Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/dYIbEqxEc5fG3EXs1mA7ZMnYftM.roa
File:                     dYIbEqxEc5fG3EXs1mA7ZMnYftM.roa (raw, json)
Hash identifier:          4wiX7FMmrGB4/A/bTzXTZoIQwkwdPKIwITaAQR+Fggc=
Subject key identifier:   75:82:1B:12:AC:44:73:97:C6:DC:45:EC:D6:60:3B:64:C9:D8:7E:D3
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       39
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/dYIbEqxEc5fG3EXs1mA7ZMnYftM.roa
Signing time:             Wed 12 Jun 2024 06:07:11 +0000
ROA not before:           Wed 12 Jun 2024 06:07:11 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     16509
IP address blocks:        27.131.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Sep 2024 03:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Jun 12 06:07:11 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=75821B12AC447397C6DC45ECD6603B64C9D87ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:70:b7:33:83:5d:50:64:7b:7a:d2:2d:57:
                    1d:4a:e5:5a:88:1f:c6:94:28:69:21:dc:6b:2e:4f:
                    79:26:eb:5f:f5:74:d4:5d:13:4e:f4:dd:a1:1a:25:
                    13:93:60:65:b3:3c:21:7e:48:99:12:cc:74:2f:87:
                    ef:0b:21:4a:1f:14:2d:c7:e8:73:24:84:cf:44:21:
                    9c:1d:54:4f:a8:2c:6a:b2:21:55:a1:53:48:cc:a9:
                    42:24:29:32:44:ab:84:ef:31:03:f3:b5:e2:b4:d4:
                    dc:93:6f:95:ad:45:ea:8c:e9:00:30:48:d1:7c:85:
                    5e:71:60:a6:d3:04:0e:ab:ba:da:a2:16:c9:5a:84:
                    a3:42:60:49:cd:b0:8c:01:b0:18:75:32:c7:71:6e:
                    a0:6f:46:1c:96:cb:98:48:e6:76:61:ab:f2:91:9b:
                    f5:49:17:de:b7:b8:9e:bc:81:50:10:9d:a3:f3:00:
                    91:57:1d:56:04:3f:34:e2:d6:a7:b0:f2:10:e0:16:
                    e5:f1:79:3d:86:36:b0:2b:cb:48:5f:28:6c:b4:a2:
                    4b:00:81:cd:34:19:af:6e:93:98:97:29:c5:37:49:
                    a4:8c:4c:a8:06:ac:09:5d:92:8e:9c:5a:b7:c6:a9:
                    41:c8:16:6c:4d:84:8c:fc:df:d5:24:d8:31:97:cc:
                    31:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:82:1B:12:AC:44:73:97:C6:DC:45:EC:D6:60:3B:64:C9:D8:7E:D3
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/dYIbEqxEc5fG3EXs1mA7ZMnYftM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:dd:a9:d4:4d:0e:38:c3:8b:35:b2:12:94:4c:87:4a:5e:0e:
         5b:35:6d:db:1e:8b:ba:27:2b:5b:58:c5:dd:69:44:55:73:55:
         ea:ab:ac:e9:7b:7d:34:46:60:c9:64:6f:48:b0:4d:bd:18:a9:
         6a:a4:41:da:1a:1e:de:d5:a0:50:6c:72:44:7f:ad:b9:0e:fd:
         22:d0:8e:41:0f:e9:57:28:b4:db:c4:a6:b7:e0:15:94:cd:87:
         84:6d:04:fe:11:0f:b2:64:5f:5e:6a:79:f7:7a:0f:d5:ee:74:
         e0:6d:f8:c1:f6:b3:7b:cd:82:06:f8:77:04:82:f2:a0:b1:0f:
         7e:5b:42:c0:eb:14:07:07:e8:5f:35:e8:25:60:23:82:9e:9f:
         6f:d3:0f:4e:58:a4:e0:98:2d:55:2a:8b:57:15:77:c3:a5:43:
         c2:cb:9c:47:08:51:27:df:68:56:10:65:aa:24:bb:42:37:74:
         e4:2b:1e:52:4e:01:a1:b9:6d:6f:18:38:06:57:14:5e:11:31:
         f3:ea:2a:b3:94:a6:6c:66:92:45:1a:44:7a:69:bd:da:c2:b5:
         f4:9f:0b:e6:65:b7:5e:cf:a1:64:9f:df:c6:11:a4:de:89:89:
         5f:ce:d9:0f:e7:59:4e:44:03:ab:7a:0d:60:ec:b4:92:bf:42:
         1f:5e:b5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 12:07:13 2024 by rpki-client on console-fra.rpki-client.org