Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/rv-brpSBtsLIqk7QEB0kMETJCfg.roa
File:                     rv-brpSBtsLIqk7QEB0kMETJCfg.roa (raw, json)
Hash identifier:          73vQdczjYGaWf3zGBaHN3MY/DETDGAfKvB6fLpHIGwQ=
Subject key identifier:   AE:FF:9B:AE:94:81:B6:C2:C8:AA:4E:D0:10:1D:24:30:44:C9:09:F8
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0202
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/rv-brpSBtsLIqk7QEB0kMETJCfg.roa
Signing time:             Fri 31 May 2024 01:29:10 +0000
ROA not before:           Fri 31 May 2024 01:29:10 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        27.132.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:29:10 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=AEFF9BAE9481B6C2C8AA4ED0101D243044C909F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:e3:db:2e:10:30:fa:1a:69:02:4d:24:cc:
                    12:ad:fd:84:87:b9:97:25:49:42:5e:5b:26:08:05:
                    08:b3:19:79:ea:28:a8:9e:9d:5d:2c:a0:e5:9b:f4:
                    ef:04:76:84:ce:ab:8e:a6:c3:f5:5b:b2:f9:6c:a8:
                    bb:a7:ed:63:89:b9:24:5a:f3:01:c8:7a:3f:ab:7d:
                    42:8b:78:c9:2f:b0:8f:4e:fc:78:bc:05:c1:d0:24:
                    d1:da:15:e8:72:99:ed:20:a0:a9:e4:51:90:90:60:
                    20:2d:32:4a:3a:77:ac:f1:2e:31:23:f5:88:8d:10:
                    e2:f2:69:16:8e:a4:c0:64:27:bc:40:fc:9c:b9:03:
                    18:d8:95:74:b8:e0:94:97:84:87:e0:75:57:16:25:
                    bc:3a:6f:2e:41:f2:ce:87:fb:7a:5c:d7:f3:87:d3:
                    48:3c:05:03:e4:c5:00:e3:4e:bb:fe:c7:d7:72:26:
                    83:27:b4:64:4f:9a:2b:6d:af:59:3b:9c:5c:81:82:
                    2b:8c:a3:af:ad:a2:fd:8e:c2:f0:12:6c:03:c9:6f:
                    dc:cf:5c:d3:c0:e5:c6:04:d4:00:fd:7b:1c:51:1f:
                    81:0f:d7:5a:c7:14:a4:7e:ce:9d:11:2f:f0:45:fd:
                    a7:c7:3b:42:28:57:3e:0d:83:da:68:92:fd:9d:60:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FF:9B:AE:94:81:B6:C2:C8:AA:4E:D0:10:1D:24:30:44:C9:09:F8
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/rv-brpSBtsLIqk7QEB0kMETJCfg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         13:59:27:ee:39:7e:ca:43:9a:6a:cf:c4:f0:25:aa:40:be:27:
         a5:cf:58:68:91:df:98:34:3f:93:b6:b4:79:a2:54:00:bc:9e:
         e4:b1:e4:cc:84:67:b1:8e:0a:93:b3:16:86:14:98:fd:72:39:
         6e:e5:6d:54:b7:ae:3d:6c:16:24:0f:28:59:13:ea:2e:0c:51:
         9c:17:02:90:57:7c:e5:2b:a8:ef:15:53:a5:25:91:c3:5e:62:
         d3:02:f6:25:78:0b:94:70:ae:e9:23:c9:20:c3:ff:78:e4:2b:
         6a:f7:24:be:3c:8a:5f:e8:dc:71:b9:5a:61:ac:0a:24:ab:11:
         de:f4:11:95:16:5f:2c:e2:4c:6e:11:ad:b3:45:4e:0c:33:12:
         c7:3b:28:49:68:ef:cf:a6:0a:f0:ea:f2:05:19:6e:2a:4c:7b:
         8e:e0:09:9a:8e:98:dc:99:e3:64:01:02:24:2e:cd:2c:4b:22:
         50:f4:4a:0b:2c:60:31:26:8a:37:a7:14:ec:a3:f3:f6:7f:ee:
         df:2f:e8:d5:8f:de:2d:22:fd:63:15:8e:09:04:ac:ec:c9:2d:
         7c:2f:80:86:5f:91:81:0e:18:c5:45:d9:12:62:16:c1:0a:f6:
         40:66:02:40:8b:7e:65:cd:c0:90:db:d6:b5:08:e7:72:2d:4e:
         a4:38:a7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:44 2024 by rpki-client on console-ams.rpki-client.org