Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/zTLedcz7JK1no1Z3unvr-Vlk0XY.roa
File:                     zTLedcz7JK1no1Z3unvr-Vlk0XY.roa (raw, json)
Hash identifier:          Cqs1W67bLa/AJKWefo9M6qxfXmWoQNwzgpj3ehiUIzw=
Subject key identifier:   CD:32:DE:75:CC:FB:24:AD:67:A3:56:77:BA:7B:EB:F9:59:64:D1:76
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0200
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/zTLedcz7JK1no1Z3unvr-Vlk0XY.roa
Signing time:             Fri 31 May 2024 01:29:09 +0000
ROA not before:           Fri 31 May 2024 01:29:09 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        27.120.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:29:09 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=CD32DE75CCFB24AD67A35677BA7BEBF95964D176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:87:20:07:c3:d2:84:6a:65:cd:37:7c:c6:dc:
                    bd:1e:c2:ee:70:ab:a2:2a:41:25:2f:c7:ef:96:e5:
                    ed:3e:b6:e2:fc:37:ee:c5:a4:41:60:8f:7b:54:07:
                    a1:1d:1c:95:0e:b7:65:39:1e:e1:cc:3e:b4:2a:82:
                    3c:22:95:c8:a1:cc:02:5e:2b:12:bd:a0:dd:a9:2e:
                    d4:fb:17:46:07:50:76:8a:65:ca:87:e8:60:cc:df:
                    ac:3c:a7:de:fa:ef:04:6b:c6:f2:e4:de:21:2d:6f:
                    ee:e6:8f:e3:e6:6f:1d:df:42:bb:50:af:66:70:31:
                    b5:9e:7b:61:d1:9b:3b:62:59:7e:f3:0b:36:52:ba:
                    9c:9e:c2:df:79:81:8a:b7:78:e8:79:c6:a0:3c:1a:
                    c3:b9:18:53:de:d9:48:90:3d:95:62:b1:d1:ed:c5:
                    1c:0d:5c:ec:5b:b6:6e:1f:b0:6e:84:be:3f:58:12:
                    60:cd:93:02:2e:17:0d:8f:72:18:4f:7b:64:a1:24:
                    ee:23:e3:7d:8d:ca:f8:36:2c:0a:16:3d:12:3e:e4:
                    3e:37:6c:99:47:1b:9a:94:0c:89:6f:53:52:50:b5:
                    7e:cb:b2:a2:23:a1:f8:f2:87:aa:9f:ce:5a:16:9c:
                    49:23:a4:9b:b1:d1:6c:04:52:af:dd:32:88:84:62:
                    22:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:32:DE:75:CC:FB:24:AD:67:A3:56:77:BA:7B:EB:F9:59:64:D1:76
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/zTLedcz7JK1no1Z3unvr-Vlk0XY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.120.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         41:91:07:f9:65:f0:33:bb:fd:98:91:cd:27:83:d7:25:ba:1d:
         1a:8a:f8:2f:b2:08:94:9e:41:22:57:5c:40:6f:e7:5c:66:f1:
         87:07:7e:3c:83:39:1e:3a:b0:f9:1c:c9:41:5e:f5:a0:75:24:
         e3:b0:85:f6:82:f4:f4:6f:52:9c:74:79:6b:9d:2f:74:ce:e2:
         a0:8e:28:62:8c:76:6a:8e:26:90:18:a3:56:47:69:66:28:15:
         a8:aa:82:29:f8:8c:0a:60:b1:68:0b:08:a6:7f:4c:23:6f:ec:
         e1:e1:fe:45:4e:66:80:b1:2e:57:0b:68:da:57:28:55:22:f1:
         d8:5c:ba:56:7d:97:27:b1:22:1e:95:9d:bf:b5:d7:90:9f:f4:
         18:91:00:63:8e:33:4e:85:30:0d:9a:84:b3:cd:68:46:0f:d7:
         b9:5a:79:ab:c3:7c:fc:4b:5e:01:6c:07:df:41:47:d0:63:db:
         89:ee:59:d4:ea:d9:e2:0f:88:e8:9e:06:27:dd:9c:3c:ca:f0:
         b5:5a:67:4e:01:b5:6c:95:d6:65:f1:b2:d6:6e:14:df:48:a8:
         60:c6:9d:b6:cc:23:bf:69:11:f8:bc:c4:7b:3a:06:a3:1c:df:
         32:93:ab:f1:f3:27:de:c7:c9:1d:84:51:61:71:d3:5c:75:af:
         ff:f2:b7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org