Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mZPaQ6rB2loOLWiahzssQQglLX8.roa
File:                     mZPaQ6rB2loOLWiahzssQQglLX8.roa (raw, json)
Hash identifier:          Q8FP4Soh4buTmSj5i8YrGWuc0C58+WagkjuAdSiufOk=
Subject key identifier:   99:93:DA:43:AA:C1:DA:5A:0E:2D:68:9A:87:3B:2C:41:08:25:2D:7F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0978
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mZPaQ6rB2loOLWiahzssQQglLX8.roa
Signing time:             Sun 30 Jun 2024 01:33:43 +0000
ROA not before:           Sun 30 Jun 2024 01:33:43 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        27.230.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2424 (0x978)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:33:43 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=9993DA43AAC1DA5A0E2D689A873B2C4108252D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a2:49:b4:4b:6d:4f:e7:c0:92:36:bf:9d:a2:
                    f7:e9:c4:0d:be:fb:6c:68:bb:e7:56:67:2f:f4:af:
                    83:75:00:c0:b7:6a:7b:15:4e:ac:ca:55:cb:34:9e:
                    04:09:6f:75:a0:a7:37:04:bf:84:5e:b5:2f:12:08:
                    9d:a3:7a:27:28:ef:cb:c1:ed:53:75:0a:42:5c:67:
                    15:0d:c5:f6:05:2b:c6:c5:64:b4:de:05:e6:7a:26:
                    de:15:4d:80:01:d1:57:c8:49:75:59:95:05:1c:d8:
                    79:2d:72:1a:3a:cf:2a:56:c0:bc:fd:4e:db:9a:72:
                    0e:97:ea:4b:06:fd:72:e8:d7:23:a3:8e:4b:7d:d1:
                    b7:60:42:e6:2c:3d:74:1e:2f:fd:bc:56:14:b5:98:
                    20:0e:f2:8c:f2:7c:dd:9a:ef:28:3a:cb:c0:68:b6:
                    8f:0d:5e:d0:c7:96:0b:43:27:3f:49:cd:f8:b8:73:
                    a6:83:1a:6a:33:54:5a:83:92:a1:c3:76:85:d3:cd:
                    5c:56:14:cd:18:43:e1:6d:a7:6f:5c:21:b7:d0:de:
                    6e:83:59:56:af:c8:9e:c6:bb:bb:ce:a8:02:3e:40:
                    ca:0a:ba:58:77:bd:4f:fa:ff:bf:54:f1:65:3d:bf:
                    85:2b:56:f4:94:8d:f1:3e:7f:14:6a:10:c1:7b:b4:
                    59:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:93:DA:43:AA:C1:DA:5A:0E:2D:68:9A:87:3B:2C:41:08:25:2D:7F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mZPaQ6rB2loOLWiahzssQQglLX8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         70:d1:c3:59:e4:00:58:06:8d:29:81:93:df:d0:fa:4a:3a:35:
         02:dd:74:7a:3d:2b:f1:0d:d3:8c:b4:5b:f9:33:ec:41:17:16:
         ef:a2:47:a2:0c:c2:3c:f8:6e:bf:54:4c:d4:a0:f1:cd:72:c9:
         82:b8:77:a9:44:8c:59:e5:4d:23:a7:30:00:31:f1:e6:29:60:
         c5:1f:0a:9b:9c:80:60:cf:b7:d1:2f:4c:a9:1f:5f:e9:59:c6:
         26:97:81:b6:44:c0:16:ec:5c:f3:7b:79:59:31:01:85:3b:3f:
         15:b9:9a:79:0c:c8:76:cf:a1:9d:83:ac:b0:6f:b6:36:e5:36:
         b9:05:a6:d3:4f:2e:e6:8b:4e:43:2a:a7:db:01:b9:91:89:ad:
         67:73:d2:de:f8:28:2f:0b:51:0f:c3:3d:0a:31:a4:4a:c6:58:
         50:e7:ab:48:5e:49:29:2e:b6:11:5f:f7:85:3b:cd:c7:7e:72:
         6b:44:13:d9:e6:31:c5:5e:c9:98:ff:e0:59:92:e7:6e:12:22:
         0c:98:9c:82:d7:3f:17:d1:af:0b:13:05:5e:5a:c4:53:27:3f:
         34:5b:b7:82:0d:b3:c0:e2:c0:46:82:2d:45:39:27:8c:2d:2c:
         1c:9a:3c:66:0b:8c:31:af:75:35:f6:a8:c5:44:01:06:a9:84:
         b4:b8:6f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:17:12 2024 by rpki-client on console-fra.rpki-client.org