Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EeZ02sS4NzMIJEDUnUW6q8YU-AE.roa
File:                     EeZ02sS4NzMIJEDUnUW6q8YU-AE.roa (raw, json)
Hash identifier:          7xncOr17BrbQH+3Xhw7cBW2JtPlodqamvShtnb08dkA=
Subject key identifier:   11:E6:74:DA:C4:B8:37:33:08:24:40:D4:9D:45:BA:AB:C6:14:F8:01
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0478
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EeZ02sS4NzMIJEDUnUW6q8YU-AE.roa
Signing time:             Thu 27 Jul 2023 16:44:08 +0000
ROA not before:           Thu 27 Jul 2023 16:44:08 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        27.230.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1144 (0x478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:44:08 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=11E674DAC4B83733082440D49D45BAABC614F801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a4:43:70:5f:82:43:1c:4b:ef:db:91:36:1f:
                    77:06:0c:8a:db:d4:2c:b3:61:4e:2f:e5:da:0e:07:
                    a2:03:92:cb:da:fa:ee:c9:53:a4:8a:4f:fb:bf:9e:
                    81:3f:ea:de:d9:55:3b:13:4d:38:29:a5:70:3e:a7:
                    c7:b5:1f:74:15:c2:ce:ce:ca:24:58:50:7e:dc:13:
                    1b:64:cc:ff:d3:db:e4:ca:90:58:a4:b2:e3:b2:71:
                    d2:76:8d:ef:2e:79:7a:87:02:84:63:b2:4c:c2:be:
                    ba:02:f8:b8:be:a5:37:4f:5a:9b:aa:ef:76:5c:27:
                    f3:97:61:91:f4:8f:4a:49:b0:1d:f8:76:30:21:20:
                    cf:a3:16:a4:12:8c:47:3d:90:b2:36:1e:68:21:28:
                    6b:75:1d:6e:e7:62:8f:eb:0e:7b:8d:34:e0:c3:43:
                    30:b6:62:bf:24:b9:05:e7:e6:50:0b:4d:0a:49:e2:
                    9b:70:8d:ec:8a:78:c4:e4:e7:c5:0c:c5:ca:f2:12:
                    ae:96:78:d7:e1:d0:3b:36:67:3f:f2:9e:78:4b:ee:
                    08:12:eb:53:8f:8e:e2:4f:a8:b0:d1:83:69:ed:a3:
                    71:e6:a9:f1:a8:92:3e:85:aa:3e:4a:dc:c3:9f:55:
                    0b:75:0d:20:68:01:cc:a9:eb:92:44:cb:28:f5:01:
                    5d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E6:74:DA:C4:B8:37:33:08:24:40:D4:9D:45:BA:AB:C6:14:F8:01
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EeZ02sS4NzMIJEDUnUW6q8YU-AE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         07:c4:f5:25:c0:38:4f:00:cb:04:65:b5:43:db:1c:15:cf:82:
         e5:d3:65:12:a3:3d:e2:93:c7:7a:1e:37:9c:bf:ff:5f:03:6c:
         fa:ed:3c:9a:04:bb:e3:d7:36:67:38:0a:7a:a6:ef:9c:d9:e1:
         30:fd:93:7c:f4:49:19:d7:5d:7b:d8:96:3f:b2:ae:c2:2a:bf:
         dc:ca:85:5b:5d:78:64:cd:8c:53:30:6b:d3:03:b6:5c:85:7a:
         0c:55:d8:a4:20:76:d8:4f:0b:26:c2:2d:4c:87:49:23:f4:79:
         09:df:34:61:b8:4f:bb:f2:4e:81:3e:c8:25:e7:ea:cf:15:8e:
         21:eb:c1:80:9d:23:97:9a:de:6d:6a:4a:1b:46:b4:f4:d5:da:
         45:4f:28:b2:af:56:19:4c:31:f5:36:b3:6a:0b:16:07:39:e1:
         fc:c5:6f:6d:ac:ae:1b:93:87:87:eb:5b:51:5f:76:1a:e9:0b:
         75:a6:22:92:09:3c:a5:1a:88:97:ec:ae:a1:91:ae:08:dd:37:
         90:0f:34:fb:23:91:8b:9a:af:96:fa:e8:22:ed:03:a2:54:ca:
         36:51:c5:e1:79:42:40:95:f6:1f:96:de:52:fe:ba:82:f5:d5:
         9d:11:b1:e2:92:52:ae:35:9d:2c:d0:bc:a4:72:a1:0b:5a:0d:
         ed:16:4a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org