Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/v29VLQIW42HbCnMFbNECwb5aemo.roa
File:                     v29VLQIW42HbCnMFbNECwb5aemo.roa (raw, json)
Hash identifier:          qwC6EOpsgfuPr7xqvE504H6ZLP6gLQabuhy6sFmkCxA=
Subject key identifier:   BF:6F:55:2D:02:16:E3:61:DB:0A:73:05:6C:D1:02:C1:BE:5A:7A:6A
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       CE
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/v29VLQIW42HbCnMFbNECwb5aemo.roa
Signing time:             Sat 01 Jul 2023 01:28:19 +0000
ROA not before:           Sat 01 Jul 2023 01:28:19 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10021
IP address blocks:        27.110.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Jul  1 01:28:19 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=BF6F552D0216E361DB0A73056CD102C1BE5A7A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:f9:84:d6:9c:3b:84:47:80:82:66:ec:d7:
                    4c:d8:3b:61:88:91:d6:f8:e8:96:98:b1:78:90:bb:
                    a7:d4:85:5a:69:45:f4:2f:4c:bf:10:75:30:4b:fb:
                    8c:ce:fd:da:5a:83:b9:c6:21:26:be:45:37:4c:6e:
                    fb:31:00:cc:2c:6f:67:2e:32:6d:18:fe:94:90:ac:
                    df:6f:40:d4:a9:15:ed:f5:b5:95:cb:53:eb:af:6d:
                    b8:a4:6c:5a:2a:96:78:9f:7e:48:70:a2:e9:75:f0:
                    a7:20:08:04:3c:98:6e:3c:89:42:f2:a1:18:5b:39:
                    c1:85:ea:aa:40:e7:12:37:b3:f1:7c:b2:01:75:77:
                    18:06:45:7b:21:3a:c4:a1:6e:81:4b:ed:52:63:bd:
                    db:79:59:89:d0:bf:b7:8b:61:a9:7b:18:4f:f6:f5:
                    d8:c7:bb:47:67:0a:8b:b9:4b:56:41:c5:a5:51:34:
                    7c:d5:07:e7:42:ea:b8:58:fa:5c:86:89:59:bb:9b:
                    55:42:5a:47:80:41:ca:62:ea:8e:eb:09:dd:04:82:
                    3a:d8:93:ad:fb:ff:3c:b9:5f:dc:d6:7a:a7:20:c8:
                    d9:b2:0e:6b:92:a2:8b:d7:2f:04:c7:b3:62:56:85:
                    59:83:e8:d4:dd:02:c1:da:aa:37:7f:4c:61:95:17:
                    77:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6F:55:2D:02:16:E3:61:DB:0A:73:05:6C:D1:02:C1:BE:5A:7A:6A
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/v29VLQIW42HbCnMFbNECwb5aemo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:c7:05:ee:c9:a9:43:2f:e6:ce:0e:c7:34:5b:41:72:c8:f2:
         ba:8a:f5:ef:b8:6c:37:e3:3e:8d:95:12:c6:28:99:43:72:30:
         6c:84:ab:7b:46:d7:c3:65:66:34:1c:43:1a:cd:b2:66:1e:23:
         ea:68:89:20:1d:79:83:84:08:3f:13:fd:41:9c:e9:80:3f:07:
         f6:e4:c9:7e:73:c6:4e:29:a2:df:14:f2:c7:5f:6c:b9:99:5b:
         79:60:3b:32:10:81:26:76:6f:65:5f:69:ed:db:62:0d:91:fc:
         62:10:96:17:2b:7a:22:1a:b8:5f:08:c7:52:d1:34:9d:ba:c5:
         4a:a8:e7:aa:30:0e:00:73:2d:3f:ad:fd:08:4f:99:d2:ea:f5:
         41:8f:b5:55:87:40:c0:1c:b6:23:60:87:dc:0c:e0:86:03:c5:
         99:e2:54:fd:56:47:1e:91:44:00:8c:36:37:8b:07:51:55:0a:
         73:28:ba:7d:61:c7:df:e9:72:fc:f4:f1:2d:26:41:ba:84:40:
         a7:26:06:fc:43:56:a3:fc:58:6d:ff:9d:94:3f:58:cf:40:0c:
         32:6c:c2:f5:91:50:a6:6e:f8:59:fe:40:d5:ca:ca:49:27:59:
         98:13:91:54:c2:d5:5e:bb:09:7c:74:1e:fe:af:c5:f2:49:c9:
         5f:d0:7c:41
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMzA3MDEw
MTI4MTlaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEJGNkY1NTJEMDIxNkUz
NjFEQjBBNzMwNTZDRDEwMkMxQkU1QTdBNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGh/mE1pw7hEeAgmbs10zYO2GIkdb46JaYsXiQu6fUhVppRfQv
TL8QdTBL+4zO/dpag7nGISa+RTdMbvsxAMwsb2cuMm0Y/pSQrN9vQNSpFe31tZXL
U+uvbbikbFoqlniffkhwoul18KcgCAQ8mG48iULyoRhbOcGF6qpA5xI3s/F8sgF1
dxgGRXshOsShboFL7VJjvdt5WYnQv7eLYal7GE/29djHu0dnCou5S1ZBxaVRNHzV
B+dC6rhY+lyGiVm7m1VCWkeAQcpi6o7rCd0EgjrYk637/zy5X9zWeqcgyNmyDmuS
oovXLwTHs2JWhVmD6NTdAsHaqjd/TGGVF3fhAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUv29VLQIW42HbCnMFbNECwb5aemowHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDY5L3YyOVZMUUlXNDJIYkNuTUZiTkVDd2I1YWVtby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAbbj4wDQYJKoZIhvcNAQELBQADggEBAETHBe7JqUMv5s4OxzRbQXLI8rqK
9e+4bDfjPo2VEsYomUNyMGyEq3tG18NlZjQcQxrNsmYeI+poiSAdeYOECD8T/UGc
6YA/B/bkyX5zxk4pot8U8sdfbLmZW3lgOzIQgSZ2b2Vfae3bYg2R/GIQlhcreiIa
uF8Ix1LRNJ26xUqo56owDgBzLT+t/QhPmdLq9UGPtVWHQMActiNgh9wM4IYDxZni
VP1WRx6RRACMNjeLB1FVCnMoun1hx9/pcvz08S0mQbqEQKcmBvxDVqP8WG3/nZQ/
WM9ADDJswvWRUKZu+Fn+QNXKykknWZgTkVTC1V67CXx0Hv6vxfJJyV/QfEE=
-----END CERTIFICATE-----
Generated at Mon May 20 02:36:37 2024 by rpki-client on console-ams.rpki-client.org