Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/TpzSf8QE2E304_vfi9hYT-p35sk.roa
File:                     TpzSf8QE2E304_vfi9hYT-p35sk.roa (raw, json)
Hash identifier:          ejkPRCkIZb3VKkc7TGO75tOULyIg7rRr25byP4mJ0Zc=
Subject key identifier:   4E:9C:D2:7F:C4:04:D8:4D:F4:E3:FB:DF:8B:D8:58:4F:EA:77:E6:C9
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       0111
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/TpzSf8QE2E304_vfi9hYT-p35sk.roa
Signing time:             Sat 31 Aug 2024 01:29:23 +0000
ROA not before:           Sat 31 Aug 2024 01:29:23 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     10021
IP address blocks:        27.110.63.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Aug 31 01:29:23 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=4E9CD27FC404D84DF4E3FBDF8BD8584FEA77E6C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:89:e5:d1:74:72:e7:05:4f:a3:11:9e:97:
                    92:30:8e:d4:90:a6:69:88:57:9d:d3:89:82:d1:64:
                    a1:28:54:d1:99:71:eb:14:25:d3:ba:72:9b:87:07:
                    58:24:ce:98:83:05:0f:70:df:4c:90:23:42:b3:33:
                    ea:2a:2b:49:05:5f:47:36:31:e3:a4:9c:b6:52:52:
                    fd:7b:dd:5e:6f:be:7e:bb:c6:9a:18:61:c8:97:f5:
                    ae:18:a0:c0:28:ea:9e:f7:a9:4e:d5:08:41:5e:01:
                    59:0c:c2:6a:5f:57:48:2c:a3:eb:97:c6:07:df:0a:
                    f0:32:68:68:91:c6:2e:66:85:29:1e:9b:a4:97:cb:
                    e3:db:04:27:5e:97:b9:5f:2a:86:33:c0:52:4d:73:
                    a7:7b:d2:98:6d:82:fa:9d:14:f2:25:6e:3a:3b:aa:
                    82:c3:29:e4:26:ca:c7:d5:8f:b6:d0:31:c0:f1:b2:
                    ff:8b:05:fd:6d:b6:d0:3e:0b:b1:9e:fd:f2:1d:c7:
                    9b:a8:b1:0b:91:38:83:e5:42:82:3d:8c:0a:aa:16:
                    04:6f:74:3c:67:ed:8c:76:44:38:db:cd:04:1d:89:
                    85:64:78:a6:f2:33:11:d0:30:94:2b:98:96:1c:66:
                    a4:dd:86:01:69:5f:01:e9:48:45:61:77:e5:36:12:
                    b3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9C:D2:7F:C4:04:D8:4D:F4:E3:FB:DF:8B:D8:58:4F:EA:77:E6:C9
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/TpzSf8QE2E304_vfi9hYT-p35sk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:5b:78:23:14:53:a9:c1:87:2d:d3:d4:53:44:a3:fb:b7:c5:
         17:8b:7c:a9:90:d9:92:a2:62:cc:86:72:92:3c:49:6b:e6:aa:
         d9:f9:c2:9b:04:20:f6:b5:20:c5:42:e2:13:d7:af:ba:34:a4:
         76:1c:ea:6e:03:e6:5c:21:ca:27:89:3d:c5:86:e8:02:ba:bf:
         b5:2e:5b:4e:3b:d2:1d:50:61:8e:1e:af:f3:71:59:e8:c6:64:
         2b:27:33:e9:89:c1:80:6d:c6:7d:2e:10:76:53:81:7b:58:af:
         1b:f3:44:3e:9e:0f:03:38:af:a8:2f:5b:f7:af:6d:81:14:e6:
         4d:18:a8:55:a3:11:db:42:2e:05:11:1c:7e:bd:e0:d7:b4:c5:
         cd:85:3b:45:6a:d3:b0:11:5c:5c:0b:e3:95:27:be:86:6f:04:
         41:31:37:5e:0e:d1:08:9f:0b:69:b4:2b:c5:e3:fd:5f:81:a7:
         76:df:c4:38:7d:d9:7f:f2:23:d0:90:3b:f1:32:8a:2b:a7:fd:
         b6:52:11:8d:6e:cf:fa:61:d4:d1:e2:18:62:8c:9b:e8:28:1e:
         4a:32:65:ba:c3:85:ff:bc:a0:76:f9:2d:95:2d:ec:0c:eb:16:
         51:13:b7:62:f4:b5:19:07:1e:cf:fe:c6:3f:f4:0d:c7:38:24:
         ae:61:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:15 2024 by rpki-client on console-fra.rpki-client.org