Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/TcO0yz-_p9yBCtTLXrgDq5saCDE.roa
File:                     TcO0yz-_p9yBCtTLXrgDq5saCDE.roa (raw, json)
Hash identifier:          tIPhnHME95yTfbNXEdARgmk9Z9X8L4GMfCrnyamL4aY=
Subject key identifier:   4D:C3:B4:CB:3F:BF:A7:DC:81:0A:D4:CB:5E:B8:03:AB:9B:1A:08:31
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       0105
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/TcO0yz-_p9yBCtTLXrgDq5saCDE.roa
Signing time:             Fri 31 May 2024 01:31:39 +0000
ROA not before:           Fri 31 May 2024 01:31:39 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10021
IP address blocks:        27.110.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: May 31 01:31:39 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=4DC3B4CB3FBFA7DC810AD4CB5EB803AB9B1A0831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:e2:a6:ae:cc:49:20:78:da:e6:30:47:93:
                    19:68:37:54:a4:4f:a3:9c:5e:43:98:32:f5:fb:de:
                    84:2b:68:60:69:74:8e:4e:59:b2:7b:68:32:44:bf:
                    ea:dc:64:09:18:40:97:da:1c:5f:3c:8b:36:89:24:
                    bd:42:bb:d8:f6:77:ea:98:1e:62:21:12:98:1f:6a:
                    42:15:93:b4:62:c3:ab:52:ea:2b:8a:59:2d:a1:80:
                    09:71:31:47:52:58:f2:69:77:37:f6:3e:4d:da:6c:
                    02:4a:dd:51:73:94:83:66:a5:b7:9b:ed:a7:ef:ad:
                    d9:f8:21:5f:e0:88:00:f1:e4:13:27:81:92:b8:c7:
                    71:68:71:04:d5:5b:bc:c6:66:70:50:87:67:9b:fa:
                    d7:0a:e6:03:34:67:f5:5d:86:33:00:8c:d2:4e:14:
                    d1:34:e7:49:4a:6c:25:e5:8a:62:e4:83:81:c9:3d:
                    8f:ac:42:57:d5:09:34:23:9e:1f:34:eb:65:20:c1:
                    50:ab:c0:5d:29:00:ad:ac:3e:ce:ae:51:9a:1c:ae:
                    56:b3:cd:8e:9f:4c:93:79:85:5a:ba:9f:57:18:86:
                    8e:94:8e:2c:0b:63:37:5c:42:9f:48:58:56:ff:d7:
                    b8:c9:b9:50:15:c6:14:af:c2:cc:da:d9:d8:05:ba:
                    0f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C3:B4:CB:3F:BF:A7:DC:81:0A:D4:CB:5E:B8:03:AB:9B:1A:08:31
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/TcO0yz-_p9yBCtTLXrgDq5saCDE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:74:8e:ed:93:c7:10:08:6e:34:f9:10:6c:fa:4f:dd:96:51:
         e5:82:cf:0a:3f:19:8a:b6:36:1b:f4:f5:7e:a2:38:91:eb:af:
         89:a3:c9:41:db:fd:5d:11:25:eb:08:63:e3:68:04:31:73:0c:
         e8:df:94:7e:7c:c3:da:ba:e3:c3:1b:9c:4e:b0:8c:1d:db:56:
         a1:38:81:5f:3b:be:8c:05:5c:11:04:68:ad:9e:5b:da:01:fa:
         8b:9f:85:7e:57:23:73:10:f6:db:ed:24:a0:df:db:84:13:de:
         5d:65:b9:45:08:24:92:d0:fe:09:4f:b0:58:8b:d8:65:de:70:
         3f:13:0a:58:0b:51:90:b1:68:f6:6e:e0:d5:dd:ea:b9:7a:0e:
         06:90:7c:8d:57:09:f6:9c:25:e6:cf:59:b8:2a:02:3e:04:50:
         01:3d:b3:9c:37:63:36:bb:8f:49:60:6a:8a:59:1e:00:45:ad:
         55:c3:84:34:26:43:79:ab:dc:75:db:23:0f:f8:60:b3:b4:a6:
         32:56:27:ec:fa:a7:64:e0:08:e7:e4:68:73:d9:31:6b:9c:eb:
         a6:b5:1b:de:5a:7b:7b:e7:d1:91:7f:c6:43:a2:21:5d:5d:5c:
         a0:ca:1d:ba:08:51:56:ad:91:c1:be:ba:a1:e7:52:62:4b:8f:
         d2:89:54:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:04 2024 by rpki-client on console-fra.rpki-client.org