Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/cdUgBkImP4L5pp6NazzaEf64hFU.roa
File:                     cdUgBkImP4L5pp6NazzaEf64hFU.roa (raw, json)
Hash identifier:          u0vfyNZZhSkE3X+cPH3Q5U4+4l/BZ/5w6YRsHqJ7aU0=
Subject key identifier:   71:D5:20:06:42:26:3F:82:F9:A6:9E:8D:6B:3C:DA:11:FE:B8:84:55
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       022F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/cdUgBkImP4L5pp6NazzaEf64hFU.roa
Signing time:             Fri 31 May 2024 01:33:11 +0000
ROA not before:           Fri 31 May 2024 01:33:11 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        27.133.160.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:33:11 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=71D5200642263F82F9A69E8D6B3CDA11FEB88455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:87:8f:4e:4c:c5:5e:01:dd:99:5b:a8:de:20:
                    78:c9:a0:dc:f9:38:60:19:5b:9b:35:37:b4:63:85:
                    a9:45:15:62:ca:22:04:f1:c6:0f:4d:77:fc:aa:24:
                    85:1c:4f:73:d4:fe:cf:a7:7b:3f:84:a7:55:54:07:
                    3a:7a:10:84:e6:54:74:d1:77:ca:a3:56:50:6c:b2:
                    88:fa:dd:ab:45:92:0a:6a:8e:8a:fb:dd:bb:2e:94:
                    3d:46:39:aa:67:ca:c1:43:4b:34:de:f0:09:4a:fe:
                    40:af:e0:81:8e:6e:df:ae:df:d5:99:05:f0:80:fe:
                    ec:5f:08:bb:7c:f0:fa:b9:52:19:6e:f2:c7:90:f7:
                    50:b0:bf:e0:9d:5f:ad:ad:16:9c:cb:fd:e3:af:dc:
                    f4:94:ac:7c:53:c1:64:31:45:bf:72:fd:a8:59:e8:
                    4f:45:f3:0b:3d:93:65:04:68:61:2c:3d:20:a5:68:
                    69:17:65:69:87:f1:e5:40:71:50:a7:6f:e2:b2:d9:
                    5b:85:32:56:72:f4:a0:24:4c:d2:a8:d3:27:39:4e:
                    d3:de:ca:70:e2:f7:10:22:1b:57:ee:7b:29:36:51:
                    d5:45:d6:6b:ae:51:d2:aa:0a:2f:4e:20:b6:0b:0c:
                    08:3c:c7:e6:6d:69:b4:81:3b:9c:56:e9:8f:d6:91:
                    ed:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D5:20:06:42:26:3F:82:F9:A6:9E:8D:6B:3C:DA:11:FE:B8:84:55
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/cdUgBkImP4L5pp6NazzaEf64hFU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:5d:fa:cb:ff:b7:1c:78:6e:ad:50:b7:ac:a6:40:61:80:a7:
         1b:3f:8d:53:54:14:15:1b:35:69:f3:17:ee:63:8b:28:81:fe:
         a4:77:f0:b6:be:03:f9:ea:dd:0d:60:d7:ed:62:3f:07:fe:c0:
         e2:d6:95:74:f9:55:85:80:0b:af:44:95:8d:8e:e6:4b:98:9e:
         da:63:b7:ea:1b:10:af:5d:db:36:33:72:e3:e3:09:4e:d3:0b:
         cb:2c:d9:8f:66:13:8d:1a:77:70:71:46:79:5d:91:b1:93:26:
         75:6d:0b:67:54:42:e6:07:da:43:5d:ea:e3:24:cd:34:4b:99:
         07:e2:f1:53:5e:58:7e:c8:18:ca:05:e8:d2:52:26:1b:89:7e:
         aa:ce:7f:14:37:06:65:6f:5e:59:bb:71:54:e8:87:ef:26:44:
         43:38:de:a4:63:22:bb:4a:18:33:95:69:4d:3f:58:dc:4e:4c:
         e3:e2:fd:95:4d:86:f8:ad:d8:34:65:1e:fb:c1:b9:d3:05:b4:
         6f:fe:b2:bb:b2:44:a0:9d:a4:b3:47:2f:60:11:de:1f:3f:c3:
         7d:59:9b:d4:9e:81:b7:8c:69:a1:8d:d4:67:b2:b0:95:cf:5b:
         d9:83:df:18:22:94:f9:77:96:6a:c8:f1:59:b8:01:34:27:4a:
         58:00:ff:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:17:14 2024 by rpki-client on console-fra.rpki-client.org