Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/GUD9DNzlSIzmZf3KskBByGPX6GM.roa
File:                     GUD9DNzlSIzmZf3KskBByGPX6GM.roa (raw, json)
Hash identifier:          uXwaDAfyl9407wnkGZueMxni2YZUGKKkLSujFaXyhLI=
Subject key identifier:   19:40:FD:0C:DC:E5:48:8C:E6:65:FD:CA:B2:40:41:C8:63:D7:E8:63
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0207
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GUD9DNzlSIzmZf3KskBByGPX6GM.roa
Signing time:             Fri 31 May 2024 01:29:12 +0000
ROA not before:           Fri 31 May 2024 01:29:12 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        27.133.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:29:12 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=1940FD0CDCE5488CE665FDCAB24041C863D7E863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e6:46:e0:25:b1:b3:64:c2:76:5c:7b:a2:10:
                    29:31:c3:c5:00:78:17:c2:3c:30:be:20:58:3d:e7:
                    3d:c7:f6:cd:cb:9e:94:5f:80:f0:71:85:8a:a7:ce:
                    07:b1:7e:69:83:63:8d:2e:86:ea:ae:aa:15:6b:04:
                    ff:38:02:f7:b4:98:ef:95:b5:09:77:9b:fc:6c:58:
                    86:b0:8b:5a:0d:0f:3e:88:cd:f0:85:ab:db:e2:5b:
                    e0:28:e5:1b:4c:75:77:de:3a:d5:b5:5e:a5:70:93:
                    7b:2e:44:e5:83:e4:75:63:67:1c:79:ce:6a:e8:c0:
                    7a:1e:4e:ab:79:e4:66:42:d9:cf:30:bb:8f:ca:db:
                    d3:3e:f2:ab:b9:27:80:d7:f7:85:90:13:e3:de:39:
                    fb:3a:52:5f:2d:cc:d0:c5:20:ab:fb:82:72:eb:f2:
                    e2:d0:8b:19:a1:56:d7:b8:1c:bb:72:5f:c1:49:ad:
                    f1:0f:42:59:25:20:7b:09:b7:25:bd:c4:7c:83:43:
                    f2:1f:0e:b4:1a:18:eb:a7:01:b3:48:a5:db:46:f2:
                    6c:80:35:47:bc:48:49:71:6e:f5:5c:42:7c:2a:f2:
                    ca:f8:3b:bd:de:64:6b:12:23:ee:66:d8:2d:d1:81:
                    1c:f7:ed:2f:16:00:5b:42:88:7d:70:5b:72:bc:8e:
                    d1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:40:FD:0C:DC:E5:48:8C:E6:65:FD:CA:B2:40:41:C8:63:D7:E8:63
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GUD9DNzlSIzmZf3KskBByGPX6GM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:79:ef:29:01:30:c4:13:a1:1e:52:75:9c:ed:e8:ca:ee:bc:
         0c:43:02:04:1c:7c:b0:af:bb:c2:bf:ad:d3:3b:05:7d:30:e5:
         d3:8a:29:76:cd:ab:3a:18:14:3f:73:fb:61:90:f7:7b:37:98:
         c5:cc:4d:52:ff:68:a3:ca:35:c4:95:5c:29:13:c8:d3:b0:b2:
         a8:58:b6:0e:48:ed:67:42:48:82:4c:67:5e:b4:2c:41:f7:d5:
         1a:f8:4c:37:0d:4b:ef:39:d7:86:8a:5d:40:17:6a:fc:af:5b:
         18:db:54:69:f4:58:bb:a4:15:ef:12:73:33:8d:0a:cd:43:82:
         7b:0e:f4:95:cf:2b:a3:20:b9:2f:2b:15:63:b5:a3:44:2d:13:
         73:c9:c7:f4:d3:d4:f5:7e:60:b0:6e:ed:ae:ea:75:21:58:c5:
         5e:de:c5:66:7f:cc:f5:6e:a9:6f:f7:aa:93:f6:d0:4b:f8:fb:
         a6:11:30:41:73:62:5d:40:39:86:86:be:d2:89:e8:5e:ce:7b:
         bc:81:84:62:f7:2b:72:bd:52:d5:f7:ae:95:67:4f:72:b5:9f:
         b8:6b:a2:e5:77:b6:a5:db:10:bc:ab:9a:12:19:36:c3:62:77:
         61:9c:15:95:26:81:2b:c5:13:4a:a1:7f:f5:cd:ba:dd:81:71:
         36:9e:1a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org