Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/MqsBD_O7pDGZ9Qr7p9KJLFQpKF4.roa
File:                     MqsBD_O7pDGZ9Qr7p9KJLFQpKF4.roa (raw, json)
Hash identifier:          oDA2UBy76qu6YFFQ6H12ua1FaagD8603GqsMtvIOlZA=
Subject key identifier:   32:AB:01:0F:F3:BB:A4:31:99:F5:0A:FB:A7:D2:89:2C:54:29:28:5E
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       21
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/MqsBD_O7pDGZ9Qr7p9KJLFQpKF4.roa
Signing time:             Fri 18 Oct 2024 08:13:36 +0000
ROA not before:           Fri 18 Oct 2024 08:13:36 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     23783
IP address blocks:        27.110.112.0/21 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Oct 18 08:13:36 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=32AB010FF3BBA43199F50AFBA7D2892C5429285E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ad:c3:c2:56:b4:d5:93:cc:71:be:8f:8f:17:
                    24:a4:53:10:08:97:cc:5e:fd:4a:d9:eb:75:e0:99:
                    26:9f:85:63:d5:00:bd:e5:57:1c:68:9c:06:31:2b:
                    7a:b6:aa:20:84:8d:dc:80:35:1a:c4:00:ea:94:20:
                    a8:e6:44:77:d5:1e:7c:93:c9:b7:4f:bf:80:07:23:
                    0c:60:d0:fc:f2:0b:08:40:1c:a7:d4:b6:56:99:54:
                    23:5c:40:29:7a:d8:7b:fd:af:77:0f:30:b0:af:79:
                    6a:ea:81:a9:52:de:cd:ac:4f:4e:eb:50:9c:f0:25:
                    1e:d6:fb:c1:eb:cf:1b:d0:4a:59:f5:db:77:9b:4f:
                    90:71:d5:45:3d:ac:ba:37:7f:79:1d:19:97:c9:91:
                    a1:69:d3:15:21:44:4a:ed:e6:df:ef:d1:1e:a0:1b:
                    59:b3:a5:ac:87:e3:a1:06:c3:68:a7:aa:1e:4b:3e:
                    77:d2:a4:bb:3d:3d:40:cf:37:1a:4d:7a:ba:5f:35:
                    cb:e7:0a:c2:6f:e0:da:25:c0:b1:7d:f6:66:ed:09:
                    05:0f:cf:29:8a:1d:4b:9f:5b:21:09:f0:ae:20:c3:
                    98:9d:07:ec:46:96:e3:4d:09:f2:d2:f5:1c:fe:c8:
                    50:34:92:41:ac:1a:46:f3:1c:d9:de:74:9d:0e:fc:
                    99:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AB:01:0F:F3:BB:A4:31:99:F5:0A:FB:A7:D2:89:2C:54:29:28:5E
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/MqsBD_O7pDGZ9Qr7p9KJLFQpKF4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:5c:75:a9:22:bf:3c:80:f8:8a:9b:b5:d4:ee:dc:1c:21:e0:
         1f:5f:5b:d3:6b:e9:37:0a:7d:7b:36:ef:a0:e0:fd:de:0c:8d:
         ab:06:b4:0b:52:9f:f1:fd:ad:41:02:58:64:56:f6:e5:c1:aa:
         e5:b7:7f:62:a0:ba:f2:ae:5e:53:0f:92:5c:d1:da:20:e6:3f:
         10:4b:74:8a:eb:c3:ed:aa:0c:ad:ac:4d:06:39:9c:53:3d:89:
         41:86:f8:92:34:1e:7b:56:1a:71:a0:56:3d:a9:56:56:45:73:
         26:e6:6b:d8:4d:ff:43:4a:55:57:fa:31:83:e3:48:53:80:c2:
         78:6f:55:41:32:01:c6:7e:93:82:5b:42:48:f9:af:47:d0:6b:
         74:58:e0:ab:1e:99:e5:33:ff:0d:9e:3a:6a:64:a1:ca:ec:35:
         76:6a:5b:13:3a:24:8c:27:87:41:36:66:73:d6:c7:67:f0:18:
         0b:29:34:be:07:d1:62:33:3f:ab:08:2e:1b:da:7f:ef:d9:f7:
         67:ee:dd:1d:18:2f:7e:72:cf:1e:d3:7b:21:ff:a8:24:e8:6f:
         df:08:aa:ac:4b:9c:d4:88:d4:51:ae:a4:6a:ec:17:2e:e2:b2:
         2a:92:f8:f1:ed:10:98:d5:31:0b:bd:53:1f:8f:3e:49:45:6e:
         88:2b:2a:c1
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF
RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTI0MTAxODA4
MTMzNloXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMzJBQjAxMEZGM0JCQTQz
MTk5RjUwQUZCQTdEMjg5MkM1NDI5Mjg1RTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOOtw8JWtNWTzHG+j48XJKRTEAiXzF79StnrdeCZJp+FY9UAveVX
HGicBjEreraqIISN3IA1GsQA6pQgqOZEd9UefJPJt0+/gAcjDGDQ/PILCEAcp9S2
VplUI1xAKXrYe/2vdw8wsK95auqBqVLezaxPTutQnPAlHtb7wevPG9BKWfXbd5tP
kHHVRT2sujd/eR0Zl8mRoWnTFSFESu3m3+/RHqAbWbOlrIfjoQbDaKeqHks+d9Kk
uz09QM83Gk16ul81y+cKwm/g2iXAsX32Zu0JBQ/PKYodS59bIQnwriDDmJ0H7EaW
400J8tL1HP7IUDSSQawaRvMc2d50nQ78mTkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQyqwEP87ukMZn1Cvun0oksVCkoXjAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi
llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0
MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDcvTXFzQkRfTzdwREdaOVFyN3A5S0pMRlFwS0Y0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAxtucDANBgkqhkiG9w0BAQsFAAOCAQEAcFx1qSK/PID4ipu11O7cHCHgH19b
02vpNwp9ezbvoOD93gyNqwa0C1Kf8f2tQQJYZFb25cGq5bd/YqC68q5eUw+SXNHa
IOY/EEt0iuvD7aoMraxNBjmcUz2JQYb4kjQee1YacaBWPalWVkVzJuZr2E3/Q0pV
V/oxg+NIU4DCeG9VQTIBxn6TgltCSPmvR9BrdFjgqx6Z5TP/DZ46amShyuw1dmpb
EzokjCeHQTZmc9bHZ/AYCyk0vgfRYjM/qwguG9p/79n3Z+7dHRgvfnLPHtN7If+o
JOhv3wiqrEuc1IjUUa6kauwXLuKyKpL48e0QmNUxC71TH48+SUVuiCsqwQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:38 2024 by rpki-client on console-ams.rpki-client.org