Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/UkL98DI2bSZJzXjzy7rlIlCPoFc.roa
File:                     UkL98DI2bSZJzXjzy7rlIlCPoFc.roa (raw, json)
Hash identifier:          p4OHk0LTm3lgO8cuFteRVWI0VRsH6bhJLN1s8XuxZYw=
Subject key identifier:   52:42:FD:F0:32:36:6D:26:49:CD:78:F3:CB:BA:E5:22:50:8F:A0:57
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       1F
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/UkL98DI2bSZJzXjzy7rlIlCPoFc.roa
Signing time:             Sat 03 Aug 2024 02:01:38 +0000
ROA not before:           Sat 03 Aug 2024 02:01:38 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9597
IP address blocks:        27.34.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Aug  3 02:01:38 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=5242FDF032366D2649CD78F3CBBAE522508FA057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:7c:1c:8d:5f:6d:70:f8:26:0c:b3:2c:d1:
                    9d:6d:d3:f8:71:eb:03:6b:90:f8:6a:d0:03:c9:3d:
                    83:98:e6:3a:31:97:b1:87:2b:c5:a8:75:a7:87:80:
                    e4:74:4e:e6:f8:c2:6d:9c:34:74:b6:11:ee:fb:65:
                    70:69:78:55:76:ce:8f:8f:d2:3a:a3:29:4b:3e:52:
                    81:f4:c9:01:21:a2:19:73:84:bd:7a:34:08:46:41:
                    03:e2:52:a8:43:34:6c:c6:d2:b2:fe:7e:cf:90:0e:
                    e3:d9:32:55:5a:f0:be:cf:05:76:75:90:a7:8c:75:
                    b2:59:13:86:e1:cc:bf:53:6f:b5:97:fd:8d:92:f1:
                    de:92:2a:16:67:a8:c0:00:9b:8c:61:97:1f:b0:43:
                    68:16:dd:78:a9:65:88:0c:88:52:a6:46:58:44:a6:
                    42:4f:f2:f8:c9:75:4d:59:69:da:0a:e9:84:9c:9b:
                    f5:28:20:55:1e:d6:05:11:61:e6:86:f2:c7:8b:44:
                    86:21:95:38:b0:40:72:0a:6a:a5:36:11:48:69:89:
                    1d:74:b2:aa:e1:72:30:9a:94:f1:5a:d9:4b:98:d1:
                    6f:78:82:e2:44:f6:c6:56:53:e7:3b:20:36:47:70:
                    4a:91:e0:a4:b2:18:0b:f1:09:32:b0:11:bd:52:90:
                    a5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:42:FD:F0:32:36:6D:26:49:CD:78:F3:CB:BA:E5:22:50:8F:A0:57
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/UkL98DI2bSZJzXjzy7rlIlCPoFc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.34.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         91:98:95:5b:cd:9a:57:34:2a:a9:4a:fc:8f:ab:95:2a:e5:5e:
         a6:88:22:72:d9:10:f3:ab:a1:00:a5:39:8e:fa:b6:80:a7:17:
         fb:b2:55:9c:7d:57:30:d8:e9:2b:44:23:cf:01:8a:d0:dd:04:
         4d:8d:84:d7:11:d6:f8:28:e2:57:3f:01:7e:c7:f6:97:54:f4:
         e4:b1:57:f1:8e:cf:37:90:af:b0:8a:a1:3a:58:b9:50:10:73:
         9e:4f:c6:50:7e:70:a9:f2:87:98:a2:0d:80:de:e6:8d:51:84:
         bf:27:93:e0:88:0a:c0:69:21:a3:d2:33:96:d5:cd:5d:ad:12:
         44:b0:39:96:6d:3b:19:2a:00:b7:0c:6a:10:e9:d5:1b:cd:03:
         eb:61:0d:02:1d:af:77:a0:89:97:48:48:ba:90:6a:22:8f:0f:
         f1:da:1a:44:29:e4:93:92:b7:5c:e7:de:91:e2:5b:e5:99:db:
         24:c3:15:8b:dd:2c:73:aa:a8:7b:cf:eb:fc:9a:03:fa:9c:8e:
         9a:f5:a5:f4:a9:4f:fe:6e:9f:ba:40:19:94:c4:dc:7c:32:83:
         52:98:2a:f3:dc:24:ad:2d:c5:bf:60:ad:d5:ae:f6:7d:f6:8d:
         42:2e:97:84:7e:77:2b:27:34:56:25:26:51:a9:60:08:a1:75:
         ed:e4:4d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:31 2025 by rpki-client