Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/27G3m8UUpMqvj2ZNRA57102B1CU.roa
File:                     27G3m8UUpMqvj2ZNRA57102B1CU.roa (raw, json)
Hash identifier:          R+RZQxf6F7EcQ/oVLjAQiWKgRJq7QzQ482rDl56qC3c=
Subject key identifier:   DB:B1:B7:9B:C5:14:A4:CA:AF:8F:66:4D:44:0E:7B:D7:4D:81:D4:25
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       30
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/27G3m8UUpMqvj2ZNRA57102B1CU.roa
Signing time:             Thu 05 Oct 2023 03:26:09 +0000
ROA not before:           Thu 05 Oct 2023 03:26:09 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        183.76.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Oct  5 03:26:09 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=DBB1B79BC514A4CAAF8F664D440E7BD74D81D425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:cc:65:c5:14:8b:33:fb:88:b0:61:1c:f4:
                    f5:e6:32:66:87:bf:73:67:63:a9:fc:4b:af:84:56:
                    68:36:7e:28:54:6a:aa:65:de:1f:7f:da:87:6e:0c:
                    f7:2e:4c:b9:66:9e:53:61:90:11:46:0c:5a:65:6b:
                    9c:b1:86:62:41:ea:e8:73:fd:91:d3:56:66:61:8f:
                    eb:4f:eb:d9:a5:1f:fb:68:66:e9:de:c1:f5:79:98:
                    20:86:83:e4:4e:56:7d:c8:b3:43:8f:b3:f8:31:21:
                    e0:14:48:ef:a0:07:8b:24:25:71:5e:de:8d:db:6c:
                    3a:af:41:d3:b3:cc:58:82:02:8c:1f:43:6d:42:6a:
                    39:d4:21:bb:fc:99:58:d6:08:35:bb:f3:48:9b:65:
                    00:5c:e8:3e:ad:37:85:dd:c1:99:9b:32:9f:ee:72:
                    b0:1d:c7:60:f9:f5:d9:8a:ec:5a:41:49:91:e7:9f:
                    0a:35:5c:f8:ac:13:91:89:43:46:3d:4f:b9:3c:30:
                    66:f1:e9:17:6c:27:fe:7a:43:4f:11:b0:ed:05:48:
                    72:58:a5:6e:e3:c7:a5:6f:b6:29:eb:fa:db:b4:3b:
                    29:ae:c5:9e:d6:02:65:a5:17:c9:1e:3b:1a:4c:dd:
                    9c:d3:8d:b3:b6:25:52:a5:e6:a3:78:65:8d:ef:a8:
                    f4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B1:B7:9B:C5:14:A4:CA:AF:8F:66:4D:44:0E:7B:D7:4D:81:D4:25
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/27G3m8UUpMqvj2ZNRA57102B1CU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.76.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         3e:21:6a:40:97:49:a1:68:03:59:62:b3:f3:22:61:96:72:ee:
         3b:fb:5f:3c:dc:d4:82:ea:39:1b:d6:df:9a:83:2a:88:7e:1a:
         04:8a:60:63:17:77:d0:56:d8:c9:6a:3a:b3:63:26:69:cb:b0:
         f3:2a:87:4c:1c:8b:e4:9f:2b:29:ca:78:03:8c:24:52:0c:93:
         71:6e:a8:66:3a:1f:03:3c:82:d7:72:43:f0:dc:32:6f:63:be:
         6d:e2:fd:94:b9:f7:db:38:9b:26:fa:31:1a:81:10:be:e3:69:
         cb:24:0a:85:16:66:46:63:78:03:68:b2:c1:2d:cf:20:6c:dc:
         1f:bb:de:85:c4:62:b9:3c:dd:e8:c0:73:bc:4e:54:8a:15:d6:
         0f:d8:a9:23:4b:b4:b5:37:41:5d:e0:ae:f9:32:45:e9:b2:75:
         ce:6d:0b:d4:af:df:30:72:b9:90:86:78:cf:47:f4:bf:a9:0b:
         58:b9:04:19:11:3b:8a:41:ac:7f:6a:aa:bb:23:ca:b4:e9:2b:
         a4:73:59:33:ff:f4:5b:78:57:f0:68:c6:e3:12:7e:82:d4:41:
         a0:9e:69:b7:1e:77:b2:f9:6a:18:11:35:d9:b9:d7:d2:66:7f:
         56:38:dc:20:b0:89:c3:1f:fd:41:95:0f:8b:13:30:8f:5d:58:
         66:44:19:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:47 2024 by rpki-client on console-ams.rpki-client.org