Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/zqRXBkVuCZxBIQRftEPkQitS9HQ.roa
File:                     zqRXBkVuCZxBIQRftEPkQitS9HQ.roa (raw, json)
Hash identifier:          1vTf78R7XjUPuIa6o4HtCQ+53mJla6RIKWTSFPR6bw8=
Subject key identifier:   CE:A4:57:06:45:6E:09:9C:41:21:04:5F:B4:43:E4:42:2B:52:F4:74
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       DB
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/zqRXBkVuCZxBIQRftEPkQitS9HQ.roa
Signing time:             Sun 01 Oct 2023 01:28:51 +0000
ROA not before:           Sun 01 Oct 2023 01:28:51 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     10021
IP address blocks:        27.110.63.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Oct  1 01:28:51 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=CEA45706456E099C4121045FB443E4422B52F474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:33:f3:fa:b1:95:7e:09:57:4b:64:92:b4:0b:
                    3c:21:ef:c5:53:28:c9:0f:1f:e7:1f:96:d0:46:09:
                    32:90:26:7b:08:a0:d0:f9:5c:f2:4c:2a:0d:1e:16:
                    2c:f9:b9:7a:5a:ea:e3:ce:43:5d:77:24:81:c1:03:
                    f8:82:73:7a:d4:3c:b2:0e:a9:51:90:fa:a8:68:b4:
                    b0:8f:fe:b4:b2:0d:5f:e5:bd:51:99:33:6a:fd:28:
                    ad:71:dd:aa:c4:8f:20:fb:e1:88:8b:4d:b0:f5:12:
                    5b:a0:07:d3:e7:ec:a3:d2:04:ca:46:58:57:5f:7e:
                    da:8e:f7:cf:28:2a:3b:b1:e7:2e:e2:3d:f0:1d:de:
                    a3:97:fb:a2:8b:f9:80:5e:62:3f:14:06:c8:53:68:
                    1b:c2:77:5d:f3:dd:97:91:a4:5b:cd:a1:7f:bd:c6:
                    2b:48:ce:f1:94:11:63:5f:ed:af:8d:c3:bf:a4:b0:
                    6e:17:eb:ed:9f:c9:95:f2:6e:18:8e:f8:13:ca:45:
                    dd:fe:fd:70:74:7f:f2:0c:77:33:ae:d3:f5:af:b5:
                    04:8e:4a:18:15:10:5c:2f:0f:d8:73:9c:0c:98:a5:
                    9b:69:1a:73:70:ae:3a:6d:0b:4d:8b:ad:02:21:32:
                    b8:c1:d7:af:9b:75:bc:c0:c0:ca:a5:be:4b:15:0d:
                    f3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A4:57:06:45:6E:09:9C:41:21:04:5F:B4:43:E4:42:2B:52:F4:74
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/zqRXBkVuCZxBIQRftEPkQitS9HQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:a5:0d:63:44:88:75:55:59:f0:d8:4e:59:05:d2:ac:b5:a6:
         9f:df:63:36:1e:11:c7:27:6f:b2:85:bb:82:a2:12:45:64:ae:
         54:36:d5:bf:da:7d:94:79:ce:08:12:4f:4b:8f:bb:f5:ea:dc:
         0f:6f:04:47:6b:62:5b:72:9d:68:28:99:43:ac:6c:bb:95:58:
         a2:24:5c:0e:d5:c7:01:a6:48:92:f4:61:aa:26:bb:c2:d3:47:
         8d:90:39:34:02:81:35:33:a4:87:3e:a3:2d:68:de:02:3f:fc:
         9a:bc:e6:ae:18:0f:c3:3e:81:2d:94:74:b5:e8:b5:96:2a:b8:
         7a:fd:36:10:bb:b7:f3:88:da:8f:2f:95:a8:38:ef:31:8a:68:
         fa:8c:3d:ac:84:f4:3e:d6:57:a3:82:4a:f3:72:a4:ad:df:dd:
         15:4d:b4:d4:5f:2d:29:70:86:73:0f:45:64:6d:29:62:bc:ac:
         98:1d:c0:ef:cb:04:d1:1b:a9:52:5d:5c:99:b7:03:c1:9d:21:
         e5:0b:c1:c3:c3:93:f2:5d:01:1b:67:fe:1e:83:6a:20:19:5f:
         99:46:a4:6e:c8:fb:b8:e3:0d:21:ac:aa:99:a1:0b:6e:cc:b3:
         bc:3b:7a:c8:43:30:7e:2c:17:ec:5e:ce:1c:15:cf:72:8d:ba:
         ee:73:a9:6e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICANswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMzEwMDEw
MTI4NTFaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKENFQTQ1NzA2NDU2RTA5
OUM0MTIxMDQ1RkI0NDNFNDQyMkI1MkY0NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSM/P6sZV+CVdLZJK0Czwh78VTKMkPH+cfltBGCTKQJnsIoND5
XPJMKg0eFiz5uXpa6uPOQ113JIHBA/iCc3rUPLIOqVGQ+qhotLCP/rSyDV/lvVGZ
M2r9KK1x3arEjyD74YiLTbD1ElugB9Pn7KPSBMpGWFdfftqO988oKjux5y7iPfAd
3qOX+6KL+YBeYj8UBshTaBvCd13z3ZeRpFvNoX+9xitIzvGUEWNf7a+Nw7+ksG4X
6+2fyZXybhiO+BPKRd3+/XB0f/IMdzOu0/WvtQSOShgVEFwvD9hznAyYpZtpGnNw
rjptC02LrQIhMrjB16+bdbzAwMqlvksVDfMjAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUzqRXBkVuCZxBIQRftEPkQitS9HQwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDY5L3pxUlhCa1Z1Q1p4QklRUmZ0RVBrUWl0UzlIUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAbbj8wDQYJKoZIhvcNAQELBQADggEBAGelDWNEiHVVWfDYTlkF0qy1pp/f
YzYeEccnb7KFu4KiEkVkrlQ21b/afZR5zggST0uPu/Xq3A9vBEdrYltynWgomUOs
bLuVWKIkXA7VxwGmSJL0Yaomu8LTR42QOTQCgTUzpIc+oy1o3gI//Jq85q4YD8M+
gS2UdLXotZYquHr9NhC7t/OI2o8vlag47zGKaPqMPayE9D7WV6OCSvNypK3f3RVN
tNRfLSlwhnMPRWRtKWK8rJgdwO/LBNEbqVJdXJm3A8GdIeULwcPDk/JdARtn/h6D
aiAZX5lGpG7I+7jjDSGsqpmhC27Ms7w7eshDMH4sF+xezhwVz3KNuu5zqW4=
-----END CERTIFICATE-----
Generated at Fri May 31 02:50:30 2024 by rpki-client on console-fra.rpki-client.org