Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GGMedmg0q0-bou5imqWJRnudgXc.roa
File:                     GGMedmg0q0-bou5imqWJRnudgXc.roa (raw, json)
Hash identifier:          uhRKiZ/R8VL9bSck3Y5edZC+PbreV09w+ebGRyywDos=
Subject key identifier:   18:63:1E:76:68:34:AB:4F:9B:A2:EE:62:9A:A5:89:46:7B:9D:81:77
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       053A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GGMedmg0q0-bou5imqWJRnudgXc.roa
Signing time:             Thu 27 Jul 2023 16:54:16 +0000
ROA not before:           Thu 27 Jul 2023 16:54:16 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        27.230.100.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1338 (0x53a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:54:16 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=18631E766834AB4F9BA2EE629AA589467B9D8177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6e:04:39:ad:ef:8c:8c:c0:db:92:a8:de:40:
                    22:13:79:31:fd:b2:98:db:ad:08:8f:38:fb:3f:f7:
                    b3:07:3e:f1:07:25:f0:e1:9d:da:61:e0:e7:e6:a8:
                    51:0b:d6:42:e6:3a:0f:85:d2:6a:5c:f1:1a:bd:ae:
                    ff:c1:56:d2:52:3f:e3:2e:0c:86:17:cf:c8:70:d9:
                    46:1f:4f:bf:26:98:59:e0:c7:5f:f8:db:11:fb:71:
                    3c:1d:9e:e0:dd:5a:1f:f6:eb:af:ab:18:e1:e6:64:
                    df:92:5b:0f:eb:48:45:3f:c7:eb:9c:90:ac:61:1c:
                    b5:a2:c2:2b:20:22:52:b2:27:65:9f:29:83:89:95:
                    22:9b:49:e2:9c:2f:94:8d:24:62:22:8a:40:7b:31:
                    4a:18:73:56:8d:91:a2:e8:c3:88:4c:eb:a4:8b:91:
                    e5:31:52:8a:6d:94:bb:8d:23:86:87:8e:26:cb:f1:
                    01:38:74:16:6b:a5:6a:eb:f1:f0:af:90:8c:02:9a:
                    d3:0b:c9:11:6d:98:a2:d3:cd:24:ac:4f:bf:a0:72:
                    21:a5:3b:de:7c:95:21:71:de:40:d2:80:79:90:e9:
                    ae:64:e2:fa:81:c5:54:02:c7:8f:53:3e:57:54:d5:
                    54:36:64:ce:cf:76:a7:52:51:19:30:6f:3c:dd:da:
                    cf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:63:1E:76:68:34:AB:4F:9B:A2:EE:62:9A:A5:89:46:7B:9D:81:77
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GGMedmg0q0-bou5imqWJRnudgXc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:9e:f0:82:82:f1:82:39:49:48:b9:0c:73:b3:e4:ac:98:23:
         cd:d2:f9:ac:36:d0:c5:6d:03:44:f1:20:df:82:cd:8d:f1:05:
         1b:6d:e0:2b:ff:cf:68:39:90:53:0e:74:88:e5:2e:e2:d0:ef:
         31:90:52:79:d2:85:2f:e4:1a:b7:c4:b7:a1:73:40:e3:36:cd:
         49:d3:4a:3a:b6:7a:fd:17:06:8c:d1:4f:3e:56:0f:1c:07:f4:
         d7:bd:21:0f:fb:08:52:68:2a:9b:53:1d:28:3c:28:5f:20:ed:
         c3:1a:57:07:6e:33:40:74:6d:bf:87:c1:41:1b:8b:ef:da:9b:
         d6:3f:6b:d1:f5:b3:5a:82:9a:38:a8:a4:6d:95:3e:dd:d1:e3:
         55:a5:17:54:44:d9:bb:6b:72:69:43:df:7b:65:e6:dd:7d:61:
         a3:2e:9f:47:6a:34:31:3a:fe:f9:d4:13:d8:6b:14:60:83:77:
         cf:a9:ee:19:c0:61:41:c6:4a:6c:69:99:cd:c8:4a:e6:38:52:
         be:35:f3:7e:27:fc:25:7b:3b:68:82:03:09:8f:6d:a6:89:44:
         d4:f0:b4:a7:08:d1:fc:03:81:a0:b5:88:aa:61:3d:b8:61:66:
         23:56:f6:c1:ea:88:39:83:7a:05:40:b1:1d:0b:cf:35:d2:d8:
         23:00:03:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org