Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/UXiXPMQgzr8AG7GJQr4_RvWAcFs.roa
File:                     UXiXPMQgzr8AG7GJQr4_RvWAcFs.roa (raw, json)
Hash identifier:          ugNQI5RfXOfrBJVmrcc7j35LaJrtzgkJrTWjXEhAsdI=
Subject key identifier:   51:78:97:3C:C4:20:CE:BF:00:1B:B1:89:42:BE:3F:46:F5:80:70:5B
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       010F
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/UXiXPMQgzr8AG7GJQr4_RvWAcFs.roa
Signing time:             Sat 31 Aug 2024 01:29:23 +0000
ROA not before:           Sat 31 Aug 2024 01:29:23 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     10021
IP address blocks:        27.110.48.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Aug 31 01:29:23 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=5178973CC420CEBF001BB18942BE3F46F580705B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:68:f3:71:33:52:6c:52:ba:ec:3c:41:f4:
                    23:fa:31:eb:54:8d:ea:2d:3e:17:44:8a:90:48:cd:
                    ad:2b:ed:a4:d7:d7:18:c2:24:b0:4b:3d:63:a9:bd:
                    f7:5f:b1:8d:83:2d:af:1f:86:0c:eb:1c:f9:74:7c:
                    ca:ca:70:f6:24:0f:1b:aa:59:ff:70:58:d0:21:13:
                    02:0b:b5:5e:72:a9:26:23:b4:2c:f6:94:5b:ad:5c:
                    c1:95:e1:64:c9:b8:41:9c:a5:a6:9e:2c:a9:85:af:
                    94:51:04:f5:aa:57:10:f8:62:d7:68:40:64:59:48:
                    55:5b:b0:cf:e1:51:9d:36:18:3a:89:f4:48:f1:76:
                    fe:c8:47:52:01:d4:95:0f:c2:33:37:82:b1:94:4b:
                    87:4b:50:c7:a5:ce:b9:f0:55:77:05:56:1d:7f:16:
                    a0:5f:90:d3:50:aa:31:9b:f6:9c:52:a9:c8:af:07:
                    6c:be:34:5c:7a:5a:79:4c:f4:37:3f:9b:d4:56:36:
                    46:e1:9e:a9:6e:2d:37:df:ae:eb:a8:08:48:22:99:
                    72:ee:63:4d:e8:fa:ac:60:e8:a8:d7:56:85:ca:c2:
                    f2:29:67:c2:fb:86:01:ff:f0:c9:33:e1:f9:a7:3e:
                    06:a7:70:c4:45:84:8d:91:64:76:c7:87:31:e2:52:
                    bc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:78:97:3C:C4:20:CE:BF:00:1B:B1:89:42:BE:3F:46:F5:80:70:5B
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/UXiXPMQgzr8AG7GJQr4_RvWAcFs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:fd:a7:c6:e4:f5:17:ac:d2:39:79:87:91:e9:a5:4c:68:f5:
         3c:36:bb:7d:6f:8b:85:0e:e3:33:d2:0e:d0:c2:d6:f3:da:fa:
         3a:24:ef:e2:e8:0e:34:42:b9:44:6e:15:bb:cc:8d:e4:6b:02:
         bd:ed:2b:ea:69:51:20:60:3c:7c:d3:15:e7:ac:e9:ad:b0:9f:
         4d:9d:7c:f5:d8:f1:98:6d:30:d9:3f:b0:c1:95:4c:f1:9d:b6:
         90:6e:d0:0e:a0:3b:fa:22:0f:6b:27:30:53:82:df:a4:16:09:
         e9:5f:b7:75:38:76:c2:2e:84:ee:b7:da:45:00:71:38:83:cd:
         e0:21:39:99:1f:a7:1d:cd:e4:03:5d:2e:f7:8d:52:ac:a8:25:
         a4:b8:3a:f4:4d:72:04:8d:66:2b:87:31:f1:54:84:6f:3b:1c:
         35:9c:8f:36:10:a0:38:63:87:28:43:6a:f0:70:30:a8:43:51:
         71:01:79:4c:dd:87:d8:22:a4:f1:a6:a9:4a:56:eb:7c:f0:c2:
         69:a0:a1:03:84:9d:7a:d8:6f:e8:a7:6d:84:98:25:09:f7:28:
         b0:ef:0f:f4:fd:2d:28:89:d1:26:27:b4:54:3f:82:23:87:2d:
         da:da:47:3b:7f:94:17:e0:9f:1a:7f:7b:71:75:c3:e2:92:32:
         a6:50:77:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:46 2024 by rpki-client on console-ams.rpki-client.org