Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/pAbV09omg8obU2H1uJFElVlpBcE.roa
File:                     pAbV09omg8obU2H1uJFElVlpBcE.roa (raw, json)
Hash identifier:          DuqcDi4QCH5ucsElmFH/CRhz7+ZI6H6caKZdG1iEk2E=
Subject key identifier:   A4:06:D5:D3:DA:26:83:CA:1B:53:61:F5:B8:91:44:95:59:69:05:C1
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       3D
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/pAbV09omg8obU2H1uJFElVlpBcE.roa
Signing time:             Fri 02 Aug 2024 08:28:41 +0000
ROA not before:           Fri 02 Aug 2024 08:28:41 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     14618
IP address blocks:        27.131.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Aug  2 08:28:41 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=A406D5D3DA2683CA1B5361F5B8914495596905C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:d9:69:32:a0:00:c2:d4:20:34:04:ce:54:
                    b5:1c:5c:fa:47:4b:a6:d5:a8:98:db:a7:2b:62:d5:
                    8e:2b:35:90:b7:e5:bf:9e:e9:7d:19:2a:09:bd:45:
                    a9:42:13:aa:f7:d3:7e:b1:23:8b:3b:5c:fe:61:3f:
                    5b:ed:64:8a:0f:18:f2:ef:3d:7e:6e:f8:6f:7d:a2:
                    66:74:e0:a5:6c:2a:92:fa:e3:f1:d2:28:9c:90:58:
                    02:85:36:3b:1b:3f:23:bc:23:43:52:06:2e:91:53:
                    ba:59:5b:ff:e6:ae:00:8a:44:b9:38:31:50:c0:10:
                    93:2f:a8:fc:ce:99:a3:a1:98:e7:ee:1b:9b:a1:41:
                    f8:3e:43:af:66:61:b6:57:e9:98:7d:74:4c:6f:51:
                    21:37:89:31:7b:cd:4b:6c:33:f9:a1:c3:ec:2a:9c:
                    f3:36:cd:0d:b5:0d:50:8f:c4:ec:b2:47:3f:1c:45:
                    54:40:dc:b6:81:59:9d:31:74:66:5e:96:ca:9b:50:
                    3a:ae:54:9f:5b:73:4e:e4:fd:3b:c4:68:4d:1e:66:
                    d0:29:8f:c5:4b:e8:71:9e:15:14:23:9e:cf:98:6d:
                    76:ec:35:f4:14:23:53:95:39:fa:5e:8d:1e:d8:4f:
                    99:31:22:53:12:f8:32:c5:16:d0:2d:c3:09:dd:93:
                    c3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:06:D5:D3:DA:26:83:CA:1B:53:61:F5:B8:91:44:95:59:69:05:C1
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/pAbV09omg8obU2H1uJFElVlpBcE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:78:60:10:a9:0e:6c:7e:54:25:e9:42:f5:df:ef:06:43:29:
         b7:9b:55:72:76:46:ff:5d:7e:86:67:de:20:36:99:a2:69:22:
         b1:74:34:b0:e5:92:e9:07:ba:ef:a5:ae:e4:3b:42:de:75:a9:
         3a:cc:f6:b7:c1:e7:da:0b:d1:00:59:f3:b9:c9:87:34:8c:c9:
         96:0d:71:71:93:62:6b:a8:d1:5d:2a:68:af:60:32:66:b3:ad:
         34:38:f7:0f:18:ee:1d:47:ef:ef:bb:6e:8c:07:36:e9:35:e1:
         bf:0c:7a:74:d7:9c:c9:c6:a6:94:e8:4c:d7:c1:32:94:97:5b:
         ad:11:8f:89:7f:fc:2e:5b:05:7b:95:b5:73:6b:bd:bb:4f:58:
         c7:ca:a2:c8:f7:42:6a:b8:81:00:b1:60:cd:d9:42:e0:1a:38:
         2b:f5:5b:b6:bc:99:8e:11:d4:72:ac:1b:ae:7d:53:14:c9:5b:
         a3:f3:19:7e:d6:00:05:d9:74:a2:14:80:89:ba:7c:57:aa:27:
         83:95:45:08:a1:7b:a0:72:0e:f3:c2:cf:f0:a6:b2:a1:f4:3c:
         2c:f3:51:df:c1:28:39:dc:a2:1c:ba:4c:46:8f:5b:77:0b:78:
         42:b5:85:17:e1:a0:16:26:ef:8e:14:83:bf:94:67:37:97:f4:
         89:b8:28:5b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QkVB
NkJEOEE5Qzc4NDg4MjkxNDE5OTlBMDE2QTBDOUQxOTkxMkFGMB4XDTI0MDgwMjA4
Mjg0MVoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoQTQwNkQ1RDNEQTI2ODND
QTFCNTM2MUY1Qjg5MTQ0OTU1OTY5MDVDMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMms2WkyoADC1CA0BM5UtRxc+kdLptWomNunK2LVjis1kLflv57p
fRkqCb1FqUITqvfTfrEjiztc/mE/W+1kig8Y8u89fm74b32iZnTgpWwqkvrj8dIo
nJBYAoU2Oxs/I7wjQ1IGLpFTullb/+auAIpEuTgxUMAQky+o/M6Zo6GY5+4bm6FB
+D5Dr2ZhtlfpmH10TG9RITeJMXvNS2wz+aHD7Cqc8zbNDbUNUI/E7LJHPxxFVEDc
toFZnTF0Zl6WyptQOq5Un1tzTuT9O8RoTR5m0CmPxUvocZ4VFCOez5htduw19BQj
U5U5+l6NHthPmTEiUxL4MsUW0C3DCd2TwwUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSkBtXT2iaDyhtTYfW4kUSVWWkFwTAfBgNVHSMEGDAWgBRL6mvYqceEiCkUGZmg
FqDJ0ZkSrzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTA2L1MtcHIyS25IaElncEZCbVpvQmFneWRHWkVxOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1MtcHIyS25IaElncEZCbVpvQmFneWRH
WkVxOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MDYvcEFiVjA5b21nOG9iVTJIMXVKRkVsVmxwQmNFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEABuDCjANBgkqhkiG9w0BAQsFAAOCAQEAh3hgEKkObH5UJelC9d/vBkMpt5tV
cnZG/11+hmfeIDaZomkisXQ0sOWS6Qe676Wu5DtC3nWpOsz2t8Hn2gvRAFnzucmH
NIzJlg1xcZNia6jRXSpor2AyZrOtNDj3DxjuHUfv77tujAc26TXhvwx6dNecycam
lOhM18EylJdbrRGPiX/8LlsFe5W1c2u9u09Yx8qiyPdCariBALFgzdlC4Bo4K/Vb
tryZjhHUcqwbrn1TFMlbo/MZftYABdl0ohSAibp8V6ong5VFCKF7oHIO88LP8Kay
ofQ8LPNR38EoOdyiHLpMRo9bdwt4QrWFF+GgFibvjhSDv5RnN5f0ibgoWw==
-----END CERTIFICATE-----
Generated at Tue Oct 22 15:00:11 2024 by rpki-client on console-fra.rpki-client.org