Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/Jx9XHc89rDbQjeQLT7BmaMKOHPA.roa
File:                     Jx9XHc89rDbQjeQLT7BmaMKOHPA.roa (raw, json)
Hash identifier:          LdTLr+/dWBOL/O7GzteYodLEW464o7AIZiN2ouJIQ4U=
Subject key identifier:   27:1F:57:1D:CF:3D:AC:36:D0:8D:E4:0B:4F:B0:66:68:C2:8E:1C:F0
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       27
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/Jx9XHc89rDbQjeQLT7BmaMKOHPA.roa
Signing time:             Tue 30 Apr 2024 01:31:47 +0000
ROA not before:           Tue 30 Apr 2024 01:31:47 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     17958
IP address blocks:        180.178.80.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Apr 30 01:31:47 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=271F571DCF3DAC36D08DE40B4FB06668C28E1CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:05:67:66:46:20:63:8d:f8:eb:8c:e3:ae:12:
                    ff:bf:28:7f:97:dc:8e:4f:72:33:ea:cb:a2:0f:99:
                    4a:2b:80:f6:40:ac:4d:62:36:55:89:70:4b:f1:8d:
                    40:6e:c4:01:7f:71:3c:51:d0:af:7c:e1:ed:4b:dd:
                    d1:70:c4:38:d3:66:8e:6c:29:ac:38:1a:5e:20:95:
                    b8:37:c3:df:47:70:cd:71:b4:56:30:8a:19:ff:24:
                    bf:99:55:b3:ad:d8:ed:a7:94:3f:33:02:7d:d5:4f:
                    f9:7a:b6:96:7a:6f:6b:96:94:f4:05:e8:97:83:cd:
                    07:15:ab:71:0e:d7:44:0e:7c:28:b6:26:7d:7f:0e:
                    d1:d2:2c:d3:ad:9e:80:49:0b:e1:2d:4c:64:16:fc:
                    96:43:3e:db:b3:3a:12:be:1a:6b:fc:e1:22:52:b8:
                    1b:9f:2d:32:71:11:94:08:d7:73:09:f4:cc:3a:ac:
                    56:b8:7c:a9:a2:ff:43:12:8a:f9:bf:ec:e8:5f:04:
                    75:b3:03:43:b4:f9:de:b4:af:a9:79:28:27:94:72:
                    fc:97:6b:0f:a9:a7:0d:5d:04:5c:0e:5a:6e:75:eb:
                    6b:99:26:cd:a2:1d:12:4c:84:98:ad:74:1d:0f:08:
                    cf:f6:e8:9e:fc:9d:f8:a7:0b:6d:42:f9:0c:7f:e4:
                    f5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1F:57:1D:CF:3D:AC:36:D0:8D:E4:0B:4F:B0:66:68:C2:8E:1C:F0
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/Jx9XHc89rDbQjeQLT7BmaMKOHPA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8c:61:f9:1e:a1:fe:ed:60:f2:cc:4a:8b:8b:50:b4:dd:95:79:
         0e:81:ae:b6:de:06:e5:f7:8b:18:aa:59:c6:b9:14:13:32:79:
         63:ca:eb:58:46:ac:e5:d1:c8:ef:35:f8:b5:25:65:12:90:bd:
         6a:10:c6:b2:41:b9:38:73:0b:b3:4e:e4:e3:4a:5b:4c:7e:80:
         62:fc:20:1d:71:0b:9f:2b:21:f0:ff:aa:70:a2:58:e4:60:5a:
         cc:64:b5:ee:63:e3:7c:90:ce:77:16:23:f8:00:33:51:e7:90:
         9c:3a:9b:9d:3a:1f:75:57:1c:32:89:0a:e1:99:81:47:a1:ed:
         72:b6:32:48:70:2c:34:90:d0:37:51:e4:fb:2e:2f:ab:6c:8c:
         ca:37:0f:e0:19:ae:13:3f:d8:b1:4d:3b:df:a8:2b:5f:87:70:
         f7:b8:47:0a:5a:90:6b:38:6a:1f:00:ab:c3:ea:c7:1a:d6:5a:
         d0:b7:06:78:46:7e:d2:a9:d2:56:ee:02:42:78:59:69:7a:fc:
         f9:ee:e2:a5:5a:b0:08:a9:e6:6f:6a:08:7c:a1:89:40:09:94:
         f5:b3:bf:7e:78:d8:1c:28:b3:53:62:24:9d:ac:78:ab:37:05:
         c7:ae:d1:65:76:a9:b6:02:ba:9f:99:0e:5f:c5:96:6b:20:6b:
         7f:d7:63:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:47 2024 by rpki-client on console-ams.rpki-client.org