Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/LHTDENkMttHM34Sf6ittSPl8s4Q.roa
File:                     LHTDENkMttHM34Sf6ittSPl8s4Q.roa (raw, json)
Hash identifier:          qwQctsA+GqVYuepQKRXqPJtHQWkg6hYyyrSBWMGCL5I=
Subject key identifier:   2C:74:C3:10:D9:0C:B6:D1:CC:DF:84:9F:EA:2B:6D:48:F9:7C:B3:84
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       022A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/LHTDENkMttHM34Sf6ittSPl8s4Q.roa
Signing time:             Fri 31 May 2024 01:33:09 +0000
ROA not before:           Fri 31 May 2024 01:33:09 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        27.134.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:33:09 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=2C74C310D90CB6D1CCDF849FEA2B6D48F97CB384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:75:0c:f0:7c:10:0a:22:87:50:31:09:be:3c:
                    ba:91:b6:b4:d9:74:60:29:11:e9:ed:95:d9:e2:06:
                    97:d9:db:33:b9:b4:b0:ac:e0:af:e9:e0:66:01:66:
                    47:c3:aa:6d:78:77:af:64:4e:3d:e1:da:fd:bf:cc:
                    28:19:36:d1:b0:2d:05:08:06:f2:e3:e3:34:0f:f8:
                    e7:2a:6f:4c:40:40:b1:b0:33:c5:a3:ee:40:48:5d:
                    09:f7:94:2b:64:8f:15:c9:42:1c:1d:51:44:18:cc:
                    92:dd:46:37:7a:85:fd:51:96:e8:cf:01:3d:24:05:
                    03:ab:b9:18:6d:7c:91:13:40:46:47:79:29:73:17:
                    e3:c7:37:c3:70:49:70:26:06:87:bd:70:71:74:07:
                    4f:b6:d9:ae:ef:e1:2e:aa:42:e5:44:c5:96:99:cc:
                    0a:27:64:b7:d1:4a:b3:f9:bd:1e:59:f8:e5:92:06:
                    3b:6a:49:c8:0f:3e:97:a0:c1:21:39:ee:9b:dc:9c:
                    d8:b3:5f:67:35:a8:68:33:47:47:6f:bb:75:20:8d:
                    9e:9b:1d:d5:25:f0:2d:6e:5a:82:bb:48:15:31:8b:
                    3c:bc:1e:58:2d:08:f3:b8:15:fa:1d:80:d1:d7:4d:
                    bf:74:ed:d7:04:97:29:8d:96:b6:03:88:11:2d:a8:
                    67:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:74:C3:10:D9:0C:B6:D1:CC:DF:84:9F:EA:2B:6D:48:F9:7C:B3:84
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/LHTDENkMttHM34Sf6ittSPl8s4Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:2d:fa:f4:ed:32:af:79:41:48:5a:91:82:14:1f:4e:cd:e6:
         aa:a3:aa:cb:c6:2b:09:05:e7:09:92:1e:91:a8:78:9c:43:f0:
         89:47:76:e0:43:c9:85:e2:3d:a2:45:72:7d:93:54:6a:6a:40:
         f2:ad:ea:ac:b6:5b:05:65:a5:e0:1d:b2:02:02:2f:65:ef:c0:
         36:82:53:9c:da:8d:e4:a5:fd:51:67:71:86:a2:08:01:09:d7:
         47:2d:d3:cb:6b:0b:a0:51:9d:cd:c2:d8:05:5d:0f:b2:0f:60:
         2d:25:58:74:66:86:0e:fb:81:db:6f:ab:c5:68:88:96:ad:83:
         70:b1:5c:99:8c:a3:68:50:6c:27:ab:31:26:4e:64:48:73:23:
         ae:6a:da:a8:19:44:9a:61:7b:66:ad:cc:ef:24:1f:9f:a7:3d:
         44:46:58:aa:74:28:db:2a:42:b9:e7:b7:52:5f:41:45:6d:f0:
         3f:34:87:21:6a:b4:ae:92:3f:d8:25:f3:57:30:aa:05:ba:d0:
         0c:42:1e:d3:e1:c6:bc:b5:bd:37:ee:fc:fd:1a:df:a0:ce:e3:
         08:ee:88:93:a3:e0:07:0e:01:db:d0:73:05:6c:63:8a:fd:ea:
         68:73:00:24:0a:4e:2b:c3:28:6b:dc:d5:4c:be:0f:a5:65:b7:
         96:ee:e3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org