Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/D3KXkypou2j_PF7PxZEUi2-kvJQ.roa
File:                     D3KXkypou2j_PF7PxZEUi2-kvJQ.roa (raw, json)
Hash identifier:          2CBaz5+2+HtYoKqswkMG5YMCQgwdnuJyVXqmMk3W4ag=
Subject key identifier:   0F:72:97:93:2A:68:BB:68:FF:3C:5E:CF:C5:91:14:8B:6F:A4:BC:94
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       F1
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/D3KXkypou2j_PF7PxZEUi2-kvJQ.roa
Signing time:             Fri 01 Dec 2023 01:29:44 +0000
ROA not before:           Fri 01 Dec 2023 01:29:44 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     10021
IP address blocks:        27.110.28.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Dec  1 01:29:44 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=0F7297932A68BB68FF3C5ECFC591148B6FA4BC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:d7:07:cd:0e:08:6a:09:c6:59:a1:18:17:
                    76:07:05:f6:64:ec:be:0f:6b:1b:ee:07:c9:87:b2:
                    0c:8e:7f:cc:98:66:0b:74:05:b4:d6:c1:37:92:a8:
                    56:ef:d9:e1:27:a7:33:50:52:d0:cc:89:07:a9:5e:
                    7e:f5:08:4a:a4:d2:68:b5:20:45:89:39:99:f9:74:
                    a2:e1:f4:29:47:8a:5c:4b:e4:a7:ad:89:0d:33:ce:
                    78:fd:3e:bd:20:3a:0a:4f:ed:d9:b4:df:58:00:45:
                    a6:30:af:e0:d8:6c:e1:1f:f1:86:2e:98:6d:4a:89:
                    ae:e5:35:6e:ca:14:a7:e9:0c:4e:ef:6c:2a:9d:59:
                    eb:89:df:95:63:4c:0d:fb:31:b5:dc:07:2e:e2:4f:
                    10:8b:56:91:96:ff:c2:a4:c6:bf:01:9e:13:a4:25:
                    fd:8b:82:00:f8:81:8e:d5:1e:b3:2b:04:7c:b0:b9:
                    c2:02:b0:0c:81:dc:a4:fd:bd:c9:d4:d5:89:d8:07:
                    41:59:22:bc:66:51:f4:1e:fd:8b:30:15:b0:f3:8e:
                    94:c4:d1:13:1f:1d:2a:38:9c:f9:85:bf:8e:e2:b3:
                    f1:a6:36:3e:e5:0e:ee:b1:18:1f:6d:0a:1c:39:bc:
                    41:62:6c:20:f0:e6:e2:d1:5e:4d:1f:6d:fb:bf:59:
                    38:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:72:97:93:2A:68:BB:68:FF:3C:5E:CF:C5:91:14:8B:6F:A4:BC:94
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/D3KXkypou2j_PF7PxZEUi2-kvJQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:11:6a:ca:d1:2f:0f:61:37:04:58:32:22:d2:55:28:06:82:
         35:46:d5:40:ea:d1:98:c8:92:bd:43:d5:73:6f:40:ac:5b:ac:
         67:64:cd:2c:90:45:50:ac:24:98:19:31:e5:3e:ea:cb:ea:b5:
         a5:b9:65:37:aa:b7:4b:5c:18:37:b9:86:a1:f8:1c:f5:06:88:
         e2:ce:66:0d:f2:9d:11:0b:d4:b2:a4:90:eb:77:b1:66:3f:86:
         c1:e9:3d:07:64:19:da:30:77:54:18:dc:cb:c3:85:84:c5:41:
         9a:33:7d:4f:36:97:93:69:d4:45:46:c9:69:b9:ac:cc:4d:fd:
         a1:6c:cb:77:65:59:ab:4a:55:e2:f2:97:8e:42:1c:09:54:6f:
         e4:88:86:40:6f:5f:67:d1:b3:d2:b1:74:0d:c2:82:ce:e2:30:
         e5:5d:1b:c4:27:c1:9a:ae:fb:8b:f7:03:be:40:84:b5:ff:b3:
         e6:9a:af:1b:2b:89:66:81:3b:c4:7e:2f:fb:2d:ab:11:81:f7:
         82:64:a9:8c:03:b2:b2:83:41:06:31:24:d6:9e:d0:37:e3:73:
         12:e4:85:23:68:83:6f:5a:16:a7:47:8e:2c:fe:f7:68:73:b8:
         84:cc:38:e1:83:21:57:a3:b6:31:03:67:5a:0b:db:13:88:03:
         da:1b:88:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 03:14:27 2024 by rpki-client on console-ams.rpki-client.org