Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/af19xF1IK5WofZvrtvFmdpNvk7o.roa
File:                     af19xF1IK5WofZvrtvFmdpNvk7o.roa (raw, json)
Hash identifier:          WDlQkGRMTzR8Sa8H6Gy/5y3PWGJbY4fWUopUJAoNPd8=
Subject key identifier:   69:FD:7D:C4:5D:48:2B:95:A8:7D:9B:EB:B6:F1:66:76:93:6F:93:BA
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       22
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/af19xF1IK5WofZvrtvFmdpNvk7o.roa
Signing time:             Fri 18 Oct 2024 08:13:36 +0000
ROA not before:           Fri 18 Oct 2024 08:13:36 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     23783
IP address blocks:        27.110.96.0/20 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Oct 18 08:13:36 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=69FD7DC45D482B95A87D9BEBB6F16676936F93BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b5:d9:fa:0a:c6:0c:60:20:70:45:2a:8e:ee:
                    b8:ba:70:68:94:e5:f1:9d:d0:18:23:5b:63:f6:54:
                    bf:d1:62:fe:5c:c2:35:56:09:f4:73:67:27:0d:13:
                    bb:f1:2a:29:43:66:43:9a:5c:ec:18:93:b2:b4:68:
                    c6:b2:63:2b:b4:f9:a0:c0:9e:b2:4b:ab:08:d8:02:
                    5a:5c:18:4b:84:be:3f:cc:61:d0:32:0c:d8:24:5d:
                    a1:47:ee:81:a2:90:2a:ad:ae:53:0e:4e:c0:80:4f:
                    c8:6a:97:aa:4e:96:5e:58:0a:92:ac:3d:2f:72:a5:
                    82:f7:2a:6d:c7:1d:36:a9:b5:3a:4f:7f:80:ef:ee:
                    af:0c:86:5f:33:7e:79:70:0c:13:9c:c6:af:05:f9:
                    cb:06:ab:e7:dc:c5:d1:8b:f2:9a:59:28:c7:8f:89:
                    8f:d1:bb:f1:d7:32:8e:aa:08:59:99:6f:6e:15:47:
                    9c:c4:f2:3d:7a:2d:b8:b5:61:7d:c4:27:f0:46:6d:
                    a2:ad:c9:a6:c5:08:3b:c3:ae:e2:f0:5f:e5:72:54:
                    48:26:43:53:40:07:3a:4d:ef:7d:96:ee:51:ea:d2:
                    cc:39:3a:f7:3f:c3:55:96:57:2f:39:95:e8:a6:6f:
                    5b:01:27:80:65:ab:29:0a:d6:6f:7d:3f:36:f2:da:
                    9b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FD:7D:C4:5D:48:2B:95:A8:7D:9B:EB:B6:F1:66:76:93:6F:93:BA
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/af19xF1IK5WofZvrtvFmdpNvk7o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:ad:9e:32:2b:11:a2:ad:40:02:4a:28:22:42:27:e9:09:35:
         10:b9:48:91:0b:35:3e:ef:8e:66:9d:f8:4b:14:02:e1:05:8f:
         9d:69:29:cf:52:1e:13:9a:78:f9:9f:a1:8b:64:48:1a:77:e4:
         b8:80:72:9a:3d:91:77:8d:2c:ef:d9:6b:74:99:d8:30:b7:32:
         cf:b8:9f:c8:46:2a:8d:3f:36:a6:88:06:e3:6e:35:19:b2:33:
         f4:2b:44:3b:77:33:09:28:5e:e1:3e:78:ad:e2:4c:f4:e6:a7:
         78:0a:33:3d:ae:43:e7:fd:f3:c6:e7:aa:03:dd:01:50:7b:58:
         cd:72:51:e7:d0:67:ac:2f:62:01:ac:b8:51:3e:2f:61:07:ba:
         5a:57:84:40:bc:51:1e:04:a9:f1:c7:05:1e:86:2e:9a:5d:4d:
         b3:e6:32:49:90:c8:ab:d6:a7:c9:22:4b:5f:2d:99:e6:14:ba:
         8d:e6:3e:0a:1a:ac:9e:a6:de:3d:8e:cb:60:da:1e:27:2c:4a:
         22:70:f7:be:f8:cb:3b:fa:39:a1:b9:77:89:92:1b:47:6f:7c:
         f1:3c:a2:f2:4d:09:05:8b:c0:b4:0e:8e:28:b8:67:69:3a:15:
         a1:ab:8e:c4:e6:63:14:14:2e:90:3a:fe:6b:f7:ee:42:25:0c:
         f9:52:1a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:16 2024 by rpki-client on console-fra.rpki-client.org