BAB9A87D82AC9767868BE327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4c:02:b3:46:29:dc:28:f7:07:92:88:23:d3:
                    ae:b3:5b:40:13:6e:16:42:a1:20:6a:2b:c6:07:48:
                    fd:36:01:f0:f0:6e:de:f8:1c:54:3d:38:08:f7:d2:
                    1f:7c:35:e8:25:48:4b:14:f2:50:84:ef:6d:a1:c4:
                    65:a9:23:b2:13:66:52:46:95:50:95:52:87:12:bd:
                    94:b8:e4:33:aa:3c:2f:29:8c:93:47:df:82:8a:25:
                    d2:41:82:81:41:3b:ca:e2:75:cc:c2:d5:08:80:73:
                    f0:90:d1:48:44:37:36:5b:5c:b3:87:2a:ef:20:4e:
                    c2:76:ca:d8:d4:90:4c:17:f9:1b:bc:c9:22:59:dc:
                    2a:ff:72:bd:37:d1:c9:64:d4:f2:18:5b:3e:92:38:
                    fb:77:e7:18:e3:96:c5:ab:87:79:40:99:ca:16:97:
                    c5:c5:fc:ec:56:50:fe:31:e4:d3:36:5f:7b:05:7b:
                    cc:4a:2f:b4:1f:a1:78:4a:a0:27:1c:83:58:d7:1e:
                    f6:49:fa:ff:0d:a4:40:df:aa:de:bf:0c:9f:ba:c9:
                    03:22:d7:13:99:e5:65:56:09:15:05:b9:09:14:5c:
                    4e:b4:47:15:59:01:48:8a:71:3f:10:5b:51:07:f4:
                    cb:25:b8:16:52:45:d2:58:f9:d9:45:b7:17:0e:05:
                    f4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B4:30:19:E4:53:87:52:BA:B9:A8:7D:82:AC:97:67:86:8B:E3:27
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/QbQwGeRTh1K6uah9gqyXZ4aL4yc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.126.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:8b:b0:72:cf:a5:24:56:97:e7:73:c1:fa:4f:b7:3b:03:30:
         51:37:01:4a:aa:88:0e:77:03:7c:bd:5c:f2:6c:9d:85:bf:6e:
         8a:14:fd:02:44:30:ae:a8:b2:3c:1f:75:4b:f0:f4:e0:e0:ff:
         bc:3c:8d:04:f1:c3:be:f8:fa:96:ef:c9:bc:5a:03:00:bc:67:
         68:03:67:d6:99:ca:8c:58:7c:79:9d:66:f6:b0:fd:ae:7c:35:
         fc:60:1e:d5:43:b4:08:bc:3d:50:61:14:eb:f3:f4:00:23:75:
         e7:bd:1b:aa:1e:3e:24:ad:88:2b:4b:41:7a:a8:2e:e0:00:5c:
         d8:32:71:ad:f6:43:1a:3e:c9:03:19:db:e4:f2:ba:3b:a8:cd:
         02:0a:9d:4b:e4:a1:c8:5b:a9:48:39:4b:61:b4:18:af:23:f4:
         5e:8f:23:8a:e9:ec:f9:c5:d4:a2:0f:8a:71:30:a7:47:dc:c7:
         00:d7:18:20:5b:b3:33:8e:dd:cb:cc:3d:2b:cb:3a:42:51:d7:
         2f:07:8f:ee:21:b6:8b:a8:76:36:8d:4d:8f:a9:16:3f:bd:56:
         a1:b2:91:6c:71:a8:f9:80:4a:a4:f1:b3:86:41:2c:27:0b:93:
         02:4c:72:a3:73:a2:0a:3e:b1:8c:1c:e6:41:28:2b:eb:8c:aa:
         c7:fe:63:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org