Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/dpSU7pkXwtUI6Odzg0llJHtlJLM.roa
File:                     dpSU7pkXwtUI6Odzg0llJHtlJLM.roa (raw, json)
Hash identifier:          4qkOqWr91Rp1ezOoTWLbEYVZEt9IlQ3jQfL5Rgw9kps=
Subject key identifier:   76:94:94:EE:99:17:C2:D5:08:E8:E7:73:83:49:65:24:7B:65:24:B3
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       24
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/dpSU7pkXwtUI6Odzg0llJHtlJLM.roa
Signing time:             Fri 06 Oct 2023 06:05:38 +0000
ROA not before:           Fri 06 Oct 2023 06:05:38 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9374
IP address blocks:        27.122.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 02:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct  6 06:05:38 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=769494EE9917C2D508E8E773834965247B6524B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bc:8b:5a:38:61:d3:b9:d0:ae:52:10:91:d7:
                    a7:a6:dd:41:df:26:d3:51:fa:71:85:c7:9e:03:e5:
                    20:89:56:c3:83:0b:c4:b6:1d:88:82:59:00:5c:73:
                    92:ec:97:4a:a2:4d:de:3b:97:b9:2f:c7:d4:0c:6f:
                    99:67:55:ce:bb:fc:a5:16:35:06:41:29:23:f0:59:
                    49:b7:1a:24:24:b2:ff:fa:08:70:1e:d6:2b:b1:32:
                    d2:4a:02:6d:0d:4c:ee:f5:fa:b6:af:7a:16:60:65:
                    44:98:2e:ce:18:61:a0:bb:a1:ec:f1:b0:5c:cb:41:
                    c4:a1:c4:e7:31:a9:0e:b7:47:36:c9:53:7f:86:f0:
                    2b:0f:ba:24:6e:db:6a:11:59:19:d7:04:4a:a3:d8:
                    d9:f3:fd:46:c0:e5:89:8d:ff:9f:81:7d:cb:f9:bf:
                    d9:c1:0c:13:67:29:d5:35:24:92:e5:a5:4f:b0:f2:
                    51:05:33:56:41:0b:76:94:85:68:c4:a6:29:de:cd:
                    22:8c:d5:fb:f0:e6:a8:11:3d:90:bc:0a:a8:0b:53:
                    64:65:b4:b1:80:48:96:37:a2:81:de:cf:21:d2:a8:
                    36:97:d2:6c:7d:dd:65:0d:52:b3:a5:10:da:4f:4b:
                    2c:93:c9:e5:16:fb:a9:93:84:13:54:b7:9e:c4:f9:
                    5a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:94:94:EE:99:17:C2:D5:08:E8:E7:73:83:49:65:24:7B:65:24:B3
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/dpSU7pkXwtUI6Odzg0llJHtlJLM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.122.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:d8:dd:b2:7e:33:25:21:c8:db:2b:3c:51:b9:2d:64:03:14:
         34:95:6a:2f:53:a6:bf:5a:a8:6e:78:05:7d:c3:41:30:e8:30:
         cc:07:73:0e:35:b6:d5:49:08:cb:b5:c8:55:b1:03:44:fb:c6:
         f6:04:00:94:09:d7:65:97:49:f6:f5:e7:ff:b8:79:4a:62:c0:
         a3:80:f2:a4:ac:50:22:a1:f2:d7:cf:49:6e:66:ad:36:16:2b:
         08:01:12:10:6f:c3:dc:20:df:7e:5c:cc:cc:f0:e4:cc:11:e9:
         f7:b0:46:b4:70:f2:28:35:ae:a9:ef:22:2d:c5:4a:13:16:a6:
         5e:89:21:74:db:96:87:cd:5b:fc:c6:e1:43:76:92:5f:af:0b:
         d6:de:2b:18:53:7e:09:7f:d1:9e:1a:47:01:52:f9:1a:a0:be:
         65:14:fe:f8:78:44:e5:38:c6:6c:f3:e4:0f:7b:75:86:db:85:
         eb:97:1f:6a:33:00:3a:3a:e4:0f:6d:75:fa:8a:c4:32:e5:ab:
         1b:37:bc:3b:29:09:0f:88:3d:7f:cc:eb:fc:21:ba:51:63:a2:
         e3:ca:5d:05:71:1d:b6:85:a6:7f:28:e7:fc:8e:43:3e:3a:8f:
         1b:27:99:fc:7a:bb:07:45:05:3b:96:a3:4e:24:cb:bd:03:c8:
         c3:83:96:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 09:56:21 2024 by rpki-client on console-ams.rpki-client.org