Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/RHosSBoB1nE5sm-rclJQ0lx81ro.roa
File:                     RHosSBoB1nE5sm-rclJQ0lx81ro.roa (raw, json)
Hash identifier:          SujIr7AI2VuH23RJmerfQyJRKI9WRh5tFX7ccha4zOY=
Subject key identifier:   44:7A:2C:48:1A:01:D6:71:39:B2:6F:AB:72:52:50:D2:5C:7C:D6:BA
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0135
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/RHosSBoB1nE5sm-rclJQ0lx81ro.roa
Signing time:             Sun 01 Oct 2023 01:30:14 +0000
ROA not before:           Sun 01 Oct 2023 01:30:14 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        27.116.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:30:14 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=447A2C481A01D67139B26FAB725250D25C7CD6BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:44:49:8c:8b:61:f0:75:75:07:b0:b4:a6:9a:
                    12:54:1d:65:e3:ee:62:b7:fe:ac:71:58:31:bd:45:
                    9d:a0:cd:90:cb:c7:34:f5:d4:b0:c5:6b:38:04:ed:
                    92:45:68:7a:dd:9f:a6:73:87:26:21:76:c4:14:c1:
                    bf:35:6e:4d:78:a3:3e:76:c7:c5:4f:be:f8:cb:bd:
                    cc:45:70:d9:fa:b7:ae:0f:46:97:6e:57:29:11:4c:
                    60:31:55:c3:27:cd:51:4c:1b:0c:68:34:52:dc:86:
                    74:f5:3c:a1:89:a8:d6:17:25:cd:26:c4:00:e8:72:
                    37:64:57:88:5e:68:36:9b:81:95:a9:d5:41:4c:23:
                    83:93:c5:98:51:e1:fe:f6:0a:c4:09:9d:84:95:4a:
                    d6:8b:10:db:ad:1d:65:ab:c9:9d:b1:2e:90:2d:3d:
                    10:68:f1:9a:df:18:08:da:0c:38:cc:be:ff:c3:b8:
                    0a:d8:f4:0b:f4:40:43:fc:c9:e1:e2:0e:4e:52:1e:
                    b5:be:37:48:c1:53:34:03:36:e2:cc:34:34:bc:80:
                    36:75:95:87:d5:5d:5d:bb:ce:6a:e3:e2:13:f3:c3:
                    32:4f:ab:6e:02:f1:6b:26:94:3c:9b:39:1b:ef:ad:
                    25:53:f0:68:61:e2:69:22:06:b9:6b:c6:d7:49:5c:
                    81:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7A:2C:48:1A:01:D6:71:39:B2:6F:AB:72:52:50:D2:5C:7C:D6:BA
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/RHosSBoB1nE5sm-rclJQ0lx81ro.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.116.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:c2:4c:e9:b7:06:f3:63:a7:a6:ba:6e:a5:ae:35:18:34:93:
         88:15:d7:e2:1b:64:87:74:82:03:30:d5:e8:f8:fb:4b:97:01:
         09:5f:fe:a7:eb:f6:1d:da:d0:9a:1d:21:60:55:7e:ff:32:8b:
         e3:86:ab:05:3c:6c:b9:82:6a:a7:84:eb:9e:f2:34:ec:de:df:
         eb:4d:36:b1:5d:ea:b2:4b:90:b6:b3:70:eb:f7:da:49:14:a9:
         6f:1f:1f:c9:cf:a8:1f:b8:16:e3:c8:32:6d:25:ad:60:00:4f:
         7c:de:24:b3:41:59:54:b9:e7:fc:fd:4b:e1:1e:52:2f:d7:62:
         36:6b:82:d0:9d:3d:fd:f9:8f:0c:8c:12:3c:5a:5c:b8:dd:fd:
         20:13:c6:71:77:83:67:aa:1d:86:37:65:7c:f2:a7:9d:9b:4d:
         e2:5b:2d:71:44:5f:d1:00:2a:71:b9:b8:76:9c:46:2b:26:1c:
         20:d5:17:f4:cf:f5:43:81:ea:8c:e5:46:aa:7f:7f:a9:35:b8:
         32:9a:ab:94:27:23:92:05:69:af:d6:c2:d4:db:b7:24:83:ff:
         9c:e0:36:74:69:83:63:0d:06:cc:29:e5:0c:29:f1:fc:33:b7:
         45:8a:72:b6:7d:22:f7:d2:67:97:85:a9:83:70:64:f5:cb:e7:
         ac:4f:a3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org