Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/Kd9axvlj54v0EewCXg6azAmrxTM.roa
File:                     Kd9axvlj54v0EewCXg6azAmrxTM.roa (raw, json)
Hash identifier:          oK4ulbl4vEw56ye9FM9GqdkNZO+7SO68pamI/F7sYmc=
Subject key identifier:   29:DF:5A:C6:F9:63:E7:8B:F4:11:EC:02:5E:0E:9A:CC:09:AB:C5:33
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       38
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/Kd9axvlj54v0EewCXg6azAmrxTM.roa
Signing time:             Wed 12 Jun 2024 06:07:05 +0000
ROA not before:           Wed 12 Jun 2024 06:07:05 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     14618
IP address blocks:        27.131.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Jun 12 06:07:05 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=29DF5AC6F963E78BF411EC025E0E9ACC09ABC533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:16:94:6f:4a:3e:ec:69:99:90:f2:a5:33:c3:
                    42:00:a2:b2:bf:57:91:fd:bf:3d:f5:f1:bf:56:7c:
                    9f:be:ab:a9:10:30:a4:de:51:0c:21:72:f2:b1:49:
                    fd:68:ba:ca:6f:34:ce:f5:00:25:5c:30:69:85:25:
                    38:37:de:9d:84:95:c0:ba:cf:5e:64:96:92:c8:ce:
                    2a:31:77:e4:e0:07:42:8b:63:58:ca:c5:6d:b4:8a:
                    cb:15:fa:3a:27:0e:70:d6:8d:cd:3e:30:41:04:04:
                    8a:f0:dd:3d:d2:1a:23:17:5e:60:7e:d5:9f:32:35:
                    b7:de:79:5e:ee:27:4a:2f:8f:ef:ab:8e:f7:05:94:
                    c8:d3:94:85:ac:80:fa:90:48:49:ed:eb:36:6b:cd:
                    ce:4f:a0:4f:e0:fe:68:d7:22:bb:32:41:fb:11:b1:
                    31:57:bf:86:84:10:1e:43:ca:19:1f:f1:8a:b4:56:
                    8f:03:8f:77:b1:93:85:a0:41:3d:ed:0a:d2:b3:42:
                    09:62:b9:6b:ea:d4:8b:8d:71:9b:fc:45:3b:ae:57:
                    6e:2c:4a:27:a4:0d:16:40:54:89:7c:7a:3e:b2:44:
                    a7:9b:39:08:e8:69:e0:d6:03:eb:d5:aa:ea:88:61:
                    97:9b:6d:4e:f8:e3:1f:a3:bd:6c:b5:91:b0:f5:30:
                    fc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DF:5A:C6:F9:63:E7:8B:F4:11:EC:02:5E:0E:9A:CC:09:AB:C5:33
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/Kd9axvlj54v0EewCXg6azAmrxTM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:c3:23:53:97:22:b2:2e:6c:cc:42:79:23:cc:37:dd:54:bd:
         66:3a:27:86:c1:1c:8e:ba:16:69:35:70:fc:62:ef:c5:84:5b:
         5b:3b:51:8f:1e:41:82:69:8b:bf:2f:ef:3d:18:9b:80:ed:9f:
         fb:e1:51:48:51:f4:05:b9:c1:ce:ff:fc:f8:04:f6:bf:2c:b5:
         ac:09:11:43:98:ba:49:6a:b0:23:6f:0b:f2:6b:69:9b:39:7b:
         2c:e2:9b:af:e8:ef:a1:1b:1e:ee:f5:91:df:3b:0b:81:c9:8e:
         6b:39:df:9d:e5:ee:ff:f1:c5:8e:64:2f:df:bd:7a:18:48:ff:
         f5:a1:dd:6b:df:e9:2d:d2:5a:6e:cf:35:5c:6e:5e:74:d2:fb:
         d0:88:0e:7e:c7:a4:1c:21:6b:0a:f1:85:7b:fc:ed:e3:17:32:
         c3:d9:a4:ba:eb:2e:f2:4f:e9:f3:b3:51:a5:ad:01:1b:cf:0a:
         72:ba:58:00:04:ae:b1:b4:b2:5b:9b:05:9d:a4:38:ba:21:2b:
         88:ff:19:19:33:54:f2:25:30:aa:71:76:79:51:07:94:81:a1:
         40:16:62:c5:46:ba:7c:c7:77:14:db:79:16:5d:ea:0b:5c:1e:
         07:d7:e1:79:fa:83:3b:84:92:24:47:0e:52:6b:c3:74:bf:f3:
         76:66:34:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:30:49 2024 by rpki-client on console-ams.rpki-client.org