Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ccgCBZFrImGfMWaROFaQYa3LgC0.roa
File:                     ccgCBZFrImGfMWaROFaQYa3LgC0.roa (raw, json)
Hash identifier:          0HtYFn7VCBSKijyWni3Wct0bR7GQ5M4E12bHzpSRDwA=
Subject key identifier:   71:C8:02:05:91:6B:22:61:9F:31:66:91:38:56:90:61:AD:CB:80:2D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02C6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ccgCBZFrImGfMWaROFaQYa3LgC0.roa
Signing time:             Tue 30 May 2023 17:17:38 +0000
ROA not before:           Tue 30 May 2023 17:17:38 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.98.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 710 (0x2c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 17:17:38 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=71C80205916B22619F31669138569061ADCB802D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:f5:b8:2d:cc:36:7a:75:32:82:35:e9:6d:
                    2d:5d:9c:42:67:9a:99:7e:ea:5b:86:b8:38:68:09:
                    09:35:26:ab:bf:f2:b1:60:92:31:7e:72:e0:1f:a5:
                    87:c3:84:ce:f7:7e:cf:3c:22:15:7f:fe:ce:e5:69:
                    c5:39:fc:b6:88:16:b1:15:51:c7:5a:19:4b:b3:de:
                    45:7b:4f:e8:11:c1:bc:c6:c3:8a:10:73:01:39:7c:
                    02:3d:54:a9:d7:ea:0f:a9:0b:5d:56:d1:45:2b:37:
                    e8:96:9b:6f:60:78:cb:bc:b0:02:2f:e3:27:ba:31:
                    2b:cd:71:a4:ce:ca:90:86:86:0c:c4:1a:67:38:0f:
                    bc:f2:c6:2c:a1:d1:90:48:0d:c2:2c:4e:f5:e9:31:
                    05:ff:73:21:08:0a:d7:b0:b1:c7:cc:c9:7f:45:db:
                    4e:6b:85:5d:d7:32:3b:b2:73:e0:d9:e3:c2:12:51:
                    65:e7:83:b5:51:f2:db:9f:ab:5d:ad:09:e8:56:42:
                    e6:68:4e:60:f3:d4:20:16:4d:83:90:d0:4c:e4:f6:
                    be:f5:a3:59:b4:77:64:dc:30:d4:1c:ad:96:e7:d9:
                    4a:93:ad:8f:26:9c:41:f4:2b:ed:83:d7:92:4b:3e:
                    d3:0f:bd:73:b9:68:85:79:97:75:fb:b9:b3:c8:58:
                    8f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C8:02:05:91:6B:22:61:9F:31:66:91:38:56:90:61:AD:CB:80:2D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ccgCBZFrImGfMWaROFaQYa3LgC0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:3d:88:33:32:78:e5:0c:6b:12:c9:a4:9b:80:21:85:52:83:
         2b:d3:e0:fe:b0:df:c0:57:70:dc:d3:e3:06:b7:0c:e6:2d:b6:
         67:5e:42:fd:b1:92:7f:45:cc:d7:ed:4c:0c:e4:03:a4:27:25:
         1f:f4:47:d4:44:29:de:34:c9:27:1d:66:70:f6:ad:fc:a6:6b:
         fb:2a:7f:2a:64:78:6f:60:03:43:38:43:d4:96:ce:74:1a:7b:
         1b:62:6d:31:1c:ce:b5:5e:b9:ff:75:ac:9c:23:bb:2b:05:79:
         2c:47:35:bc:f8:8c:18:42:66:15:e8:fc:cd:33:30:61:5c:10:
         2f:b3:60:74:eb:c6:89:23:e5:d4:85:e2:e3:eb:37:85:91:08:
         db:fa:2d:59:0e:64:59:5d:47:2e:8f:1b:36:a8:7e:53:14:d8:
         47:34:cd:b9:1e:03:a6:f0:3e:05:3e:cd:c6:04:aa:eb:28:48:
         5a:41:46:25:8f:7c:05:67:78:02:15:53:38:93:68:3c:e4:1e:
         0b:f4:48:ae:6a:7f:37:8f:b5:40:d2:1f:ac:72:85:21:b0:11:
         1f:d2:08:d7:8e:3a:a0:b9:13:52:aa:02:cc:ba:fb:c9:4f:ae:
         52:2a:98:77:34:5a:ed:03:19:d0:fd:0b:6a:13:f2:df:d2:a4:
         42:89:98:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org