Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ilusIFR4DWTcRPZGSqmXgvYYtyg.roa
File:                     ilusIFR4DWTcRPZGSqmXgvYYtyg.roa (raw, json)
Hash identifier:          GaMVZd1TX3Lic4CpXDYt0V/S7BCImMOs1Hp8KwQJd6s=
Subject key identifier:   8A:5B:AC:20:54:78:0D:64:DC:44:F6:46:4A:A9:97:82:F6:18:B7:28
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       09F7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ilusIFR4DWTcRPZGSqmXgvYYtyg.roa
Signing time:             Sun 30 Jun 2024 01:42:27 +0000
ROA not before:           Sun 30 Jun 2024 01:42:27 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        27.230.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2551 (0x9f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:42:27 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=8A5BAC2054780D64DC44F6464AA99782F618B728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9b:10:32:1c:91:bc:92:17:bd:71:b9:7c:46:
                    d3:cc:41:e2:be:9e:78:88:55:61:2e:fc:1e:9b:ae:
                    ac:c6:25:f9:0e:31:47:2b:06:08:37:a6:65:66:56:
                    c4:1d:10:15:fb:a4:f9:74:64:0c:60:a3:25:40:85:
                    a4:67:81:bb:71:51:ad:a0:a6:25:7c:b3:87:02:7e:
                    f8:ee:89:e6:ff:6d:81:6c:16:7c:2e:8c:db:46:82:
                    17:4a:44:30:d8:55:da:08:54:ec:03:51:5a:c4:cd:
                    0f:7f:b7:6c:cf:ac:8b:29:23:38:50:46:e5:a6:53:
                    19:94:fb:10:3b:16:9d:e3:c2:07:d4:0f:92:43:41:
                    c1:25:e7:f6:81:79:fa:a4:81:af:c0:eb:bb:25:58:
                    44:eb:a3:44:20:33:65:0d:e7:43:88:d4:66:44:17:
                    ff:1f:20:cb:b8:84:0f:b2:b7:43:3f:d2:c6:33:db:
                    b9:43:6c:e8:26:0e:79:11:73:78:1d:e4:39:40:f7:
                    d6:7c:ae:ff:1e:6c:04:c0:a1:c5:84:56:99:b2:c3:
                    79:e9:e7:cf:ca:80:8f:62:fb:bd:71:01:93:34:c8:
                    54:20:a7:e5:32:1a:65:17:21:e9:ff:07:2a:39:dd:
                    5d:91:dd:5a:40:7c:90:4f:7c:7a:7b:c6:4a:29:69:
                    28:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5B:AC:20:54:78:0D:64:DC:44:F6:46:4A:A9:97:82:F6:18:B7:28
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ilusIFR4DWTcRPZGSqmXgvYYtyg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:36:15:59:5d:35:b8:be:a4:b2:36:58:b3:7c:f8:e1:50:5d:
         2a:a4:9e:71:38:24:76:86:ea:a4:3d:b2:a7:92:a1:d8:28:b4:
         8a:b1:6f:a4:8e:e8:78:de:ae:86:08:80:03:99:e7:75:31:88:
         94:8a:86:1a:9a:06:67:09:c9:66:ce:9d:46:30:64:8e:5a:92:
         5b:45:3c:ad:42:b3:4e:4d:e1:e3:07:6d:7c:35:c8:07:21:61:
         ac:57:29:89:7c:1f:bf:06:77:9a:41:f1:f2:dc:68:d3:fe:74:
         c5:65:ff:7d:30:e5:6c:db:be:f5:38:ef:cc:06:a8:21:bd:b0:
         6c:b3:ee:d1:3f:4e:02:35:8b:b0:b4:01:a2:ff:ea:3b:1c:3a:
         66:f4:ca:4a:72:8c:61:e6:9d:ff:63:ab:0d:3a:8d:b3:ba:87:
         81:b9:fa:9f:06:d5:cc:41:73:e3:0e:79:1e:b1:38:61:84:36:
         9c:10:7f:62:70:80:0d:62:19:44:0e:22:91:20:1c:1d:b3:b3:
         54:09:22:0b:56:27:eb:71:b4:f5:7e:e6:3a:c4:51:2d:76:a0:
         07:df:bb:81:f8:bc:25:c6:ed:bd:dc:6e:b1:96:64:2d:ea:a3:
         cc:ae:04:d1:fa:ad:b9:ac:33:6e:8b:58:6d:75:9c:f6:eb:f8:
         53:26:c2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:02 2024 by rpki-client on console-fra.rpki-client.org