Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qn7gT64YQF8QfVeRbnaTT-PbDKo.roa
File:                     qn7gT64YQF8QfVeRbnaTT-PbDKo.roa (raw, json)
Hash identifier:          z9/8FLpjkif9ywgFZrXScb/yXqPCvA1ILhwIT5j4AgE=
Subject key identifier:   AA:7E:E0:4F:AE:18:40:5F:10:7D:57:91:6E:76:93:4F:E3:DB:0C:AA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       098B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qn7gT64YQF8QfVeRbnaTT-PbDKo.roa
Signing time:             Sun 30 Jun 2024 01:36:24 +0000
ROA not before:           Sun 30 Jun 2024 01:36:24 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        27.228.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2443 (0x98b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:36:24 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=AA7EE04FAE18405F107D57916E76934FE3DB0CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:24:73:e9:c9:6c:fa:97:50:29:cc:fe:a2:
                    89:69:c7:93:22:e2:08:1b:a2:c8:7f:8d:55:2e:26:
                    b6:1e:ca:be:dd:45:25:d8:f1:e8:14:e8:b0:25:62:
                    ca:77:73:d6:53:4a:f1:59:c9:c9:ec:bc:80:ad:c9:
                    13:19:49:26:dc:d0:87:7b:33:3d:b8:51:4f:df:8e:
                    12:62:c5:f4:f8:86:5c:3f:6b:71:fe:c0:51:21:16:
                    de:06:b8:06:d5:b7:fd:ec:ab:28:5e:2e:ae:57:28:
                    9e:4e:a6:23:5f:d2:f3:ed:3b:88:bb:5e:da:27:a0:
                    8a:ee:b6:76:2d:a6:68:46:d3:28:d2:f8:48:1b:c4:
                    62:49:dc:f5:ae:90:31:0c:fe:a4:99:0a:80:9c:1f:
                    71:f8:fd:39:38:59:ed:14:ff:de:72:19:36:fc:d4:
                    d9:a4:4d:b6:4a:a3:52:f3:f3:f3:63:e7:7f:fe:ff:
                    37:34:a5:1e:7a:27:c7:9b:0b:53:c8:56:95:9a:d9:
                    54:50:75:80:1e:af:a8:32:f1:b1:99:5f:de:eb:c5:
                    cc:c9:2d:b7:73:cf:64:68:46:73:2f:de:8b:93:63:
                    c5:f1:f7:d6:c9:a4:af:69:94:8f:57:04:18:84:48:
                    70:8c:ac:3e:5c:39:88:49:8e:95:ba:3d:8f:02:b5:
                    a7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7E:E0:4F:AE:18:40:5F:10:7D:57:91:6E:76:93:4F:E3:DB:0C:AA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qn7gT64YQF8QfVeRbnaTT-PbDKo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.228.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d7:0f:97:5e:69:32:4e:96:97:cd:f2:66:8a:62:0c:53:0c:6e:
         ae:dc:07:df:c5:66:35:98:18:5b:48:97:36:72:a4:fb:3b:de:
         ce:32:e9:2b:54:84:23:fa:27:6e:eb:54:96:48:62:45:39:cb:
         78:2c:8a:dc:65:67:b4:bb:d4:b0:64:a6:b7:4b:ef:03:b2:fa:
         d6:8e:f1:3d:9a:e7:41:4e:a4:0e:48:8e:35:4f:d4:42:1d:46:
         e6:f2:3e:c4:f8:2d:a0:c9:04:d0:fe:a8:8d:6d:a6:e6:4a:fd:
         7e:ce:7e:1c:4d:bf:7e:8b:8b:ce:37:c8:11:37:82:eb:f0:90:
         22:df:f4:0a:a3:2f:3f:00:e2:ec:73:13:e7:5f:55:c1:0b:c6:
         f3:e1:14:7a:15:51:9e:e1:21:bb:f2:ea:9f:cc:51:72:4a:72:
         92:54:83:9d:b5:09:c8:68:08:b5:17:06:cd:5a:36:1e:2d:a3:
         6a:29:29:f5:11:2a:bc:bf:72:1d:d2:b0:8d:d7:a3:aa:b3:a5:
         14:f6:c2:b1:5a:f5:ce:88:a6:36:4c:c8:ea:cf:02:1e:3b:3e:
         1c:07:f9:0a:d1:75:bb:8d:45:56:12:c6:06:e1:83:f9:83:b6:
         75:c0:09:05:c1:63:61:43:4f:9c:26:1c:73:5b:bd:9c:6b:99:
         1c:76:3f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:03 2024 by rpki-client on console-fra.rpki-client.org