Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DT1weD6lGe0ph_3bupnYlcNHc5A.roa
File:                     DT1weD6lGe0ph_3bupnYlcNHc5A.roa (raw, json)
Hash identifier:          C5SCK6zWNdkTgSS88ly53NAF+LZE5XCNdqRUIb3esds=
Subject key identifier:   0D:3D:70:78:3E:A5:19:ED:29:87:FD:DB:BA:99:D8:95:C3:47:73:90
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04C0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DT1weD6lGe0ph_3bupnYlcNHc5A.roa
Signing time:             Thu 27 Jul 2023 16:48:14 +0000
ROA not before:           Thu 27 Jul 2023 16:48:14 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        27.230.64.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1216 (0x4c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:48:14 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=0D3D70783EA519ED2987FDDBBA99D895C3477390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c5:00:9f:65:d4:1a:3f:2c:12:9d:ff:d7:85:
                    66:09:c7:62:98:ad:fd:7a:c0:8e:0f:9d:7b:22:51:
                    df:04:e5:ca:e6:e3:ac:a9:62:17:8c:68:2e:8c:1d:
                    b5:52:49:25:14:f4:95:ff:40:12:ff:c3:b3:43:b6:
                    ba:68:68:4e:4d:3c:7a:5b:59:3e:c7:17:2d:43:5d:
                    39:cd:db:9a:4f:01:59:8f:5a:5d:bc:97:18:45:5c:
                    39:a4:d3:c6:fc:8e:7e:e0:4f:6c:f6:7b:c7:4d:8f:
                    61:d3:e1:28:df:a9:80:58:11:2e:f2:86:c4:f5:33:
                    2b:0f:f1:f8:fb:76:80:d5:c3:a4:25:bb:42:2e:9d:
                    4f:a7:a5:18:9f:62:96:e4:67:4f:96:95:56:50:66:
                    1e:08:19:d3:a1:8b:4b:5f:8e:ad:49:93:c9:3b:14:
                    e0:18:57:2d:20:aa:3f:0c:ea:e0:58:51:c5:b2:51:
                    33:84:49:b5:9e:9f:17:7e:6f:31:2e:93:4e:c3:0c:
                    c5:2a:76:4a:fd:42:01:b1:a0:9b:11:8c:0a:57:4c:
                    da:e4:8b:80:2e:c4:37:3f:5d:81:e6:9e:0c:a4:81:
                    3d:a9:0f:29:8e:f7:e7:6a:92:dc:2e:e0:ea:34:68:
                    28:1d:6a:9f:a2:f2:e4:1e:11:8b:53:de:5f:de:5e:
                    19:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3D:70:78:3E:A5:19:ED:29:87:FD:DB:BA:99:D8:95:C3:47:73:90
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DT1weD6lGe0ph_3bupnYlcNHc5A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         e1:83:ae:a3:02:60:ad:f3:b2:ef:dc:1a:28:d0:44:ce:62:2d:
         d8:a6:6a:31:65:bd:d9:4e:0a:7f:22:d2:ef:4d:3d:1d:3b:5b:
         fd:cd:fd:2b:97:58:59:7d:70:0b:26:12:5b:da:3a:e9:dd:75:
         2f:f5:1a:ad:f6:f0:e0:f2:51:5b:28:0c:fd:52:b7:b6:f6:44:
         fa:35:62:25:dd:e2:5f:7c:80:69:61:01:33:37:34:b4:bb:1e:
         03:c6:2b:b0:d5:a7:9e:e3:f7:a3:cc:4f:aa:94:ff:3b:d7:5d:
         8f:b1:a7:d3:c3:49:c9:46:7c:4d:b6:3f:76:63:4e:c6:4d:13:
         d9:e5:a3:05:6f:a2:74:a7:55:de:c5:25:2f:d8:83:3f:26:9b:
         ab:e0:53:cc:42:7c:73:c7:e9:b9:1e:97:74:46:fe:44:0a:8c:
         38:f0:30:74:c9:4a:c5:7f:9c:b7:c8:41:6f:db:83:44:83:29:
         d3:4e:33:f3:6e:3c:4b:6d:d0:91:64:a0:31:45:2e:30:4b:1f:
         3e:19:18:73:db:9d:df:7d:75:45:ba:44:36:71:e7:bd:4c:7a:
         8d:ac:aa:cb:7c:29:d9:77:3d:90:13:e6:aa:03:35:a6:d8:7a:
         1c:2a:ec:86:87:de:bf:61:1a:1d:47:92:24:9b:d0:68:8a:35:
         7f:31:74:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org