Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ieZojsf9eJ-VjMg3zlfaReqzYIc.roa
File:                     ieZojsf9eJ-VjMg3zlfaReqzYIc.roa (raw, json)
Hash identifier:          xxP8kCfNxQmpGVpMF6+jRg5cIvfAe+LvWs5qHyypgwQ=
Subject key identifier:   89:E6:68:8E:C7:FD:78:9F:95:8C:C8:37:CE:57:DA:45:EA:B3:60:87
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0206
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ieZojsf9eJ-VjMg3zlfaReqzYIc.roa
Signing time:             Fri 31 May 2024 01:29:12 +0000
ROA not before:           Fri 31 May 2024 01:29:12 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        27.132.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:29:12 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=89E6688EC7FD789F958CC837CE57DA45EAB36087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ad:d9:03:f4:d9:1a:24:d2:78:a9:f6:37:c2:
                    38:8e:2d:c7:bf:da:90:59:60:71:df:2e:36:9c:27:
                    0c:2f:17:ab:d5:b8:f3:62:90:45:25:55:ed:1d:f9:
                    46:30:3f:18:67:55:89:05:ee:cb:de:05:60:de:a7:
                    b5:f1:4d:0f:dc:a7:ce:05:f0:2f:69:05:8b:99:3b:
                    96:c9:27:d4:35:24:9a:bb:5a:03:54:e1:96:84:f1:
                    4f:26:bd:ab:bc:f0:44:86:9c:4a:bc:70:48:02:2b:
                    25:bc:bc:0c:22:31:c7:55:45:91:b9:6f:6b:f4:bf:
                    53:d5:74:55:4e:b5:52:bd:b2:de:cb:09:4a:b1:29:
                    c4:79:f5:4b:03:c1:29:ac:19:0d:b5:27:be:73:24:
                    e9:3a:b7:f0:7b:7f:73:a9:f9:bc:67:82:93:1a:09:
                    bc:44:ae:e2:98:65:02:0e:6b:2e:c8:03:61:25:13:
                    2a:3f:3c:b3:d8:5a:77:e2:da:85:0b:3f:a3:12:b6:
                    09:b6:68:46:83:a8:bb:87:7b:34:50:bf:0d:ef:12:
                    3d:d4:d0:e1:93:17:c9:13:db:e6:a0:d2:ad:20:da:
                    70:e0:26:e1:ba:c6:41:f7:57:c4:ad:7b:3c:0a:0a:
                    2a:fe:42:17:43:16:c1:5a:9a:e0:aa:98:42:e3:08:
                    f7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E6:68:8E:C7:FD:78:9F:95:8C:C8:37:CE:57:DA:45:EA:B3:60:87
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ieZojsf9eJ-VjMg3zlfaReqzYIc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         08:07:c0:1f:75:c7:7d:21:04:a7:49:af:8d:a0:46:85:8d:76:
         99:39:f0:d3:d7:4d:90:52:c8:38:48:d7:07:dd:c0:62:88:7c:
         3e:e8:25:5d:9b:fd:0d:89:bd:b8:25:e0:7e:a5:11:60:60:53:
         91:43:ac:aa:9a:d0:c3:f5:ca:ca:55:b8:62:64:92:8a:16:19:
         64:15:e1:e7:09:7f:5a:bc:27:25:81:aa:20:fa:c1:94:fa:9e:
         21:d3:f5:0a:fc:a5:a0:b8:f5:8d:10:57:39:cc:95:57:3f:4c:
         2a:18:fb:99:c3:54:b6:25:1c:d5:c0:d3:87:6d:51:89:61:a6:
         b0:5a:8e:c4:1f:83:27:0d:31:97:c8:64:32:1f:5d:f8:9d:8e:
         0f:5b:8a:dc:f0:f8:08:9e:7a:70:63:f2:2d:3d:f9:df:1f:b5:
         ff:e5:ea:70:0a:56:fa:62:18:f4:14:92:b5:81:1f:b7:6c:61:
         0e:e5:71:35:4b:ef:47:25:95:56:dd:fc:d5:c0:a4:e8:c7:68:
         e4:cf:46:32:cc:ec:e2:62:03:85:77:65:cc:60:40:a3:47:88:
         fa:1b:ba:6d:54:11:87:33:13:53:05:83:bf:ac:45:c1:9c:f3:
         12:96:3f:6e:ca:1f:73:60:0c:2c:72:dc:89:5f:01:9b:16:52:
         77:6a:6b:69
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw
MTI5MTJaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg5RTY2ODhFQzdGRDc4
OUY5NThDQzgzN0NFNTdEQTQ1RUFCMzYwODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfrdkD9NkaJNJ4qfY3wjiOLce/2pBZYHHfLjacJwwvF6vVuPNi
kEUlVe0d+UYwPxhnVYkF7sveBWDep7XxTQ/cp84F8C9pBYuZO5bJJ9Q1JJq7WgNU
4ZaE8U8mvau88ESGnEq8cEgCKyW8vAwiMcdVRZG5b2v0v1PVdFVOtVK9st7LCUqx
KcR59UsDwSmsGQ21J75zJOk6t/B7f3Op+bxngpMaCbxEruKYZQIOay7IA2ElEyo/
PLPYWnfi2oULP6MStgm2aEaDqLuHezRQvw3vEj3U0OGTF8kT2+ag0q0g2nDgJuG6
xkH3V8StezwKCir+QhdDFsFamuCqmELjCPd7AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUieZojsf9eJ+VjMg3zlfaReqzYIcwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L2llWm9qc2Y5ZUotVmpNZzN6bGZhUmVxellJYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYbhMAwDQYJKoZIhvcNAQELBQADggEBAAgHwB91x30hBKdJr42gRoWNdpk5
8NPXTZBSyDhI1wfdwGKIfD7oJV2b/Q2Jvbgl4H6lEWBgU5FDrKqa0MP1yspVuGJk
kooWGWQV4ecJf1q8JyWBqiD6wZT6niHT9Qr8paC49Y0QVznMlVc/TCoY+5nDVLYl
HNXA04dtUYlhprBajsQfgycNMZfIZDIfXfidjg9bitzw+AieenBj8i09+d8ftf/l
6nAKVvpiGPQUkrWBH7dsYQ7lcTVL70cllVbd/NXApOjHaOTPRjLM7OJiA4V3Zcxg
QKNHiPobum1UEYczE1MFg7+sRcGc8xKWP27KH3NgDCxy3IlfAZsWUndqa2k=
-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org