Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/TYiFJrquL5luUs7nMuvcXWjCEjo.roa
File:                     TYiFJrquL5luUs7nMuvcXWjCEjo.roa (raw, json)
Hash identifier:          qZaqDZA2dypcqSAK+qsVpHCUrYeDq4PPno10w1oz24E=
Subject key identifier:   4D:88:85:26:BA:AE:2F:99:6E:52:CE:E7:32:EB:DC:5D:68:C2:12:3A
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       87
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/TYiFJrquL5luUs7nMuvcXWjCEjo.roa
Signing time:             Mon 01 Jan 2024 01:28:27 +0000
ROA not before:           Mon 01 Jan 2024 01:28:27 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     9351
IP address blocks:        27.113.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Jan  1 01:28:27 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=4D888526BAAE2F996E52CEE732EBDC5D68C2123A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b9:d1:cc:69:bc:11:4a:36:b7:b7:1f:a3:61:
                    20:ea:2b:aa:fa:74:e9:59:27:1b:be:b2:0a:94:d4:
                    95:61:4e:d8:e0:9e:a5:3f:fb:96:e7:ff:fe:7f:af:
                    89:a7:51:eb:d8:f2:c2:f4:77:c8:38:d4:b1:a9:98:
                    04:78:12:e1:9d:3c:f6:ab:b5:65:1a:0e:7c:08:34:
                    02:b3:a7:8d:a3:c3:d3:03:5b:e9:1c:6a:1a:d7:1c:
                    d0:f6:d6:b8:bb:07:0d:c3:aa:21:69:87:67:15:3e:
                    f1:7f:60:73:64:8f:f5:7c:df:fe:ac:d9:7d:15:1c:
                    39:e6:8b:90:92:61:8e:78:01:3e:46:e3:2b:44:55:
                    3c:95:54:39:84:2f:4f:51:35:ad:1b:7b:ad:11:11:
                    1b:47:ea:cd:42:63:9a:84:8d:ee:9a:aa:e5:63:ea:
                    4a:6f:d7:2f:52:93:f0:b2:98:f2:fe:85:80:12:84:
                    46:f9:aa:ec:12:f7:7e:9f:e2:07:72:9b:12:2b:8e:
                    1d:71:4d:92:0f:32:f4:52:1d:98:8b:da:95:db:2d:
                    32:d9:f1:5b:ff:b8:1a:a4:4e:43:9a:9c:6a:ea:2c:
                    55:16:94:3e:e5:a3:58:f2:63:a7:3a:bc:58:1f:6a:
                    89:9a:50:94:c4:e7:a6:15:28:2f:45:7c:51:49:95:
                    c3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:88:85:26:BA:AE:2F:99:6E:52:CE:E7:32:EB:DC:5D:68:C2:12:3A
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/TYiFJrquL5luUs7nMuvcXWjCEjo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.113.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         45:82:e5:96:62:e4:87:02:0a:60:ba:fe:ba:95:00:91:3f:aa:
         82:f7:d5:22:1b:8f:4c:f4:ff:e2:6f:fb:d6:d8:f2:0b:d8:ed:
         23:05:62:e3:81:a2:85:e6:85:dd:02:fa:a7:06:a5:d6:30:d9:
         06:96:10:e1:05:6b:54:a9:ac:33:c3:ea:d0:4c:0f:ee:2f:81:
         3c:ec:1a:60:f8:17:1e:9d:d8:d0:b2:f1:9b:f8:46:32:8a:28:
         92:e8:92:8f:ff:d0:4e:3c:e7:02:a5:14:31:a5:40:ed:52:54:
         ed:b5:7d:27:0e:09:74:15:92:21:66:6a:b8:80:2b:63:c3:9c:
         34:6a:4e:1c:f6:4b:33:88:3a:6a:b6:1f:bb:b8:e9:a6:8a:0c:
         57:cf:c2:6a:9a:e7:21:5d:5d:17:64:51:50:6a:d6:e2:37:16:
         46:e1:78:ab:2a:d1:55:d2:f4:ab:bc:4f:e2:e2:ac:79:b6:e5:
         6e:61:7c:2e:12:5d:28:82:39:ce:1c:65:42:c6:9c:49:d8:f8:
         bd:ae:a8:be:f5:8f:fb:da:f4:0b:18:85:d3:69:4b:34:6c:bf:
         95:56:a6:91:4d:9b:c8:27:cc:83:4f:46:60:3d:ee:9c:e0:2c:
         45:07:1a:59:65:d8:e8:9a:da:15:cc:67:60:a5:2d:18:d7:22:
         a8:b7:89:42
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTAw
RUYzNThCQ0JFMTRBMzU4Q0E0RUVFNDFCNEU5MERDOTIzRTlEMjAeFw0yNDAxMDEw
MTI4MjdaFw0yNDEyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDREODg4NTI2QkFBRTJG
OTk2RTUyQ0VFNzMyRUJEQzVENjhDMjEyM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSudHMabwRSja3tx+jYSDqK6r6dOlZJxu+sgqU1JVhTtjgnqU/
+5bn//5/r4mnUevY8sL0d8g41LGpmAR4EuGdPPartWUaDnwINAKzp42jw9MDW+kc
ahrXHND21ri7Bw3DqiFph2cVPvF/YHNkj/V83/6s2X0VHDnmi5CSYY54AT5G4ytE
VTyVVDmEL09RNa0be60RERtH6s1CY5qEje6aquVj6kpv1y9Sk/CymPL+hYAShEb5
quwS936f4gdymxIrjh1xTZIPMvRSHZiL2pXbLTLZ8Vv/uBqkTkOanGrqLFUWlD7l
o1jyY6c6vFgfaomaUJTE56YVKC9FfFFJlcMRAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUTYiFJrquL5luUs7nMuvcXWjCEjowHwYDVR0jBBgwFoAUUA7zWLy+FKNYyk7u
QbTpDckj6dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIzNC9VQTd6V0x5LUZLTll5azd1UWJUcERja2o2ZEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9VQTd6V0x5LUZLTll5azd1UWJUcERj
a2o2ZEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjM0L1RZaUZKcnF1TDVsdVVzN25NdXZjWFdqQ0Vqby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUbccAwDQYJKoZIhvcNAQELBQADggEBAEWC5ZZi5IcCCmC6/rqVAJE/qoL3
1SIbj0z0/+Jv+9bY8gvY7SMFYuOBooXmhd0C+qcGpdYw2QaWEOEFa1SprDPD6tBM
D+4vgTzsGmD4Fx6d2NCy8Zv4RjKKKJLoko//0E485wKlFDGlQO1SVO21fScOCXQV
kiFmariAK2PDnDRqThz2SzOIOmq2H7u46aaKDFfPwmqa5yFdXRdkUVBq1uI3Fkbh
eKsq0VXS9Ku8T+LirHm25W5hfC4SXSiCOc4cZULGnEnY+L2uqL71j/va9AsYhdNp
SzRsv5VWppFNm8gnzINPRmA97pzgLEUHGlll2Oia2hXMZ2ClLRjXIqi3iUI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:28 2024 by rpki-client on console-ams.rpki-client.org