Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/FNBKhaG0Rm6Fvx1QnDCZ4VERsBw.roa
File:                     FNBKhaG0Rm6Fvx1QnDCZ4VERsBw.roa (raw, json)
Hash identifier:          TiukOEvwGaLvXamzgmh6J+q7bfW+KUyfgsgn8+2UO94=
Subject key identifier:   14:D0:4A:85:A1:B4:46:6E:85:BF:1D:50:9C:30:99:E1:51:11:B0:1C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       020B
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/FNBKhaG0Rm6Fvx1QnDCZ4VERsBw.roa
Signing time:             Fri 31 May 2024 01:29:14 +0000
ROA not before:           Fri 31 May 2024 01:29:14 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        27.134.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:29:14 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=14D04A85A1B4466E85BF1D509C3099E15111B01C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:a8:e6:59:bc:1c:a8:49:5c:83:5e:f2:a9:
                    f6:77:3a:fb:d0:bb:25:23:e6:65:6e:96:a5:f6:01:
                    f9:6b:14:c0:b4:25:70:2d:35:42:12:62:0c:db:78:
                    55:ab:71:f6:5b:89:ff:95:d3:b7:36:50:79:ca:04:
                    2d:54:f6:1b:94:3a:09:07:83:70:68:0e:96:47:44:
                    77:d9:05:fd:ff:63:cf:64:4f:b6:9a:5d:a9:6c:15:
                    d0:e4:c1:7b:95:2e:5e:26:70:72:7c:10:e2:01:e3:
                    81:bd:7d:1c:cb:b3:ca:3a:2f:98:0f:9b:b5:fb:b9:
                    bf:19:ce:c7:d4:0e:93:61:00:83:87:7f:a0:eb:bd:
                    90:ff:5a:cb:a5:47:9d:0c:f5:84:39:7a:53:e6:80:
                    8a:c0:97:e3:e4:e8:5e:e9:c3:50:7c:24:6c:29:7e:
                    7d:54:14:01:02:63:84:e8:c2:c2:4f:c2:4e:69:07:
                    e1:4d:40:11:9f:f0:75:f0:fc:ab:54:8d:82:ab:0f:
                    00:1a:fa:b0:42:10:6d:7d:61:5b:a5:ee:9d:49:3a:
                    9b:d1:8f:86:eb:32:07:98:51:17:7b:94:0a:bc:aa:
                    d2:63:12:e4:73:40:79:9c:41:6a:ba:b7:6d:32:35:
                    46:7d:b9:85:84:09:81:e9:9c:bc:34:50:ce:9e:b5:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D0:4A:85:A1:B4:46:6E:85:BF:1D:50:9C:30:99:E1:51:11:B0:1C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/FNBKhaG0Rm6Fvx1QnDCZ4VERsBw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:a6:be:33:a0:0e:7f:cf:c4:30:de:52:07:a4:bf:ae:cc:22:
         e3:01:43:7f:db:9a:f4:23:0e:fe:2a:b5:69:5b:37:9c:6e:cf:
         b5:9e:d3:11:a2:ef:1a:2c:fd:b7:dc:4b:f4:e8:e2:aa:ed:b4:
         db:4e:7d:cf:7d:a8:f9:6e:45:51:1a:23:bb:5c:25:d4:e9:a1:
         a6:1e:c5:02:cb:96:c6:c3:0e:48:6e:ee:69:83:e9:0a:4f:95:
         e8:2e:9e:d0:9a:5e:05:54:77:8c:96:f9:8e:8e:61:03:72:80:
         4c:91:83:4f:1e:a8:7e:55:58:22:ef:9a:08:82:1f:9e:2a:e5:
         1a:6d:60:e4:d2:69:f1:7b:40:50:6f:b9:13:9f:6c:de:74:ac:
         ab:e5:31:36:bd:ab:c5:20:9e:42:c6:10:db:d7:5d:f2:72:2c:
         f1:a1:6c:ff:6b:b8:88:fe:eb:76:b6:07:75:bd:01:f0:cf:62:
         35:d8:51:9d:b2:88:ff:48:88:01:97:3c:65:2b:14:f3:5c:4d:
         dc:36:63:01:32:3d:ca:1e:bb:c2:33:73:fb:fd:c5:ae:31:e7:
         c6:97:25:0a:7e:b1:5e:7d:3a:8b:bd:0a:68:57:1a:ef:fe:ad:
         bb:da:28:39:83:79:33:bb:26:b9:26:59:4f:40:51:00:13:63:
         f7:fa:c6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org