Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/_cq_X9OMi0XkPJJcvQDwK6Al0wk.roa
File:                     _cq_X9OMi0XkPJJcvQDwK6Al0wk.roa (raw, json)
Hash identifier:          a3NHs4nNUqka9WlHmJmOkdjQdSwlxova59fSQoMbITo=
Subject key identifier:   FD:CA:BF:5F:D3:8C:8B:45:E4:3C:92:5C:BD:00:F0:2B:A0:25:D3:09
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       024A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_cq_X9OMi0XkPJJcvQDwK6Al0wk.roa
Signing time:             Fri 31 May 2024 01:35:33 +0000
ROA not before:           Fri 31 May 2024 01:35:33 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        27.135.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:35:33 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=FDCABF5FD38C8B45E43C925CBD00F02BA025D309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:11:4d:35:12:34:da:a5:5b:e2:5f:a9:f2:
                    ad:11:01:2e:41:e0:60:14:91:57:ef:ae:22:16:7a:
                    b1:22:0c:9a:5c:f5:16:ef:19:55:5f:c9:37:a1:ab:
                    80:cc:f1:31:71:35:ef:f4:1a:6c:4d:bf:f3:4f:4f:
                    f5:ba:05:20:1f:df:e0:68:20:6f:7d:9e:1e:53:65:
                    40:78:ff:b0:b5:a0:89:5a:1d:4a:1b:a8:ae:21:67:
                    c4:f0:7e:21:88:d6:8a:44:bd:4b:06:e8:b6:a7:41:
                    ce:0f:09:c7:16:21:06:7d:aa:6a:2d:29:59:a5:a6:
                    e4:39:29:1b:f8:72:3e:ae:cc:16:6f:db:75:29:c9:
                    5b:fe:18:d7:ca:0a:ee:50:dd:60:c2:58:cd:9c:34:
                    32:9a:86:f0:77:1b:3c:20:7d:28:10:4b:be:10:1f:
                    a6:ef:9d:48:4b:cd:28:cb:41:d8:72:77:10:05:9f:
                    a4:11:73:1d:62:e8:69:dd:18:2a:57:5b:9d:43:9a:
                    8e:5f:5e:d5:ea:2f:37:43:0b:9a:89:f9:43:e4:43:
                    48:2a:7b:0b:d8:2f:72:7e:bb:4b:fa:1d:25:83:3b:
                    b2:7e:b0:ec:18:b2:90:66:56:ab:51:28:0b:ce:e4:
                    18:43:7d:5b:7d:29:c1:08:ba:c9:52:ff:cc:e6:93:
                    c0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CA:BF:5F:D3:8C:8B:45:E4:3C:92:5C:BD:00:F0:2B:A0:25:D3:09
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_cq_X9OMi0XkPJJcvQDwK6Al0wk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.135.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:36:5e:48:60:cf:d2:38:77:a1:21:b4:3e:e9:e5:cd:55:d1:
         f2:ae:e6:2b:a4:82:88:07:0b:07:e9:ce:32:a2:ca:e6:42:47:
         ba:83:fe:85:d1:7f:31:cf:f7:bc:e8:06:5b:62:6a:05:f4:e6:
         f3:ea:2f:aa:a7:29:e5:6e:f7:d8:bf:37:a4:f3:0d:ff:46:65:
         d8:36:0a:02:6d:8f:df:29:44:24:3f:63:f1:07:37:15:68:da:
         53:79:92:0c:22:dd:b1:cf:b9:1f:cc:db:ab:85:7f:e6:e5:78:
         dd:ee:43:61:e7:1f:ee:6b:02:08:3e:48:17:5a:b8:f5:9f:d0:
         82:64:39:52:96:da:3e:d8:02:4b:44:6d:3e:f6:42:ef:b2:a4:
         06:d6:91:ec:17:e9:0e:45:16:bd:22:71:4c:89:f3:a5:50:b7:
         bd:2e:ac:16:49:6c:a0:24:e9:ff:7e:4b:fb:6a:ba:76:f0:ca:
         d7:6d:e7:55:ad:f0:57:67:6d:0c:63:2c:65:62:ca:39:dc:32:
         15:51:d2:0a:5f:03:1e:da:bb:98:26:c3:77:5f:ad:7a:92:37:
         12:14:4b:16:2d:3d:c7:05:e9:12:b5:dc:6d:7f:fa:f3:59:fc:
         bc:76:f3:be:0a:10:5f:8b:ba:1d:ee:6b:51:7b:8d:86:79:49:
         5e:14:ba:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:21 2024 by rpki-client on console-fra.rpki-client.org