Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/fysSMfwUwB-xy6wGyDBdL03CRMs.roa
File:                     fysSMfwUwB-xy6wGyDBdL03CRMs.roa (raw, json)
Hash identifier:          bzLUZUo+ucGui+6Arvk9NHa8XkpUyOO0qldazEj/jgk=
Subject key identifier:   7F:2B:12:31:FC:14:C0:1F:B1:CB:AC:06:C8:30:5D:2F:4D:C2:44:CB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0229
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/fysSMfwUwB-xy6wGyDBdL03CRMs.roa
Signing time:             Fri 31 May 2024 01:33:08 +0000
ROA not before:           Fri 31 May 2024 01:33:08 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        27.134.22.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:33:08 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=7F2B1231FC14C01FB1CBAC06C8305D2F4DC244CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:08:95:02:2b:d5:a0:29:85:22:80:4b:1c:
                    8c:98:84:e5:d8:24:4c:4c:7c:45:e9:2b:9b:cf:b6:
                    ad:06:92:8c:a7:e8:0c:67:da:79:b6:84:cc:65:9a:
                    4b:0a:af:1f:4b:6b:cf:83:06:db:15:2f:9a:5e:3a:
                    5c:64:98:b0:5f:22:6b:8c:a6:0e:de:82:0b:dd:c4:
                    b8:ce:20:00:39:91:6c:00:61:b2:57:35:20:6b:e6:
                    1d:b5:93:35:57:c7:16:70:0b:be:22:56:1d:3d:dc:
                    bf:cb:a4:36:d9:d0:6d:d4:e9:29:75:b1:1c:c9:73:
                    e9:c2:fd:95:02:ef:71:3d:59:7f:5a:d3:16:61:8b:
                    47:49:14:55:a8:3f:79:de:49:ce:ac:aa:12:39:77:
                    ae:66:1f:e9:b8:c9:e5:78:b4:0b:23:9a:55:5e:65:
                    b7:31:83:c2:5a:25:c5:46:c9:a1:50:45:8e:f8:35:
                    9e:93:a9:3d:19:56:94:4f:23:64:6d:f9:4a:fc:d2:
                    49:12:08:1e:b3:4e:49:63:77:8b:ca:98:87:03:7a:
                    b7:a2:fb:44:82:62:cf:7e:49:74:a5:7d:f0:0d:45:
                    6e:13:e0:b6:76:5d:ad:96:0e:b9:2f:72:c4:1d:4f:
                    67:bd:49:f0:58:d3:c8:1e:da:30:a8:37:69:ca:ec:
                    e2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2B:12:31:FC:14:C0:1F:B1:CB:AC:06:C8:30:5D:2F:4D:C2:44:CB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/fysSMfwUwB-xy6wGyDBdL03CRMs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:8e:01:af:35:73:11:7c:e3:63:4d:b5:5b:5b:66:69:db:
         49:d8:b1:48:a7:06:79:3a:3b:5e:a9:ac:70:01:c4:4e:95:66:
         6d:5e:d7:f5:72:04:bc:77:44:45:77:2b:d3:2e:e9:04:d7:00:
         3a:69:2e:50:52:0f:14:ce:18:06:49:92:f8:fe:e5:01:23:53:
         7d:41:4c:1b:cc:ce:08:f5:b7:80:9a:bc:02:fd:3a:67:ed:87:
         92:f0:41:31:8c:b7:f2:94:d0:17:30:94:b3:fe:05:8a:bc:12:
         18:4c:a6:3e:15:f7:37:dc:4d:7d:ce:59:25:0d:b0:b6:39:2a:
         c0:3c:19:cc:f0:93:75:7b:01:4d:61:b1:c4:0b:a8:5d:f9:b3:
         07:b0:e8:fa:a7:7c:5c:d6:3b:32:ff:ab:ea:ac:5a:35:34:f7:
         51:cd:8c:2f:77:fa:03:54:80:45:60:16:01:05:5f:38:f4:14:
         96:ff:02:d5:5c:ad:ab:63:c6:3f:57:aa:2b:5d:b7:7f:16:bd:
         31:fd:e1:72:d0:0f:00:1e:9a:7e:34:1f:5a:7f:c4:47:78:71:
         01:60:79:05:eb:e5:51:42:3b:87:30:18:bc:d6:d7:e4:df:58:
         f0:bd:52:13:3b:00:79:d4:9f:42:4f:78:bd:e3:fe:15:09:b9:
         92:e0:6e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:21 2024 by rpki-client on console-fra.rpki-client.org