Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/pseXyH2sWqLHtoJC45XPvg8GUxU.roa
File:                     pseXyH2sWqLHtoJC45XPvg8GUxU.roa (raw, json)
Hash identifier:          5oIoM/Fxzw+6DwYEWrxC6RVgNVHVTW/Ytf7uC99oyh8=
Subject key identifier:   A6:C7:97:C8:7D:AC:5A:A2:C7:B6:82:42:E3:95:CF:BE:0F:06:53:15
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       23
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/pseXyH2sWqLHtoJC45XPvg8GUxU.roa
Signing time:             Fri 06 Oct 2023 06:05:32 +0000
ROA not before:           Fri 06 Oct 2023 06:05:32 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9374
IP address blocks:        27.122.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct  6 06:05:32 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=A6C797C87DAC5AA2C7B68242E395CFBE0F065315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:d6:ed:b5:d4:4f:b6:98:6d:4f:be:20:02:
                    40:fc:8a:6e:13:03:96:8c:9a:b7:37:15:19:39:2d:
                    31:03:f1:a6:a8:19:14:03:9a:4a:0f:ec:ed:a2:4a:
                    cf:9d:de:cf:3a:7b:bd:73:68:1e:7a:c0:8e:78:bf:
                    5a:08:65:c5:bf:d4:5e:09:a0:86:32:41:f1:85:41:
                    1d:84:21:78:d3:96:9e:3d:31:2f:05:89:b0:c7:9a:
                    7f:e0:c2:b7:40:28:01:b7:4d:7a:62:20:d2:6c:7c:
                    74:77:bf:f6:f6:89:1b:98:04:54:f6:c9:2a:59:b6:
                    a1:df:f9:9c:ba:a7:55:41:3d:5c:8b:0d:3c:4b:3d:
                    1c:23:d4:ae:77:6b:23:b5:13:57:9b:01:1e:f8:fe:
                    80:92:e1:82:ba:ea:3e:e5:cd:05:45:e6:8e:54:ba:
                    a6:16:ef:49:23:cf:b1:f5:e4:2b:d7:c9:26:f5:d6:
                    ff:d1:85:96:61:8d:ee:d2:ca:9e:ba:e3:f3:1f:37:
                    0f:97:3b:b5:aa:73:d8:89:4b:d7:2f:da:17:48:33:
                    81:88:b5:44:73:ea:65:6b:55:af:ab:8c:88:bd:fd:
                    bb:51:81:0b:4a:d6:6d:01:fb:38:75:30:33:f1:3a:
                    a1:f4:17:10:23:f7:f0:1d:11:b7:0d:c8:42:27:09:
                    34:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C7:97:C8:7D:AC:5A:A2:C7:B6:82:42:E3:95:CF:BE:0F:06:53:15
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/pseXyH2sWqLHtoJC45XPvg8GUxU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.122.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1d:03:a8:e9:54:83:31:c5:4e:10:3a:33:bf:5f:53:a1:d2:d4:
         65:71:3e:b5:1c:64:84:74:8a:0e:6f:4e:3a:5e:d8:e4:00:9b:
         a1:2b:4e:65:42:02:3f:fc:4c:9d:00:54:07:cc:91:58:01:47:
         3d:6d:72:33:14:cf:9c:4a:ff:98:fa:1a:39:8e:58:37:90:9b:
         7e:ad:86:ef:e2:b0:e7:bd:5b:8e:9f:a9:a0:aa:12:d2:b6:ac:
         4c:49:a8:aa:3e:04:4b:7a:f9:ef:e9:94:56:b4:59:a6:48:3e:
         c6:d3:b6:30:e4:22:9e:2f:36:38:05:03:36:6c:a0:10:b4:b0:
         ca:1b:fb:27:4a:7a:c8:e8:35:28:90:da:a3:a5:d5:c7:4e:2d:
         7a:a7:f7:51:ef:02:04:b5:6f:b5:c5:ce:c3:6d:df:2c:f7:37:
         a4:2e:32:14:36:03:9b:29:20:97:d4:26:9f:93:c6:38:97:d7:
         89:f7:f6:b9:56:90:05:c1:5c:fb:7a:da:6c:04:c1:b9:c0:b4:
         8c:90:40:61:80:ff:98:0e:5a:1d:e0:06:06:b2:1e:4e:7f:74:
         7b:20:91:ce:6b:2f:d1:24:e0:c3:7c:13:f7:12:79:a2:2d:b1:
         2e:74:6a:02:aa:fb:31:98:e0:2b:4f:03:b4:01:e3:0f:b3:0a:
         b0:0b:49:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org