Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/W9g8leb5mox7ArSdPS4p10jmQD0.roa
File:                     W9g8leb5mox7ArSdPS4p10jmQD0.roa (raw, json)
Hash identifier:          +ovS6Qxsf/pzsrqzJtkdynU4AE9EBgfYqhi8BSMDBA0=
Subject key identifier:   5B:D8:3C:95:E6:F9:9A:8C:7B:02:B4:9D:3D:2E:29:D7:48:E6:40:3D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0247
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/W9g8leb5mox7ArSdPS4p10jmQD0.roa
Signing time:             Fri 31 May 2024 01:35:32 +0000
ROA not before:           Fri 31 May 2024 01:35:32 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        27.133.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:35:32 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=5BD83C95E6F99A8C7B02B49D3D2E29D748E6403D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3a:5c:70:9f:95:86:48:29:15:90:50:24:66:
                    73:d4:65:ba:63:03:b0:4c:02:79:2e:6a:a8:ac:b6:
                    32:44:bf:13:d8:df:01:38:93:e7:1c:a7:ab:da:e3:
                    08:05:11:19:8d:26:0a:0f:07:52:cb:d1:d7:11:80:
                    92:5c:14:0d:a8:c3:d4:a5:76:d1:7e:c5:a7:57:15:
                    99:75:4a:dd:b7:a6:e9:c5:28:37:14:0c:c8:99:3b:
                    a8:48:50:43:1a:0d:9d:71:d8:0a:ff:48:83:e7:73:
                    d0:53:64:45:f4:c3:ad:aa:df:5d:c9:27:89:67:e1:
                    98:b4:a4:f5:52:40:48:90:6e:98:9c:a4:5e:1c:0e:
                    d6:0c:2b:e9:ec:74:1a:6d:cf:ee:b2:fa:8b:f3:8b:
                    06:09:6e:fa:38:de:57:0a:8f:3e:eb:d2:3a:48:34:
                    17:48:69:53:ce:5d:90:7f:35:40:8c:9f:72:09:c6:
                    4d:0e:c8:6a:4d:8e:fb:f6:94:62:40:fa:62:29:5f:
                    e7:62:e8:bd:b8:db:6c:71:fa:22:08:97:36:20:53:
                    a2:3a:45:0e:85:e8:44:a7:6b:d5:47:79:e6:56:6f:
                    2e:5f:ad:dc:55:ed:11:df:69:52:f8:65:6b:f4:55:
                    26:b5:09:8f:f2:08:2c:26:11:b9:af:ea:79:80:2b:
                    e0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D8:3C:95:E6:F9:9A:8C:7B:02:B4:9D:3D:2E:29:D7:48:E6:40:3D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/W9g8leb5mox7ArSdPS4p10jmQD0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7e:b8:14:60:10:53:81:f2:12:51:66:d2:e3:06:d0:b4:a3:13:
         b3:d9:ee:7d:60:f8:23:29:24:1b:35:ee:84:27:c9:be:90:95:
         5a:1c:06:a1:0a:ed:ab:14:c4:77:55:b1:86:c0:87:cb:ce:a9:
         41:31:da:2a:3c:4d:19:55:74:f7:b7:84:46:27:01:98:b8:7c:
         4e:2b:32:ac:ea:d1:ba:7a:07:5d:ad:89:2d:78:29:dc:18:ba:
         5c:da:92:16:47:4f:c5:4e:79:21:b8:cb:8a:2a:61:04:bf:f1:
         4a:0b:e5:1d:10:df:6f:e2:41:16:91:7a:45:dc:32:e1:66:de:
         e1:45:8f:f3:01:17:60:25:4e:fb:12:42:88:84:50:e1:59:0a:
         d9:ea:aa:9d:4c:ff:ac:a8:25:f8:68:26:ec:fa:c4:48:58:b8:
         30:8e:88:9c:cf:90:1c:9e:68:0e:ab:99:c8:6f:4d:00:9d:c9:
         f1:62:23:12:73:05:1b:a7:78:5a:8d:10:37:4e:30:09:2c:bc:
         51:61:af:42:ff:c8:02:4d:3e:d7:4f:4c:40:b1:dd:a4:91:bc:
         6b:50:c9:cc:a6:15:cf:e0:51:86:8b:09:52:a1:7c:c7:99:3f:
         5e:80:aa:c4:75:8b:45:13:56:84:7b:28:2a:c0:a3:0c:9b:f1:
         c8:b1:0d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org