Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Fjq7KGVsZFKE9cmYp54X1gdDPjk.roa
File:                     Fjq7KGVsZFKE9cmYp54X1gdDPjk.roa (raw, json)
Hash identifier:          sgaOV/wWwjHRNUuFM765a9IQgRsjM8npxa12nyEmR9o=
Subject key identifier:   16:3A:BB:28:65:6C:64:52:84:F5:C9:98:A7:9E:17:D6:07:43:3E:39
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A36
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Fjq7KGVsZFKE9cmYp54X1gdDPjk.roa
Signing time:             Sun 30 Jun 2024 01:46:35 +0000
ROA not before:           Sun 30 Jun 2024 01:46:35 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        27.230.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2614 (0xa36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:46:35 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=163ABB28656C645284F5C998A79E17D607433E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:04:ff:56:d6:cc:4e:f1:b9:59:74:d6:3a:e3:
                    7a:6b:9e:34:04:eb:7e:63:9d:ee:5c:bd:ad:36:ec:
                    12:26:7d:0b:9a:ba:15:34:f2:b5:82:0b:1e:50:59:
                    cd:57:c2:85:5a:e8:d5:ac:b9:89:fe:60:7f:1b:52:
                    e4:e1:a7:86:ca:dd:e7:8d:f0:0f:af:08:f5:b4:4e:
                    b4:5f:3e:14:2a:2d:49:b3:fa:4f:34:34:a7:7b:f8:
                    96:dc:9d:87:1e:fc:13:2c:05:ad:ae:48:b4:6a:5c:
                    1c:43:32:4f:e1:34:9d:f2:31:b7:e8:0a:5a:55:62:
                    da:6e:1d:fe:b8:99:23:b9:05:c4:87:bd:22:46:68:
                    73:ff:38:4f:4c:cf:dd:3a:59:82:69:79:77:15:35:
                    cd:f8:fa:b8:96:36:76:24:b1:e1:b9:7f:a8:2f:a0:
                    a4:16:d6:1f:c2:94:ce:f1:2b:67:30:a6:b3:ec:f6:
                    0e:c8:1e:d8:db:fd:e5:2a:a3:eb:5a:67:5d:73:91:
                    81:3a:99:b0:af:ed:34:64:cf:f6:90:b4:c1:9e:0a:
                    b1:92:7a:9c:0f:82:ab:57:12:f7:83:35:ed:7f:02:
                    b3:93:fc:06:87:fc:0e:bb:c7:b1:d0:7f:e9:46:e9:
                    fa:fa:ff:68:56:7b:ad:f9:63:f1:1a:5b:ef:e0:86:
                    f2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3A:BB:28:65:6C:64:52:84:F5:C9:98:A7:9E:17:D6:07:43:3E:39
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Fjq7KGVsZFKE9cmYp54X1gdDPjk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:5e:f1:50:b3:08:e4:65:b2:c0:e1:f4:a7:9e:b8:16:e1:ee:
         76:d4:e3:5c:d5:6a:5e:d4:59:9c:d0:bf:69:69:e1:fa:f0:51:
         32:6b:16:0c:49:82:e1:0a:78:23:28:c9:da:cd:56:e6:2b:f5:
         b1:68:8c:37:51:70:1f:8b:be:fd:6b:8e:3b:2d:bb:2c:92:08:
         ad:60:2e:7e:7c:e8:63:f8:80:9d:86:df:7e:43:d3:bf:b9:92:
         c5:97:f6:84:c8:f5:32:ca:e3:1a:75:56:b5:b1:d0:5f:f5:c2:
         95:4f:db:73:e1:2c:03:99:e4:96:cf:75:fa:f5:01:22:42:9b:
         d6:41:0f:dd:2e:34:5d:90:a6:c2:4f:65:bc:c3:9d:94:08:ad:
         9f:4c:68:49:93:bd:b5:b0:ed:ea:53:46:80:75:a2:52:aa:ea:
         76:21:c0:eb:4f:12:07:38:2e:53:5d:d4:17:b8:b3:5e:25:b5:
         ec:48:ff:89:74:61:e7:0c:a9:5c:84:13:b8:c3:a5:1c:06:e6:
         9b:b1:0e:a5:91:1d:68:bf:c3:88:b7:d5:fc:30:34:3f:04:8f:
         c8:6c:6f:30:de:71:ee:c0:ff:5a:b7:77:cc:11:fb:3f:5e:ce:
         02:20:f5:1e:69:45:5f:89:dd:ea:9c:75:9b:f5:eb:94:6a:b5:
         9d:93:8c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:14 2024 by rpki-client on console-ams.rpki-client.org