Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/q0uHUx5lXyV8pd2wPhK-Yf5HMIo.roa
File:                     q0uHUx5lXyV8pd2wPhK-Yf5HMIo.roa (raw, json)
Hash identifier:          08jQJ4ehIyd+k9heZuT8yF/cbsTkHEHABuYegX6nzqA=
Subject key identifier:   AB:4B:87:53:1E:65:5F:25:7C:A5:DD:B0:3E:12:BE:61:FE:47:30:8A
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       DA
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/q0uHUx5lXyV8pd2wPhK-Yf5HMIo.roa
Signing time:             Sun 01 Oct 2023 01:28:51 +0000
ROA not before:           Sun 01 Oct 2023 01:28:51 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     10021
IP address blocks:        27.110.60.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Oct  1 01:28:51 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=AB4B87531E655F257CA5DDB03E12BE61FE47308A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:32:fb:a5:eb:82:ff:10:0b:40:84:7b:84:7e:
                    21:10:10:55:2f:83:f0:94:e4:2f:e8:5c:46:e8:ba:
                    ee:7b:c6:45:23:a9:b3:17:01:33:c6:32:2a:1c:68:
                    bc:57:a7:42:60:3f:73:05:10:4a:cc:2b:5c:dd:dc:
                    3e:c1:1f:a6:70:c5:5c:36:f7:33:8c:a7:be:cc:36:
                    a7:5a:12:1f:cd:76:ea:47:54:38:7c:91:53:36:7b:
                    93:14:58:65:d0:2c:55:35:b4:35:c1:1e:ef:5a:85:
                    98:39:2a:07:00:9f:ed:e6:75:33:30:6a:56:3c:e9:
                    29:52:06:85:03:f5:40:ca:d7:ab:fc:ea:cb:00:9a:
                    40:e1:0a:41:db:dc:d8:56:55:a0:bd:64:1c:2f:1e:
                    82:b8:e9:2f:ea:26:26:7a:89:46:29:45:7a:1f:37:
                    6c:ae:4c:2f:a2:66:a4:3b:5d:6f:f8:99:a5:72:43:
                    cb:b1:20:1c:42:31:ac:59:c2:c0:29:f3:51:af:e4:
                    ad:c9:80:d1:6e:0e:52:ba:88:2e:3d:7f:79:fe:08:
                    28:c3:df:fe:78:9b:32:80:50:45:93:65:e0:0a:54:
                    a8:a9:56:08:dd:3b:71:c4:f8:e4:f5:0e:6b:c9:67:
                    18:ff:f6:2a:c1:11:48:80:6e:64:5a:ac:11:15:85:
                    5a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4B:87:53:1E:65:5F:25:7C:A5:DD:B0:3E:12:BE:61:FE:47:30:8A
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/q0uHUx5lXyV8pd2wPhK-Yf5HMIo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:d8:a5:b7:5c:cc:28:a9:8e:01:aa:2b:b7:b8:7f:a9:84:31:
         63:39:8e:9c:bb:cc:8f:f9:aa:31:ec:63:d7:77:59:4d:85:8b:
         ef:39:1e:a4:23:c1:c5:ec:33:b1:28:8b:66:be:be:8b:25:4b:
         f7:65:76:a1:f4:45:98:c3:31:9a:9a:b3:93:fa:1f:9b:67:ab:
         d9:97:cd:a0:6d:c5:d8:6c:71:e5:e6:de:49:ac:71:b9:6c:0e:
         d2:6c:da:90:02:95:81:d7:44:89:f5:cf:94:b9:56:61:09:5b:
         30:e8:e8:c1:b4:39:5a:7f:b6:e5:0a:84:a7:be:3d:d8:0c:a6:
         0b:1b:d2:e4:4e:57:eb:35:b1:38:94:a9:bf:f5:f9:d7:38:a6:
         9e:8c:1f:ff:e5:55:69:a7:8b:50:c7:76:c4:c1:d2:26:57:d1:
         ef:c6:2a:93:e3:e5:22:8a:ef:32:fd:ae:c6:91:3f:d0:82:46:
         53:a2:68:ff:90:c6:0e:77:3b:42:36:98:11:8d:44:10:74:6b:
         ef:04:51:eb:8e:79:9d:7d:d0:b2:a0:19:c7:e2:1e:7d:f5:de:
         ff:fa:e7:42:5e:9d:59:92:14:42:ad:16:77:26:00:8c:6d:5c:
         99:9c:06:85:ae:1a:6a:23:c9:39:8b:b3:71:61:42:f8:4e:7e:
         aa:52:36:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 00:52:59 2024 by rpki-client on console-ams.rpki-client.org