Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/yf_W5KUIn_9P7luZhRX14O73-EU.roa
File:                     yf_W5KUIn_9P7luZhRX14O73-EU.roa (raw, json)
Hash identifier:          jVqyEZPbmwReqLRetcA2agi0Kw82lPaAfF0f6I8CYlY=
Subject key identifier:   C9:FF:D6:E4:A5:08:9F:FF:4F:EE:5B:99:85:15:F5:E0:EE:F7:F8:45
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0205
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yf_W5KUIn_9P7luZhRX14O73-EU.roa
Signing time:             Fri 31 May 2024 01:29:12 +0000
ROA not before:           Fri 31 May 2024 01:29:12 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        27.132.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:29:12 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=C9FFD6E4A5089FFF4FEE5B998515F5E0EEF7F845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:df:38:01:da:a8:9c:a3:d2:43:dd:f8:da:29:
                    4d:99:6e:fe:b6:a1:66:f0:12:a8:ce:6a:68:fa:df:
                    87:9a:ca:f7:78:63:2a:6e:6e:9e:15:a4:78:b6:8a:
                    ac:77:b8:df:c1:8e:4f:48:e9:a6:54:98:b3:d5:69:
                    b2:e9:f4:58:1f:5f:87:4c:ce:df:f3:4e:80:2f:39:
                    f9:39:fa:59:ae:da:fc:48:2a:e4:0c:51:0e:bf:50:
                    b2:4f:bd:d2:f9:0d:8f:89:e5:0f:8b:42:22:a8:df:
                    eb:a3:bf:13:3a:72:60:4b:d1:a8:15:dc:d9:1f:fe:
                    69:8c:94:98:39:43:66:62:cd:18:3e:65:f5:cd:03:
                    6b:18:99:c5:07:a1:48:d0:46:79:c7:f6:b5:b1:65:
                    c5:da:a0:d4:77:0e:a9:10:87:93:5d:86:3a:68:14:
                    33:6a:ae:2e:10:53:58:4b:42:c5:37:80:c1:f2:95:
                    3b:be:f1:3a:31:de:ab:28:34:9c:d7:e8:5e:82:91:
                    d9:b3:38:7a:df:c0:c4:6b:97:d3:3d:92:36:e6:a2:
                    22:99:59:46:7d:de:fc:c7:b2:3e:ff:85:79:2d:d8:
                    65:d5:41:f2:d3:65:8e:c8:da:d1:d5:fd:14:16:f4:
                    f7:14:be:28:02:9e:b4:a1:79:6d:e9:e1:f1:b0:a2:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FF:D6:E4:A5:08:9F:FF:4F:EE:5B:99:85:15:F5:E0:EE:F7:F8:45
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yf_W5KUIn_9P7luZhRX14O73-EU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:ce:3e:69:5a:30:06:6f:90:78:08:36:1f:17:e0:cd:18:09:
         ab:33:2b:9e:c7:47:c9:4b:cc:97:41:8b:fa:46:58:3d:a1:6b:
         12:b9:b8:8e:84:24:74:aa:59:d4:3c:7b:f4:28:02:ff:86:89:
         26:5c:19:2d:35:76:aa:ff:30:2e:74:7f:fa:be:59:c4:fc:e2:
         e2:fe:11:04:1d:b4:f4:ab:c8:b0:f2:aa:8e:9b:d3:bd:01:00:
         74:ca:7c:c5:12:90:1f:d2:3b:8f:dc:6d:db:cb:54:6c:e1:04:
         8b:a4:b4:73:f7:16:12:49:95:c8:0e:72:58:a0:61:a8:52:6f:
         cb:4b:2c:4e:7b:23:09:98:a4:78:96:80:1e:fd:9e:97:d5:c4:
         8f:cd:45:4a:03:05:17:3b:77:09:2c:66:b3:e6:6c:f6:90:dd:
         39:ac:b9:5e:70:f8:e7:52:a8:e8:5b:7b:8d:2e:63:36:26:4c:
         c8:28:e9:92:62:7f:b5:ea:bd:c7:54:e3:86:5f:5e:c3:8d:f9:
         eb:37:40:aa:af:8c:f5:3e:f7:8a:23:90:ec:58:ee:11:d6:6d:
         b1:83:c0:25:34:8c:7a:fc:46:21:6f:70:4e:8f:ee:7f:70:d0:
         2c:56:93:91:fb:af:16:70:db:5e:c7:cd:dc:2a:6a:56:89:af:
         6d:4e:95:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:21 2024 by rpki-client on console-fra.rpki-client.org