Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/aPaJcoXfulgz35N34FyXf_qvNQA.roa
File:                     aPaJcoXfulgz35N34FyXf_qvNQA.roa (raw, json)
Hash identifier:          XL8MaPZCi3K3W4qdCUTbRaa71T8Y8mChQArdaxOB95w=
Subject key identifier:   68:F6:89:72:85:DF:BA:58:33:DF:93:77:E0:5C:97:7F:FA:AF:35:00
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       3F
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/aPaJcoXfulgz35N34FyXf_qvNQA.roa
Signing time:             Fri 02 Aug 2024 08:28:46 +0000
ROA not before:           Fri 02 Aug 2024 08:28:46 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     38636
IP address blocks:        27.131.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Aug  2 08:28:46 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=68F6897285DFBA5833DF9377E05C977FFAAF3500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:72:be:36:e1:46:3b:d0:d6:dd:23:15:13:
                    8f:62:62:57:bc:68:ed:df:db:df:8e:92:18:be:35:
                    34:80:c3:ea:07:3a:9a:30:31:82:bf:2f:e0:23:bf:
                    32:82:ab:64:3f:77:36:e6:c8:ef:9f:6e:af:fe:39:
                    75:91:54:6b:e8:50:59:01:05:25:00:6a:86:9d:80:
                    aa:13:5a:08:a6:93:d4:ce:38:e0:8f:83:0a:47:e8:
                    0a:d3:24:df:a1:6b:f3:35:12:1c:d0:b5:55:7a:6d:
                    45:62:a5:09:a0:30:48:eb:59:58:5d:a2:f0:b2:0f:
                    98:98:0c:8b:18:ba:cd:72:b6:e6:62:ea:27:db:90:
                    a2:a8:43:d3:e4:50:e4:6f:ab:04:79:14:18:b9:8e:
                    42:20:23:b2:7b:93:5e:76:1b:2a:42:3e:89:cc:c1:
                    91:a7:91:53:59:ae:9b:29:e7:c6:9f:bc:5f:d0:51:
                    7a:bf:b9:3d:26:60:22:d0:cc:03:89:13:21:36:28:
                    a9:5f:0f:a6:25:b8:36:2c:a9:65:1c:ab:db:ab:4f:
                    0a:8f:7d:4b:6d:6e:df:5a:a6:c6:23:24:4c:53:90:
                    ab:54:8a:b8:6f:64:3e:eb:ac:1e:d6:54:8d:4c:cc:
                    b5:1d:57:15:ef:4d:2f:10:02:ba:5f:89:32:bb:3b:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F6:89:72:85:DF:BA:58:33:DF:93:77:E0:5C:97:7F:FA:AF:35:00
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/aPaJcoXfulgz35N34FyXf_qvNQA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:ab:7b:57:36:66:6f:f3:16:bd:a1:6d:6e:85:72:da:5a:6e:
         78:c8:b4:a7:55:cb:5b:6e:6e:eb:26:9a:8f:c9:17:1d:59:bf:
         81:0f:64:c5:d3:c3:c0:26:22:88:34:49:ce:b4:97:ef:5c:e3:
         01:a7:36:6f:6b:8f:55:e0:b8:78:9e:43:2c:8d:ea:ce:f3:78:
         35:3b:f1:ca:be:49:69:b1:24:67:c5:39:45:1f:66:46:fa:a8:
         71:47:57:cd:b2:c7:4e:71:6a:40:10:d2:43:6f:8c:9f:08:94:
         06:a0:8a:3f:c6:69:fd:88:6e:8f:36:7e:cd:eb:a4:70:23:2f:
         07:db:ac:1d:7a:6a:07:4c:61:81:f8:3b:d0:be:6a:ce:01:f9:
         4a:de:b4:e4:1f:e8:8a:2c:f0:bf:cb:c5:46:e4:37:b1:77:c3:
         48:a0:49:e0:f8:c1:c9:2b:2f:9e:b1:7b:b6:5a:86:99:ab:e1:
         4a:d1:7a:e1:05:60:ce:47:ef:f3:08:a0:45:00:cd:a3:f9:ce:
         73:2d:59:f1:b5:03:f4:95:e6:02:51:58:49:f3:bd:bf:bf:44:
         7f:98:33:18:e4:f9:b3:8a:1f:61:48:48:cc:34:a8:f1:25:9d:
         5c:3c:5f:6d:6e:d6:ce:47:b8:69:e7:be:d8:be:50:b0:f5:3e:
         57:e2:eb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:30 2024 by rpki-client on console-ams.rpki-client.org