Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/52bVF36_px-Xhtp1EeTEDpBOI6s.roa
File:                     52bVF36_px-Xhtp1EeTEDpBOI6s.roa (raw, json)
Hash identifier:          4EpZpoAsbLpHelMrbn0swmcoxgGyQbLjXHjZypless4=
Subject key identifier:   E7:66:D5:17:7E:BF:A7:1F:97:86:DA:75:11:E4:C4:0E:90:4E:23:AB
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       D8
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/52bVF36_px-Xhtp1EeTEDpBOI6s.roa
Signing time:             Fri 31 May 2024 01:31:20 +0000
ROA not before:           Fri 31 May 2024 01:31:20 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     9370
IP address blocks:        27.133.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May 31 01:31:20 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=E766D5177EBFA71F9786DA7511E4C40E904E23AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:74:bd:9c:0b:db:03:4f:9c:0e:cc:b4:07:
                    70:12:89:34:97:89:3a:af:b7:1a:a8:50:96:54:02:
                    8d:29:86:43:cd:1b:4e:1f:dc:d7:c0:08:79:03:a3:
                    75:a3:47:92:96:0b:25:66:e8:d2:fc:75:62:6b:a8:
                    20:a1:e2:c1:d7:ed:33:9e:ff:c7:1d:5c:4d:32:62:
                    88:7f:ac:d2:7b:94:cd:4a:83:7d:82:12:05:0f:fe:
                    0c:cc:70:52:42:bb:59:3e:54:36:21:69:45:5d:2e:
                    d3:a8:ae:53:0e:07:35:97:c6:05:c5:d6:2b:c8:dd:
                    9c:2c:eb:fe:2e:30:02:f8:df:35:da:29:11:db:ea:
                    df:cb:fd:ba:f3:dd:7b:3f:a1:4d:8c:d0:ad:ee:8a:
                    0a:4b:62:2d:00:18:37:ab:4e:71:32:ea:83:aa:4e:
                    b8:20:0d:e9:4d:05:84:bc:1a:d2:14:dd:95:a9:4b:
                    81:7f:88:ea:28:30:8d:ed:49:69:c4:8c:5a:aa:ce:
                    18:1f:0e:96:bb:17:6b:61:4d:2a:87:b9:d9:e5:0d:
                    93:a3:cc:2e:ea:12:7a:c6:b6:3a:8f:16:0d:b0:a4:
                    f9:e3:26:2a:60:87:55:2b:50:cb:92:ff:5d:e7:69:
                    e4:3e:da:f3:36:0a:d3:30:e6:c9:3b:5b:8c:e9:65:
                    40:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:66:D5:17:7E:BF:A7:1F:97:86:DA:75:11:E4:C4:0E:90:4E:23:AB
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/52bVF36_px-Xhtp1EeTEDpBOI6s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:79:50:71:88:59:ce:c6:2c:4d:71:90:b4:9e:2a:06:22:88:
         59:1c:5e:03:36:b1:ac:e8:59:f8:f2:4e:eb:f6:38:cb:bd:82:
         a0:3f:79:8d:44:14:b1:d5:2f:76:30:75:a2:54:57:0f:87:ca:
         04:88:67:08:57:40:54:f5:88:7a:51:47:b2:57:2f:d3:5e:50:
         ec:97:7d:48:71:43:c7:e0:c9:ae:af:15:30:39:32:f3:36:15:
         2c:ad:f5:0d:19:cd:9c:1b:cd:31:0b:5c:17:85:76:b9:c3:43:
         95:11:18:9e:39:0b:a3:96:8b:f4:87:84:c4:73:4b:3d:7d:69:
         da:ed:26:cf:47:31:40:c6:0f:e1:98:17:d5:8d:51:db:19:1f:
         93:40:07:86:15:ba:1d:c5:e1:3c:7d:5a:ea:03:35:0a:19:3d:
         9a:51:f1:7a:26:01:7f:b6:e5:c6:41:0b:10:2b:e8:2a:8d:88:
         98:8b:0f:cd:4f:cf:40:a1:61:1d:02:07:86:34:b4:b9:5e:67:
         4b:d3:57:37:52:3c:ae:78:0d:43:48:2d:51:5f:3c:f6:81:20:
         9c:4e:2c:22:be:c2:a6:b4:b9:f7:c5:c2:e2:b1:62:17:26:2f:
         cc:5f:61:4a:d3:62:2d:6a:c6:ee:2a:1e:fe:8d:44:ae:4f:3a:
         21:63:25:ff
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICANgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy
MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNDA1MzEw
MTMxMjBaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEU3NjZENTE3N0VCRkE3
MUY5Nzg2REE3NTExRTRDNDBFOTA0RTIzQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzoHS9nAvbA0+cDsy0B3ASiTSXiTqvtxqoUJZUAo0phkPNG04f
3NfACHkDo3WjR5KWCyVm6NL8dWJrqCCh4sHX7TOe/8cdXE0yYoh/rNJ7lM1Kg32C
EgUP/gzMcFJCu1k+VDYhaUVdLtOorlMOBzWXxgXF1ivI3Zws6/4uMAL43zXaKRHb
6t/L/brz3Xs/oU2M0K3uigpLYi0AGDerTnEy6oOqTrggDelNBYS8GtIU3ZWpS4F/
iOooMI3tSWnEjFqqzhgfDpa7F2thTSqHudnlDZOjzC7qEnrGtjqPFg2wpPnjJipg
h1UrUMuS/13naeQ+2vM2CtMw5sk7W4zpZUCnAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU52bVF36/px+Xhtp1EeTEDpBOI6swHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W
wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo
bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQ3LzUyYlZGMzZfcHgtWGh0cDFFZVRFRHBCT0k2cy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAbhfcwDQYJKoZIhvcNAQELBQADggEBAKh5UHGIWc7GLE1xkLSeKgYiiFkc
XgM2sazoWfjyTuv2OMu9gqA/eY1EFLHVL3YwdaJUVw+HygSIZwhXQFT1iHpRR7JX
L9NeUOyXfUhxQ8fgya6vFTA5MvM2FSyt9Q0ZzZwbzTELXBeFdrnDQ5URGJ45C6OW
i/SHhMRzSz19adrtJs9HMUDGD+GYF9WNUdsZH5NAB4YVuh3F4Tx9WuoDNQoZPZpR
8XomAX+25cZBCxAr6CqNiJiLD81Pz0ChYR0CB4Y0tLleZ0vTVzdSPK54DUNILVFf
PPaBIJxOLCK+wqa0uffFwuKxYhcmL8xfYUrTYi1qxu4qHv6NRK5POiFjJf8=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:32 2024 by rpki-client on console-ams.rpki-client.org