Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/dxr5UWXfhgYCs9g2WsrVKEZJACI.roa
File:                     dxr5UWXfhgYCs9g2WsrVKEZJACI.roa (raw, json)
Hash identifier:          Xue1ueDJ8hT3OdTCJKtOaTgxXmUHlH8Nwl1PI7fvLXA=
Subject key identifier:   77:1A:F9:51:65:DF:86:06:02:B3:D8:36:5A:CA:D5:28:46:49:00:22
Certificate issuer:       /CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
Certificate serial:       53
Authority key identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/dxr5UWXfhgYCs9g2WsrVKEZJACI.roa
Signing time:             Mon 30 Sep 2024 01:29:53 +0000
ROA not before:           Mon 30 Sep 2024 01:29:53 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        160.27.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
        Validity
            Not Before: Sep 30 01:29:53 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=771AF95165DF860602B3D8365ACAD52846490022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:37:42:55:7b:90:db:0c:03:4b:32:a6:c9:80:
                    c1:4c:f6:2b:8f:5b:54:8a:86:65:f5:12:d0:58:0b:
                    c0:a9:c5:e5:14:12:65:34:f4:67:67:43:f1:bb:41:
                    dc:45:8e:f4:d2:8a:06:da:b4:ec:70:d4:6f:77:ba:
                    e2:66:73:36:75:ef:9c:ab:fa:39:20:58:06:0a:f7:
                    04:a8:1a:45:6f:e7:1a:00:81:15:82:ba:c1:2c:63:
                    a7:f9:33:bb:7d:63:47:24:69:7f:78:17:5f:ab:b5:
                    ce:74:e1:61:a5:ac:b1:57:7a:66:c5:ba:6c:11:0f:
                    0e:97:f6:76:5e:84:03:27:f1:72:b9:f3:e2:58:f9:
                    7c:a4:d0:f7:87:93:f9:1b:a7:07:db:86:6a:aa:88:
                    23:83:2b:42:26:b5:ce:99:08:55:02:1d:09:ed:cb:
                    fd:ca:64:3a:8c:49:b2:c7:0d:ea:ed:ea:eb:77:8d:
                    83:92:52:02:eb:3c:60:bd:05:5e:eb:37:8e:16:62:
                    a1:71:fd:9b:64:b2:6b:1a:f7:f8:f2:f7:a9:f8:9c:
                    f9:2a:54:aa:25:69:9d:3d:d9:93:21:a5:97:a3:6c:
                    4d:75:2d:c7:bd:5f:3d:da:2a:e7:21:25:4c:40:9a:
                    9d:41:1e:d4:f8:fc:47:6f:19:fc:b0:6f:bb:12:d4:
                    29:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1A:F9:51:65:DF:86:06:02:B3:D8:36:5A:CA:D5:28:46:49:00:22
            X509v3 Authority Key Identifier:
                keyid:E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/dxr5UWXfhgYCs9g2WsrVKEZJACI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.27.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         22:e7:38:86:5c:41:c0:08:4c:f3:cc:c4:f1:46:cb:59:b3:5c:
         d0:7c:d4:ee:63:f5:7a:1b:98:ee:64:32:7d:c0:0b:ef:fc:4a:
         26:9b:f5:37:0a:86:00:b2:97:b7:d1:d2:62:3d:37:34:9a:c9:
         66:33:55:de:67:98:c3:18:28:d0:d9:28:18:c0:5b:5a:d1:03:
         14:e6:83:94:26:fb:c1:bb:d9:3d:3f:df:dc:25:af:dd:e6:c1:
         bf:03:cf:13:f2:6b:2b:67:1e:5e:bd:e7:a4:05:f1:50:da:12:
         6c:aa:7a:72:fe:c3:ad:c4:88:7b:90:92:db:f7:b2:54:ac:8c:
         d0:89:b2:2d:6e:21:4b:bb:ae:2f:fa:78:19:e2:88:0f:78:2e:
         c4:89:f5:eb:b2:ca:91:e5:8f:d7:4e:4e:16:ad:25:ff:88:9c:
         69:2e:cf:41:31:11:fa:d6:29:10:ec:ab:51:93:c6:a6:89:b7:
         69:1b:6a:c2:81:91:3d:25:a3:a1:3b:ed:e2:ce:17:c5:3d:e0:
         e1:d6:31:85:71:15:ca:d3:49:3e:1b:62:3f:29:aa:56:10:4c:
         a7:53:60:d2:24:81:bb:58:fd:5f:67:2c:2f:9f:46:01:0f:0d:
         a7:c2:4d:ef:3d:2f:51:e9:ff:e9:a5:60:f3:22:43:20:61:0e:
         49:06:59:75
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIBUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMkEw
QjAwNDlGMUEzRDEyM0RDQUNBNUNFQjVCNEU1RTlFQzc5NEQ3MB4XDTI0MDkzMDAx
Mjk1M1oXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoNzcxQUY5NTE2NURGODYw
NjAyQjNEODM2NUFDQUQ1Mjg0NjQ5MDAyMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOM3QlV7kNsMA0sypsmAwUz2K49bVIqGZfUS0FgLwKnF5RQSZTT0
Z2dD8btB3EWO9NKKBtq07HDUb3e64mZzNnXvnKv6OSBYBgr3BKgaRW/nGgCBFYK6
wSxjp/kzu31jRyRpf3gXX6u1znThYaWssVd6ZsW6bBEPDpf2dl6EAyfxcrnz4lj5
fKTQ94eT+RunB9uGaqqII4MrQia1zpkIVQIdCe3L/cpkOoxJsscN6u3q63eNg5JS
Aus8YL0FXus3jhZioXH9m2Syaxr3+PL3qfic+SpUqiVpnT3ZkyGll6NsTXUtx71f
Pdoq5yElTECanUEe1Pj8R28Z/LBvuxLUKUcCAwEAAaOCAicwggIjMB0GA1UdDgQW
BBR3GvlRZd+GBgKz2DZaytUoRkkAIjAfBgNVHSMEGDAWgBTioLAEnxo9Ej3Kylzr
W05enseU1zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTAyNDcvNHFDd0JKOGFQUkk5eXNwYzYxdE9YcDdIbE5jLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNHFDd0JKOGFQUkk5eXNwYzYxdE9Y
cDdIbE5jLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwMjQ3L2R4cjVVV1hmaGdZQ3M5ZzJXc3JWS0VaSkFDSS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsE
AgABMAUDAwCgGzANBgkqhkiG9w0BAQsFAAOCAQEAIuc4hlxBwAhM88zE8UbLWbNc
0HzU7mP1ehuY7mQyfcAL7/xKJpv1NwqGALKXt9HSYj03NJrJZjNV3meYwxgo0Nko
GMBbWtEDFOaDlCb7wbvZPT/f3CWv3ebBvwPPE/JrK2ceXr3npAXxUNoSbKp6cv7D
rcSIe5CS2/eyVKyM0ImyLW4hS7uuL/p4GeKID3guxIn167LKkeWP105OFq0l/4ic
aS7PQTER+tYpEOyrUZPGpom3aRtqwoGRPSWjoTvt4s4XxT3g4dYxhXEVytNJPhti
PymqVhBMp1Ng0iSBu1j9X2csL59GAQ8Np8JN7z0vUen/6aVg8yJDIGEOSQZZdQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:25 2024 by rpki-client on console-ams.rpki-client.org