Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/LgxQ3BiAKLu83DrYOKjklcjo6DU.roa
File:                     LgxQ3BiAKLu83DrYOKjklcjo6DU.roa (raw, json)
Hash identifier:          JGJpazFNntkUH8TC8mu4231Gwg9JaBbHMd/PBTAkS+g=
Subject key identifier:   2E:0C:50:DC:18:80:28:BB:BC:DC:3A:D8:38:A8:E4:95:C8:E8:E8:35
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0152
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LgxQ3BiAKLu83DrYOKjklcjo6DU.roa
Signing time:             Sun 01 Oct 2023 01:32:59 +0000
ROA not before:           Sun 01 Oct 2023 01:32:59 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        27.126.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:32:59 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=2E0C50DC188028BBBCDC3AD838A8E495C8E8E835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:cb:88:d0:cb:ba:45:08:e1:f4:42:26:cb:
                    31:e7:73:41:82:12:07:77:f7:09:d4:fd:98:10:03:
                    8a:26:2a:a4:c4:60:78:9f:ac:0c:47:fb:54:bb:f0:
                    2c:e7:6a:84:2c:73:0c:9e:21:cc:3f:8f:69:cb:9b:
                    f4:3f:cf:5a:c7:3c:ce:63:75:22:50:2b:59:90:f0:
                    ba:33:7b:3e:a8:36:16:c5:95:52:20:2b:18:4f:c1:
                    a6:92:a3:1f:7c:42:81:f6:dc:7d:5e:5a:84:12:8e:
                    fb:fe:85:0b:ab:ef:c2:dd:a1:1b:29:d7:a7:5f:08:
                    8b:e7:d4:a5:4c:f6:53:33:e9:9d:09:da:2f:78:8f:
                    f6:45:6a:3b:56:c2:e5:9d:82:3b:f0:c3:18:03:b1:
                    f2:86:7a:1c:f9:7b:45:02:63:be:c7:4e:6d:7d:70:
                    59:b0:cc:f0:e0:b2:60:64:01:80:22:d3:d5:17:d5:
                    57:76:1e:2b:24:bd:79:2a:05:1e:41:0a:37:ca:47:
                    39:40:37:95:27:22:cf:4e:3f:84:51:b2:e0:2f:db:
                    f8:83:31:2e:af:1d:d7:57:ca:c5:27:88:d6:1e:86:
                    1d:80:01:1f:5d:b4:17:a4:21:ba:5d:c6:c0:cf:52:
                    52:34:92:65:06:96:cd:fc:87:0f:46:2a:77:3f:9f:
                    29:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0C:50:DC:18:80:28:BB:BC:DC:3A:D8:38:A8:E4:95:C8:E8:E8:35
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LgxQ3BiAKLu83DrYOKjklcjo6DU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.126.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         33:22:7e:c5:71:39:d1:19:50:6b:4d:5c:a7:be:d5:63:f3:79:
         9f:b3:60:32:b4:f3:33:76:c5:66:91:73:a8:45:59:ba:8d:9a:
         2d:16:8b:ba:9c:d9:06:eb:d0:ee:29:76:c5:00:d9:10:2f:0e:
         34:82:6b:36:16:1f:e9:3d:d8:5e:8e:11:46:1c:f7:03:31:f3:
         e5:91:0f:31:fa:ae:c5:48:90:f3:c4:74:96:7f:99:62:9f:d3:
         f3:b7:7e:73:81:35:b2:32:48:0d:da:69:4d:76:fa:8e:13:4a:
         29:13:11:e8:bf:76:39:a9:e0:87:5b:8b:53:9a:6a:46:a0:9f:
         9d:72:6a:15:1b:4f:2e:df:c3:5f:12:b4:b3:f9:36:85:04:5d:
         21:8f:14:ab:a7:5a:0f:fd:47:2a:92:dd:f5:97:3c:f4:8e:09:
         a2:db:04:a8:09:f0:4f:8a:78:46:c7:00:d8:11:62:18:70:e2:
         dd:5e:ea:84:11:69:93:ec:53:24:36:13:1b:e2:72:91:94:71:
         fd:8b:13:95:3b:d3:b3:20:1e:f6:67:04:fa:6f:61:25:26:a3:
         d8:8a:ad:e2:33:86:1d:fa:51:de:44:c8:1e:cf:2e:bf:8f:82:
         68:fa:c6:63:da:6c:06:08:a2:74:6f:7c:e4:46:6d:f9:60:26:
         48:de:5f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:55 2024 by rpki-client on console-fra.rpki-client.org