Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/d9lr8mpzVC6KShTI2PpjVPZC4zk.roa
File:                     d9lr8mpzVC6KShTI2PpjVPZC4zk.roa (raw, json)
Hash identifier:          4uWACceyANWx99uS+l994Ksq/ZwUl8C5c/E5hXIkxLI=
Subject key identifier:   77:D9:6B:F2:6A:73:54:2E:8A:4A:14:C8:D8:FA:63:54:F6:42:E3:39
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       024A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/d9lr8mpzVC6KShTI2PpjVPZC4zk.roa
Signing time:             Sat 31 Aug 2024 01:33:35 +0000
ROA not before:           Sat 31 Aug 2024 01:33:35 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        27.126.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:33:35 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=77D96BF26A73542E8A4A14C8D8FA6354F642E339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b6:79:91:ac:42:4c:5f:c2:c5:30:b8:18:83:
                    05:d6:3e:0b:8b:61:b2:b0:54:8e:4d:4a:96:2b:23:
                    4c:6e:46:3f:66:82:a6:c6:5a:1a:61:6f:c1:69:04:
                    1a:cc:84:ad:44:b4:9c:81:c5:c3:80:65:e5:d1:74:
                    00:85:f8:43:70:70:87:15:fc:c7:cc:9f:29:b5:cb:
                    d5:9f:c4:eb:04:db:43:75:fa:b3:1a:ad:21:eb:91:
                    51:b4:c4:ec:f3:a2:6c:8d:89:12:9e:43:d6:cd:9a:
                    a5:cc:55:58:a4:bd:be:41:53:26:01:93:b9:9b:80:
                    4a:9d:ec:20:f7:a1:0c:24:7a:f7:93:df:79:06:3d:
                    57:61:79:29:b5:ec:47:f4:73:1c:c0:e6:18:93:47:
                    d4:4c:46:a2:e4:af:71:94:55:68:7c:e0:1c:95:95:
                    7c:f5:46:fa:5e:e6:c0:f4:b6:12:2f:ba:d0:8c:23:
                    98:f8:03:64:05:ed:11:8a:7c:05:22:8a:33:ff:32:
                    95:f4:13:eb:31:b1:74:cf:56:9e:20:a8:9f:18:0a:
                    c7:7f:ae:45:5e:b8:08:d5:44:d2:86:bc:2d:d5:e5:
                    ba:da:e7:21:f0:77:77:5d:88:48:11:33:62:ff:0f:
                    fe:72:31:ce:67:27:5c:65:50:0b:d6:89:79:ed:76:
                    a3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D9:6B:F2:6A:73:54:2E:8A:4A:14:C8:D8:FA:63:54:F6:42:E3:39
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/d9lr8mpzVC6KShTI2PpjVPZC4zk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.126.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1c:22:13:86:94:5a:b2:38:ca:38:6d:12:21:58:34:54:63:21:
         4a:4c:5e:54:88:4d:a7:1d:ac:8b:0d:17:bd:bf:7a:53:8f:4a:
         ca:87:b5:97:e8:b3:c5:05:e8:2e:da:fc:e8:9f:e0:b8:e6:a0:
         ef:fc:5e:ca:d3:f0:ad:8c:8a:92:bb:51:24:2d:f8:72:ee:67:
         6f:52:21:03:77:06:b4:3a:58:e8:8b:0c:1a:61:b7:5c:32:9c:
         85:e6:fd:c0:09:85:fa:10:9f:37:4b:f0:4d:2f:8f:a6:ee:56:
         e4:b8:e1:b5:3a:aa:28:2f:47:f9:49:b8:6a:f2:8e:b9:1f:b4:
         10:9a:af:de:4d:a4:ee:cd:c7:83:32:97:37:51:a5:94:70:91:
         4f:11:7a:c4:db:ad:eb:6a:87:98:42:77:1b:37:80:03:f2:fb:
         ad:4d:54:32:04:18:30:8e:e2:52:df:b2:c0:c0:0c:cb:99:63:
         08:04:ea:a0:83:f2:94:b5:c3:53:d3:8a:95:5b:3e:3e:62:76:
         23:0f:da:1a:83:f8:61:54:49:74:03:04:5a:d3:b0:b0:71:cf:
         37:00:1d:fe:57:5c:72:79:29:85:87:0f:af:5e:19:4b:47:60:
         7b:54:ba:5c:d7:5d:dd:65:47:fa:d5:9f:cb:25:90:f2:b9:6d:
         17:62:28:97
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAkowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw
MTMzMzVaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc3RDk2QkYyNkE3MzU0
MkU4QTRBMTRDOEQ4RkE2MzU0RjY0MkUzMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDotnmRrEJMX8LFMLgYgwXWPguLYbKwVI5NSpYrI0xuRj9mgqbG
Whphb8FpBBrMhK1EtJyBxcOAZeXRdACF+ENwcIcV/MfMnym1y9WfxOsE20N1+rMa
rSHrkVG0xOzzomyNiRKeQ9bNmqXMVVikvb5BUyYBk7mbgEqd7CD3oQwkeveT33kG
PVdheSm17Ef0cxzA5hiTR9RMRqLkr3GUVWh84ByVlXz1Rvpe5sD0thIvutCMI5j4
A2QF7RGKfAUiijP/MpX0E+sxsXTPVp4gqJ8YCsd/rkVeuAjVRNKGvC3V5bra5yHw
d3ddiEgRM2L/D/5yMc5nJ1xlUAvWiXntdqNPAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUd9lr8mpzVC6KShTI2PpjVPZC4zkwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL2Q5bHI4bXB6VkM2S1NoVEkyUHBqVlBaQzR6ay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYbfkAwDQYJKoZIhvcNAQELBQADggEBABwiE4aUWrI4yjhtEiFYNFRjIUpM
XlSITacdrIsNF72/elOPSsqHtZfos8UF6C7a/Oif4LjmoO/8XsrT8K2MipK7USQt
+HLuZ29SIQN3BrQ6WOiLDBpht1wynIXm/cAJhfoQnzdL8E0vj6buVuS44bU6qigv
R/lJuGryjrkftBCar95NpO7Nx4MylzdRpZRwkU8ResTbretqh5hCdxs3gAPy+61N
VDIEGDCO4lLfssDADMuZYwgE6qCD8pS1w1PTipVbPj5idiMP2hqD+GFUSXQDBFrT
sLBxzzcAHf5XXHJ5KYWHD69eGUtHYHtUulzXXd1lR/rVn8slkPK5bRdiKJc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org