Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/savXOduRiExkO2JcHj7juiKiKQU.roa
File:                     savXOduRiExkO2JcHj7juiKiKQU.roa (raw, json)
Hash identifier:          vS7KqNOJBw9t1ynf4Oy7vu1Ay5cGgsSU+erIj891D2E=
Subject key identifier:   B1:AB:D7:39:DB:91:88:4C:64:3B:62:5C:1E:3E:E3:BA:22:A2:29:05
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       F2
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/savXOduRiExkO2JcHj7juiKiKQU.roa
Signing time:             Fri 01 Dec 2023 01:29:44 +0000
ROA not before:           Fri 01 Dec 2023 01:29:44 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     10021
IP address blocks:        27.110.32.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Dec  1 01:29:44 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=B1ABD739DB91884C643B625C1E3EE3BA22A22905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:06:c0:4a:46:da:23:45:a2:84:89:bd:93:
                    30:42:93:9d:34:ce:1e:27:18:d4:f7:74:b8:17:11:
                    be:a3:b9:6c:f3:97:40:c0:3a:8a:32:b2:02:3e:88:
                    42:3a:a3:5f:09:2e:b1:87:0b:0e:e5:d2:d2:34:66:
                    e3:c2:06:b6:22:66:5f:ae:59:c4:86:d6:7c:81:7d:
                    9e:95:b4:8d:4a:8d:21:8b:bc:80:44:89:d8:ef:13:
                    9b:81:f8:66:11:c9:10:bb:68:42:e1:3a:20:9d:e6:
                    98:56:f5:e0:94:48:88:92:50:bc:f8:07:b8:6f:9b:
                    09:79:ce:06:0c:d0:cf:53:bb:96:a4:10:eb:fb:41:
                    ce:4a:16:0b:c2:33:01:29:fb:8e:a1:3d:be:58:05:
                    cf:6a:17:9d:aa:41:ee:25:ba:ce:2b:40:93:07:a3:
                    2d:29:2c:62:a8:e4:79:c7:63:69:18:a7:f6:13:f5:
                    e4:6a:7d:b1:99:57:17:35:02:2b:f6:ab:2c:59:01:
                    5d:99:88:c8:b3:73:de:46:eb:02:33:c8:2a:5f:f9:
                    93:df:04:9f:79:b7:88:db:4f:73:e8:6d:b3:75:0a:
                    ed:db:3b:30:5d:e7:d1:63:fd:5c:80:cb:ac:a0:be:
                    92:35:b7:9a:f7:d8:a9:e1:2b:a3:de:9d:d6:54:14:
                    a7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AB:D7:39:DB:91:88:4C:64:3B:62:5C:1E:3E:E3:BA:22:A2:29:05
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/savXOduRiExkO2JcHj7juiKiKQU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:56:87:1f:d3:d4:8e:26:dc:55:f2:39:23:20:c8:c8:51:ed:
         de:20:0a:14:1a:1f:3d:33:43:9f:12:96:bf:fb:bc:00:72:f7:
         39:4f:11:c1:36:f6:94:4f:c5:86:c1:fc:08:c5:0d:f6:de:9b:
         79:68:09:31:d9:e9:29:4d:f8:0c:e4:c0:1a:42:6a:79:06:a4:
         ae:3c:42:1a:3a:e7:f5:a4:39:d8:4d:b9:65:f8:e0:2e:e0:b4:
         4c:bb:5f:ec:31:2b:e2:76:5c:6c:86:f3:10:e9:5d:7a:2f:d9:
         ec:52:8b:55:6d:19:d3:95:f8:7f:3a:52:43:2e:05:14:bc:a2:
         f8:fd:27:55:f6:70:e6:ca:ef:9d:9c:d6:2e:5f:4d:9d:3b:eb:
         58:8b:1c:a8:61:99:12:c8:94:e3:80:ae:ac:10:e5:b3:54:e1:
         9e:fa:d0:00:57:aa:3f:73:81:36:51:d6:6a:37:24:7d:a0:57:
         66:f4:11:ca:cf:b6:7a:fb:31:7f:18:f6:3c:e8:47:8a:57:17:
         a4:ee:c6:37:53:88:ff:59:60:f9:69:8e:73:10:21:a3:47:b5:
         68:81:95:1e:23:15:cc:23:f0:38:04:f1:d3:99:29:66:d6:69:
         c3:ab:36:ee:94:eb:7e:e5:61:e7:ce:82:51:55:32:68:1a:94:
         61:13:c7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 03:14:27 2024 by rpki-client on console-ams.rpki-client.org