Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/hQ34qwAr6BMt10IRfjMaTssi5S4.roa
File:                     hQ34qwAr6BMt10IRfjMaTssi5S4.roa (raw, json)
Hash identifier:          fy9zgheA8VBRerocACUJx0X9HqPeeFN9Ozz681KuV4g=
Subject key identifier:   85:0D:F8:AB:00:2B:E8:13:2D:D7:42:11:7E:33:1A:4E:CB:22:E5:2E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0249
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/hQ34qwAr6BMt10IRfjMaTssi5S4.roa
Signing time:             Fri 31 May 2024 01:35:33 +0000
ROA not before:           Fri 31 May 2024 01:35:33 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        27.134.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:35:33 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=850DF8AB002BE8132DD742117E331A4ECB22E52E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:06:61:ea:2c:3d:66:fb:e5:76:3b:73:df:ac:
                    d7:0d:74:77:76:f2:79:c4:de:0f:d3:66:dc:31:a6:
                    b7:37:5f:a8:ea:b8:c1:01:a5:39:c0:37:d9:5f:f7:
                    a8:19:f5:fd:ec:18:1c:09:9a:fd:c9:d1:a9:51:6b:
                    e7:b0:a5:9c:74:a0:29:22:74:fc:26:5e:26:29:07:
                    42:22:3a:0d:81:b9:83:5c:3d:e2:9b:c3:dc:c2:6b:
                    87:24:54:4c:97:ad:2d:fc:20:6d:30:cf:90:f6:95:
                    31:c3:26:11:e4:8c:3c:75:90:5e:3c:c6:a6:9c:61:
                    7b:c1:d6:07:72:69:3c:1e:5e:5e:e2:0b:8f:eb:1d:
                    72:3d:a3:0f:cf:c4:77:0a:7c:e0:0d:34:46:3b:3b:
                    1c:ba:f2:75:5d:5c:5c:31:1a:c3:d2:ba:7d:a2:ed:
                    28:30:22:0c:cd:d6:40:93:3f:98:d1:57:58:1b:0a:
                    b6:98:31:56:68:f7:95:aa:cf:8a:8b:66:0d:6f:64:
                    6e:74:63:00:94:3a:bf:cc:89:5b:8e:1b:ba:44:0f:
                    20:cf:2f:7c:88:d6:b8:fd:a4:60:ab:65:7e:dd:59:
                    48:c6:04:66:ee:a9:76:41:eb:2f:75:52:fa:44:ff:
                    8e:fc:a1:38:2c:62:fe:9b:53:df:8c:37:56:8d:90:
                    ba:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0D:F8:AB:00:2B:E8:13:2D:D7:42:11:7E:33:1A:4E:CB:22:E5:2E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/hQ34qwAr6BMt10IRfjMaTssi5S4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:67:bd:bd:7a:56:21:e4:c0:d0:6e:4d:17:38:1f:b9:6d:24:
         ee:00:85:1c:6c:48:b6:8a:7c:fa:f0:0b:1d:9b:d0:85:e3:4b:
         7f:f7:1f:da:82:2c:b0:fa:d2:b8:a5:b4:3e:df:7f:ec:eb:47:
         db:ad:10:58:d6:36:60:e6:47:cf:b5:8c:c7:e6:48:3e:2a:78:
         ec:eb:70:fb:e1:9d:24:cb:88:1c:ab:54:91:8c:93:be:2a:68:
         76:1f:ca:34:be:31:81:16:a1:6c:58:c1:79:eb:85:75:fc:d7:
         56:e0:b6:0f:0c:f2:22:92:44:a8:3a:bc:83:6b:c8:a6:59:c6:
         11:f2:6c:9b:5b:e3:9b:d9:70:0f:b2:06:d0:41:1d:ef:c0:40:
         30:b0:66:b8:b4:b2:f3:96:38:3d:b3:6e:0b:d2:f2:3a:aa:ab:
         2a:ea:66:6f:e9:85:5d:da:21:3a:d6:f2:bb:15:6d:3b:bb:5f:
         b4:42:d3:a3:fe:ac:56:d5:38:5a:d4:41:e4:1c:75:39:39:c6:
         ac:61:9e:46:bb:ec:8b:a9:b6:ff:62:d0:8f:05:5a:eb:de:73:
         2d:bd:1e:53:f3:ea:00:f7:55:6c:e2:41:47:ac:d7:15:ce:33:
         5d:71:8f:9d:a6:e0:6c:cd:77:6a:69:a3:d5:32:9f:84:a6:08:
         f7:a0:a2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org