Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/BYSO9O89_AR9tgLqBzI7Aj5AwzM.roa
File:                     BYSO9O89_AR9tgLqBzI7Aj5AwzM.roa (raw, json)
Hash identifier:          NoEIyyL0ykj21WHNaetIi5PV+hjNHHMpqEiFDMk/p1w=
Subject key identifier:   05:84:8E:F4:EF:3D:FC:04:7D:B6:02:EA:07:32:3B:02:3E:40:C3:33
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       4A
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/BYSO9O89_AR9tgLqBzI7Aj5AwzM.roa
Signing time:             Mon 01 Jan 2024 01:30:33 +0000
ROA not before:           Mon 01 Jan 2024 01:30:33 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     10011
IP address blocks:        223.27.72.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Jan  1 01:30:33 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=05848EF4EF3DFC047DB602EA07323B023E40C333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e8:7a:4a:93:ce:ae:c0:67:b7:51:64:51:4d:
                    7d:56:9d:4a:a8:a0:3e:d1:22:5e:f5:d9:58:fe:76:
                    f0:38:a1:7d:f9:c2:72:db:20:2f:2c:86:97:0a:86:
                    0a:e6:c5:6b:d6:a3:a5:4d:fd:54:57:37:cd:36:5d:
                    92:97:71:0a:7a:ad:72:a5:c4:60:03:c6:6b:22:71:
                    47:89:c1:40:45:b1:ec:d2:2f:b3:d0:77:34:de:25:
                    7b:e9:5d:7d:10:24:2b:83:b7:d6:fb:30:b9:6b:04:
                    f8:50:ab:cc:53:3a:8a:4d:56:86:ae:cf:91:a3:dd:
                    29:77:bc:10:c7:35:de:94:ee:73:5c:3f:e3:22:24:
                    a0:51:93:42:91:15:5f:62:77:b1:e3:01:07:12:b1:
                    20:84:b9:4f:8f:77:6d:84:10:3a:38:e8:0b:9f:82:
                    aa:e3:2c:e5:5d:16:86:36:bb:41:59:dc:58:d7:82:
                    83:b5:b5:d5:43:5d:51:3f:a8:6d:71:6e:c9:16:a0:
                    2e:ab:7e:00:b4:01:e7:88:7a:5c:f6:29:8a:01:66:
                    9c:4b:1d:f7:2c:c7:27:cb:5c:32:5d:b7:25:d8:75:
                    41:e7:3d:6e:fd:33:68:9e:9a:c0:54:e6:32:05:49:
                    a1:ef:8c:26:eb:0a:78:42:76:c9:46:be:f2:55:c6:
                    92:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:84:8E:F4:EF:3D:FC:04:7D:B6:02:EA:07:32:3B:02:3E:40:C3:33
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/BYSO9O89_AR9tgLqBzI7Aj5AwzM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.27.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:df:38:33:7c:09:0a:07:5c:a0:68:4b:cd:e8:6b:d8:b9:ed:
         58:c2:9c:27:9f:7d:a6:70:4a:e3:f5:ee:11:18:c7:80:06:5c:
         b5:26:61:2a:ac:67:8b:f0:9f:76:47:22:1c:4d:1b:8a:8a:7f:
         10:37:98:15:38:8b:44:f3:8b:61:ef:0e:6a:23:6b:57:66:5d:
         8b:19:20:2f:a4:a2:91:83:48:d1:40:aa:72:d7:2e:07:51:b4:
         7e:8e:68:49:0f:cf:ec:c4:df:76:a1:4a:03:c0:f3:49:43:ba:
         0c:25:d9:26:ad:14:5e:d9:d9:7f:be:ac:8a:ac:4c:7d:de:ce:
         b0:11:e9:ea:86:5e:e8:1d:06:d1:0e:a7:2a:ab:53:95:76:df:
         73:12:96:35:90:bb:d8:7f:7b:19:d4:15:ec:c3:e7:7a:83:be:
         e6:70:8b:a3:a2:b0:4d:ed:c3:2b:6e:a3:74:db:4c:f5:90:6d:
         b0:ac:42:86:c0:a3:b2:56:28:9a:ff:4e:b8:67:15:4f:c5:da:
         76:ad:ec:b2:13:4b:3e:36:35:c4:86:36:95:ae:56:86:8b:a8:
         ce:26:b7:53:bd:94:76:c8:2e:d3:90:c5:33:9d:3f:b5:9a:28:
         88:61:f4:4e:ea:26:51:ca:5d:ae:50:2d:8d:7d:d7:1d:23:dd:
         66:17:de:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:11:50 2024 by rpki-client on console-ams.rpki-client.org