Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/vLyW-qLQGipj_ty1mTATWg_DROY.roa
File:                     vLyW-qLQGipj_ty1mTATWg_DROY.roa (raw, json)
Hash identifier:          uGG0kjA81pHcAYCubvqRz8Dm3Q02Wj+oUHXtHjjILp4=
Subject key identifier:   BC:BC:96:FA:A2:D0:1A:2A:63:FE:DC:B5:99:30:13:5A:0F:C3:44:E6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       022C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vLyW-qLQGipj_ty1mTATWg_DROY.roa
Signing time:             Fri 31 May 2024 01:33:09 +0000
ROA not before:           Fri 31 May 2024 01:33:09 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        27.134.64.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:33:09 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=BCBC96FAA2D01A2A63FEDCB59930135A0FC344E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2b:1b:d6:4e:a7:5c:85:aa:4a:27:a5:0a:ea:
                    f3:94:ba:7d:8c:10:fe:41:6c:19:50:37:02:94:ad:
                    b3:91:14:6c:20:d1:78:6c:6e:86:0c:8c:66:08:8e:
                    31:6d:4e:99:ed:ea:16:e1:91:e7:7f:01:1e:ac:9b:
                    da:aa:e8:d8:6f:aa:77:b2:79:28:b9:f8:03:3f:af:
                    9e:f7:17:c1:96:c2:c4:72:71:86:eb:9c:fa:bf:e0:
                    c5:3b:84:01:03:f2:e1:ff:3d:c1:6d:07:21:bc:45:
                    0e:40:41:a7:a2:59:9b:8a:60:42:ae:bc:cd:c7:a2:
                    57:b7:2a:90:a7:f1:48:94:37:88:5a:8e:17:55:37:
                    e2:be:33:50:66:b0:54:33:e6:c8:b7:05:81:e1:78:
                    dd:26:cb:88:dd:64:55:6c:40:f9:9d:41:4b:f5:b5:
                    bc:28:3f:41:84:6a:e0:2c:cf:2e:3d:90:aa:09:46:
                    7b:ca:e2:3c:28:9e:e0:3f:0d:61:16:ef:35:7e:7c:
                    aa:5d:40:96:3c:b3:00:d8:7a:58:a0:83:76:10:ee:
                    f4:3c:30:dc:db:75:33:8d:c5:af:b5:b9:83:dc:dc:
                    f7:c0:08:4b:ec:9e:f8:91:13:92:0f:4c:65:79:8f:
                    b2:18:ac:46:40:5f:21:0c:e1:1f:6a:d4:56:b0:46:
                    43:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BC:96:FA:A2:D0:1A:2A:63:FE:DC:B5:99:30:13:5A:0F:C3:44:E6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vLyW-qLQGipj_ty1mTATWg_DROY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:c6:ea:e6:f4:e9:76:51:5c:d9:73:48:d9:99:ee:ea:fa:45:
         1c:b8:0c:49:7a:4e:62:8d:6b:47:77:4a:b1:09:1c:4d:92:3f:
         cb:d3:af:7d:06:55:d6:66:c0:9c:57:70:93:7a:19:c2:33:f6:
         00:73:9b:e5:3b:68:2b:a0:53:59:a0:03:9b:ab:86:8b:0d:81:
         91:5a:16:1e:f6:83:ad:23:c3:2b:bd:f7:52:df:63:8a:b8:ca:
         bc:86:e7:23:5c:13:31:b4:87:51:47:84:fa:07:8c:08:74:6c:
         bf:50:1e:9a:52:35:07:83:d8:27:80:17:9d:44:3a:a7:87:c2:
         83:02:8c:df:6f:0c:f7:f8:c0:24:4f:f5:6c:f5:65:c7:ff:9e:
         17:75:fd:9d:aa:f2:d6:69:eb:49:0b:45:75:d1:73:0d:8f:dc:
         26:0b:5c:09:84:94:cd:cc:2b:74:7a:c6:e6:94:b1:4d:29:d7:
         c4:c8:fd:58:46:64:a6:b8:07:44:ba:9a:31:6f:e5:88:34:45:
         3a:59:8e:9c:91:32:7c:f1:ce:8f:37:10:57:c0:61:a0:b4:31:
         16:da:48:8b:56:93:fe:bf:a4:78:01:5d:f3:0c:4b:1f:4b:84:
         94:ab:32:4f:a7:1e:a5:8f:b9:b5:bd:d5:81:23:31:8a:d2:07:
         cb:98:e7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org