Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/7zFBWBC8AcePKbbQlp6rWnaQjGI.roa
File:                     7zFBWBC8AcePKbbQlp6rWnaQjGI.roa (raw, json)
Hash identifier:          Uru7VNiUPzXZKb/LYmsCoXv4GjlkTEruttEBSPfVNQI=
Subject key identifier:   EF:31:41:58:10:BC:01:C7:8F:29:B6:D0:96:9E:AB:5A:76:90:8C:62
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       D8
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/7zFBWBC8AcePKbbQlp6rWnaQjGI.roa
Signing time:             Sun 01 Oct 2023 01:28:50 +0000
ROA not before:           Sun 01 Oct 2023 01:28:50 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     10021
IP address blocks:        27.110.56.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Oct  1 01:28:50 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=EF31415810BC01C78F29B6D0969EAB5A76908C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:f2:30:3f:3b:27:3f:04:51:f5:4f:45:f8:
                    e4:e5:6a:eb:ae:37:7a:56:b4:94:7e:20:b4:1a:f7:
                    12:8f:60:93:54:96:6f:b6:5c:3a:c3:58:db:20:37:
                    c3:96:7b:01:7c:1c:65:7c:61:4e:63:8f:0f:87:87:
                    dd:42:e5:75:f0:c8:d5:43:1e:88:ad:fa:c8:b7:29:
                    fa:68:e4:05:a5:8f:e7:b8:87:67:92:b9:22:93:f3:
                    70:f0:27:6f:67:25:d1:6e:72:0f:b5:df:26:a2:4d:
                    c9:64:c0:83:8e:14:5c:b6:d5:86:02:ea:c0:06:97:
                    53:67:0b:d6:2c:93:bb:31:3e:1b:8d:2f:33:4c:2b:
                    83:a1:ef:22:b8:90:15:8e:96:92:18:cf:ca:a4:60:
                    02:4e:85:a8:a9:a9:c3:33:b3:46:1e:89:02:e1:38:
                    1d:4d:9c:24:ef:ed:a0:5b:ba:48:1f:13:46:b2:ea:
                    62:f6:69:9a:ba:c9:7a:63:38:29:4f:bf:61:8b:d7:
                    aa:f7:93:5b:f9:d9:57:eb:0f:69:48:bd:84:9b:87:
                    45:24:70:22:4a:e4:f2:a4:e6:db:b4:d8:68:ce:db:
                    c0:b8:59:5a:6a:a1:b2:2a:c6:b1:3d:35:2d:d8:81:
                    91:8a:0f:b1:1c:f4:25:18:a6:11:06:a8:d4:15:9b:
                    a3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:31:41:58:10:BC:01:C7:8F:29:B6:D0:96:9E:AB:5A:76:90:8C:62
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/7zFBWBC8AcePKbbQlp6rWnaQjGI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:87:d2:3d:c5:c4:5d:c5:89:c1:40:5f:93:84:5c:15:e5:ab:
         aa:fd:cc:4b:05:de:66:53:4b:64:74:71:35:f0:7b:92:23:07:
         16:29:27:78:8d:ac:3f:79:ef:3f:e3:6e:e8:40:cc:2b:9f:93:
         37:fb:c8:74:ce:fc:6f:a7:87:88:b5:03:2b:20:4c:1d:aa:37:
         16:44:dc:7e:8e:3f:5b:65:68:99:cf:5b:63:eb:8e:8b:6f:49:
         f6:71:7c:63:bc:62:53:1a:37:3e:cd:db:34:bb:97:60:8a:86:
         07:2c:b8:25:a4:59:38:76:19:71:35:4b:c6:b3:37:90:fd:fc:
         0a:6f:ea:2b:44:be:75:26:f7:19:b8:00:13:ba:7f:9b:4d:ea:
         56:c5:c9:2f:df:81:1b:d8:74:bd:71:33:28:11:87:d6:7e:26:
         7e:42:e4:57:c2:82:11:9b:ed:1c:bb:52:52:7e:c6:2f:26:b0:
         be:b4:3a:98:bf:15:51:c1:c8:92:8f:4a:e3:df:c7:21:69:56:
         77:97:b7:ac:9b:8e:0e:ff:1b:4a:44:a6:e1:43:0f:d0:07:3e:
         87:47:99:1a:7c:bf:9c:7b:bf:dd:b1:06:15:17:87:b5:42:bf:
         fe:5c:8e:4b:a1:24:20:2d:a9:ea:72:3f:ac:d3:c0:c8:87:2e:
         04:bd:f9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 02:50:30 2024 by rpki-client on console-fra.rpki-client.org