Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/R-3tJB1AT9QMwbCGq-if1mEmKfI.roa
File:                     R-3tJB1AT9QMwbCGq-if1mEmKfI.roa (raw, json)
Hash identifier:          e2tLdslXOjbbgbBx+lVVJr17IFRrTMZRumpZt8ucHiA=
Subject key identifier:   47:ED:ED:24:1D:40:4F:D4:0C:C1:B0:86:AB:E8:9F:D6:61:26:29:F2
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       02
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/R-3tJB1AT9QMwbCGq-if1mEmKfI.roa
Signing time:             Mon 06 Nov 2023 07:06:46 +0000
ROA not before:           Mon 06 Nov 2023 07:06:46 +0000
ROA not after:            Fri 01 Nov 2024 08:11:41 +0000
asID:                     23783
IP address blocks:        27.110.112.0/21 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Nov  6 07:06:46 2023 GMT
            Not After : Nov  1 08:11:41 2024 GMT
        Subject: CN=47EDED241D404FD40CC1B086ABE89FD6612629F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:33:a6:46:96:1e:1d:10:c7:fd:3b:f6:c4:1b:
                    5f:47:b6:c6:bd:ae:0b:67:4e:d8:6b:da:1f:9a:9e:
                    77:1c:35:d9:1f:a7:c7:13:38:31:e5:5c:67:46:b8:
                    32:9a:3c:df:76:ee:0a:c4:12:5e:b8:21:6a:10:d5:
                    9d:cd:19:ee:5d:64:fb:1b:16:86:11:d0:60:d3:0c:
                    08:77:92:19:99:16:82:4c:3e:e3:05:f8:44:35:bc:
                    0b:5a:c4:8a:29:62:d7:d1:5b:de:81:13:fa:73:a2:
                    1e:a7:4a:3e:01:cd:41:52:1e:6e:a0:17:30:87:e3:
                    69:08:84:af:d8:a0:3c:c7:20:b3:66:3c:e2:77:2c:
                    21:d1:3e:44:81:88:c1:a7:04:93:c2:31:e8:fb:64:
                    3c:13:ac:b4:51:eb:dd:df:be:95:4b:d0:a4:4d:91:
                    29:ac:7a:cb:37:00:be:85:38:53:14:04:10:09:fa:
                    79:72:1b:eb:06:70:d1:35:62:6a:dc:31:89:46:44:
                    0e:6e:33:54:27:ad:30:b1:06:7f:27:90:ef:09:21:
                    69:4f:c5:05:b7:fb:dc:78:97:f0:f3:23:db:d5:a5:
                    2d:cd:07:3e:58:50:2e:ee:e2:e9:1a:0d:df:97:95:
                    ae:69:38:89:ef:eb:ed:49:4c:59:65:f8:14:9c:41:
                    8e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:ED:ED:24:1D:40:4F:D4:0C:C1:B0:86:AB:E8:9F:D6:61:26:29:F2
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/R-3tJB1AT9QMwbCGq-if1mEmKfI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:b7:3f:69:e5:26:ef:83:75:18:34:fe:b6:d8:ac:69:6c:63:
         13:86:a0:90:13:19:fb:b3:b5:36:58:e2:ef:23:28:51:d0:e3:
         04:6a:de:21:19:ed:fd:cf:33:68:bb:18:9b:86:30:8b:82:85:
         ec:61:1d:eb:f8:8e:a3:8d:82:30:0b:cc:d4:57:62:5d:85:7b:
         cd:23:1f:88:bc:e9:bc:8e:0c:f0:40:fb:cb:be:55:38:7e:3f:
         43:97:42:73:92:8e:29:3f:50:f7:33:07:3f:84:6a:c1:1d:a9:
         a2:51:94:ac:05:18:c7:e2:d6:a5:af:79:78:7c:d1:32:ea:43:
         38:11:0d:34:a9:ca:ae:dd:0e:f2:7d:c0:f5:bd:f2:f6:ef:de:
         94:ae:bb:38:49:29:8d:3c:87:df:4f:ae:76:35:98:b9:59:46:
         16:72:e8:43:9d:29:ac:d2:69:f0:1d:02:fd:97:0e:32:5c:50:
         35:f9:d8:4d:70:af:49:87:d9:1d:1a:b9:ae:27:a3:27:bd:84:
         74:f7:d6:0e:e3:93:df:7f:70:15:55:47:79:a9:c8:66:7a:27:
         ce:eb:e8:07:23:b8:68:b6:19:bf:c0:19:32:93:ca:83:fb:52:
         28:0f:e1:98:30:be:87:d3:eb:21:e2:93:c2:a6:c5:c6:60:b7:
         8e:e5:9c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:35 2024 by rpki-client on console-ams.rpki-client.org