Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/eHwYrxzO7skM7H4fk_2WoY_rVEU.roa
File:                     eHwYrxzO7skM7H4fk_2WoY_rVEU.roa (raw, json)
Hash identifier:          /MWKok4CLsHFoaVSQ8sPy2zRH0Qmq9tpuSDk37hxqhY=
Subject key identifier:   78:7C:18:AF:1C:CE:EE:C9:0C:EC:7E:1F:93:FD:96:A1:8F:EB:54:45
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       024D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/eHwYrxzO7skM7H4fk_2WoY_rVEU.roa
Signing time:             Fri 31 May 2024 01:35:35 +0000
ROA not before:           Fri 31 May 2024 01:35:35 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        27.135.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 589 (0x24d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:35:35 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=787C18AF1CCEEEC90CEC7E1F93FD96A18FEB5445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bd:71:34:c9:d7:93:58:d9:76:c0:a5:82:d7:
                    2b:2d:60:61:ef:74:38:14:a5:6d:34:c5:dc:a7:11:
                    d1:6d:64:b1:f3:4c:9b:b3:71:49:4c:2a:06:d5:d1:
                    b1:86:4e:8e:b9:a9:09:d3:b7:a0:36:c4:db:e1:63:
                    77:6b:3e:63:92:4a:5b:91:8e:52:99:b0:2e:8d:63:
                    7b:f3:ac:f3:5b:70:c5:3b:ea:ad:fd:56:5f:0b:3a:
                    f5:d3:a6:db:a9:16:89:46:9c:a8:a8:f4:51:60:88:
                    92:85:b6:86:07:f4:65:3c:49:8b:1d:31:0d:cd:5c:
                    14:43:dc:e5:15:7f:82:c5:f9:39:d2:83:32:42:fb:
                    2a:dd:e1:98:fd:b9:72:55:b6:86:10:29:49:55:24:
                    35:c6:c7:d5:de:1c:f6:f0:d7:ca:a6:bb:90:f5:11:
                    c2:8c:97:bb:0e:b9:e0:ea:96:a2:62:71:e6:55:40:
                    5b:af:8d:ae:51:45:b0:ad:12:00:cc:ff:61:4a:25:
                    e3:3e:1b:e6:d1:bc:bd:8b:57:47:8b:57:6c:6f:6b:
                    f3:93:ea:db:f2:c3:1a:b3:5f:79:be:b9:ea:42:07:
                    f1:de:64:29:81:31:46:0b:0c:15:02:22:4b:c4:09:
                    08:c7:af:03:be:7c:64:35:69:48:a8:83:7f:85:5e:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7C:18:AF:1C:CE:EE:C9:0C:EC:7E:1F:93:FD:96:A1:8F:EB:54:45
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/eHwYrxzO7skM7H4fk_2WoY_rVEU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.135.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:1b:71:6e:5b:9f:3a:c9:64:3b:7d:74:30:c5:39:46:02:a2:
         ef:9e:a2:6e:aa:87:22:af:d3:5d:33:d0:d7:60:9e:a9:a4:e8:
         21:ae:a1:54:4d:af:2c:97:d7:8b:c1:b2:b8:72:a7:36:61:15:
         52:88:e5:e3:f8:6f:3c:df:98:66:fb:d0:3d:2d:10:eb:71:6a:
         6c:d0:22:e0:74:7f:14:d6:b9:ea:27:cb:88:e9:df:04:73:3e:
         e3:38:85:cc:5b:35:59:39:f0:fd:41:6c:79:e3:5a:d3:b5:5d:
         ac:2b:f1:e1:71:48:2f:b3:b0:7d:a2:b2:31:99:59:ab:a3:20:
         51:df:49:e6:66:39:a1:3b:5b:ca:90:3f:10:d2:24:54:69:4e:
         a8:67:13:88:a9:8e:70:22:91:f7:76:1d:4b:7d:ad:c6:fe:aa:
         cf:80:b0:ad:9e:dd:47:24:98:e2:4f:44:f7:55:3c:63:50:27:
         ff:75:54:4d:35:ca:8b:ba:e2:43:b8:51:66:f2:b7:18:a7:5e:
         27:8c:a3:02:5f:57:9d:77:4a:7f:a7:93:4d:a1:ad:ad:55:32:
         4e:8c:85:72:14:33:63:f7:2c:78:a1:66:61:dc:29:08:ff:c8:
         6d:b3:dd:07:c1:56:25:09:7f:ef:ca:a9:cb:f3:9c:cd:87:2b:
         6d:19:0a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org