Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/jq7_tYhX6uowZxaJ5x0l7-iAOHk.roa
File:                     jq7_tYhX6uowZxaJ5x0l7-iAOHk.roa (raw, json)
Hash identifier:          c51CHTwtoKjTJq5psK7DGasvGx4io2toRcC9ArSYXC0=
Subject key identifier:   8E:AE:FF:B5:88:57:EA:EA:30:67:16:89:E7:1D:25:EF:E8:80:38:79
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02E0
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/jq7_tYhX6uowZxaJ5x0l7-iAOHk.roa
Signing time:             Thu 10 Oct 2024 01:12:21 +0000
ROA not before:           Thu 10 Oct 2024 01:12:21 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        27.132.10.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736 (0x2e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 10 01:12:21 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=8EAEFFB58857EAEA30671689E71D25EFE8803879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:19:d8:38:bb:94:4b:3f:ac:c0:74:49:1e:a3:
                    84:c7:6f:e2:47:ff:67:52:98:b2:54:a5:15:2b:3b:
                    2f:4d:d6:4b:fe:a4:ea:d0:e6:25:a2:b2:a4:8b:0a:
                    dc:67:c1:ea:cf:1c:95:99:d9:0c:11:9a:0a:07:86:
                    05:e6:84:20:e8:48:00:da:63:0e:6d:89:27:ea:af:
                    5f:e5:30:eb:97:6d:11:36:c4:1c:3c:81:24:04:2e:
                    eb:1c:ea:63:3a:bc:df:65:05:5d:e8:05:be:b7:2e:
                    1f:68:0e:8e:e2:64:bc:aa:a4:50:64:3c:00:a1:67:
                    df:34:02:56:55:1c:45:93:09:3c:64:d3:1c:10:08:
                    a1:11:15:db:49:c1:61:a1:09:1e:e0:15:ff:6d:a1:
                    e4:d6:2b:fb:c4:17:af:e3:20:87:6c:9f:36:64:f3:
                    2b:42:26:11:92:8b:1d:4a:70:39:f5:54:88:c0:d6:
                    be:23:02:9e:0f:78:1c:3b:98:3e:5b:b7:94:21:b6:
                    99:3e:fc:97:4b:51:ed:74:85:ec:3d:ce:1f:fb:50:
                    23:8e:13:19:eb:e3:77:35:dc:72:29:ab:e7:29:93:
                    40:70:ec:ee:97:33:7e:93:a4:f5:62:ba:01:2f:ce:
                    4b:b5:3d:00:b9:44:8e:c4:3c:e3:87:ac:c1:41:a6:
                    80:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AE:FF:B5:88:57:EA:EA:30:67:16:89:E7:1D:25:EF:E8:80:38:79
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/jq7_tYhX6uowZxaJ5x0l7-iAOHk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:98:e4:67:31:ed:c8:3b:9c:31:88:dd:9a:9b:c2:96:e7:89:
         f9:9c:cb:af:9e:d3:35:66:90:4c:bb:01:22:2d:bd:f3:95:d0:
         10:3e:ea:96:ae:57:b3:9c:a9:f6:bb:63:79:56:79:72:04:b1:
         2a:63:3b:5f:8c:c7:51:64:29:bb:d8:00:cd:e9:3e:ed:b2:25:
         8b:f6:a5:d3:80:a5:43:49:0c:85:c2:f2:d4:c5:cf:10:17:cb:
         74:28:1e:04:c0:a9:0f:d2:10:af:11:d2:67:63:59:f2:20:69:
         48:89:0a:41:22:e8:e9:dc:a2:04:85:69:73:f7:7a:15:d6:6a:
         95:ce:f7:dc:ca:d0:5a:fe:1f:04:8f:31:48:fd:94:4b:c5:4b:
         08:c4:c8:74:90:d0:e9:9e:fd:a4:56:bc:26:c2:d0:49:75:53:
         42:15:ca:77:94:ba:d5:6a:0a:d3:1d:4c:94:6b:13:be:b7:76:
         1c:d8:e3:19:e7:f1:78:52:5c:e5:7c:cc:15:3e:42:2a:9b:83:
         73:47:5f:b3:d0:5d:fc:dc:1d:d8:d7:fe:55:b2:6a:9b:4b:02:
         42:bc:be:1d:1a:9f:2c:56:df:f6:17:e0:8b:c1:af:87:f8:d3:
         1f:1f:b7:41:2b:07:2e:41:0e:ae:ed:04:03:34:14:21:cd:4a:
         6c:0d:c6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:44 2024 by rpki-client on console-ams.rpki-client.org