Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/n8PCFC43er8ilGfZDmWH7e6CL1k.roa
File:                     n8PCFC43er8ilGfZDmWH7e6CL1k.roa (raw, json)
Hash identifier:          SupfH//YOtS5ArDv1LzL+sfw2oQxbirdbeXX4Wx+Uew=
Subject key identifier:   9F:C3:C2:14:2E:37:7A:BF:22:94:67:D9:0E:65:87:ED:EE:82:2F:59
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       55
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/n8PCFC43er8ilGfZDmWH7e6CL1k.roa
Signing time:             Thu 29 Feb 2024 01:30:49 +0000
ROA not before:           Thu 29 Feb 2024 01:30:49 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18260
IP address blocks:        27.106.208.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Feb 29 01:30:49 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=9FC3C2142E377ABF229467D90E6587EDEE822F59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:ec:3d:dc:0f:d9:40:26:06:5c:5f:dc:a5:
                    d4:3e:c4:c1:6c:a0:e4:4e:5f:ed:b0:78:cb:b9:ae:
                    23:f1:85:52:d1:78:c0:c3:29:ee:f0:8b:60:f8:aa:
                    0f:fe:58:9a:9d:9a:96:13:d6:fc:12:41:ce:b6:ff:
                    22:89:29:5d:b4:ee:91:30:c7:8d:5a:7a:fe:b2:4e:
                    92:f2:df:b0:13:3a:e0:7a:dc:a1:dc:6d:3e:c8:c5:
                    9f:be:4e:57:5b:36:fe:68:60:48:86:32:b3:7f:a3:
                    48:be:96:20:31:18:51:41:14:dd:5a:df:df:58:45:
                    56:83:80:9e:61:69:bb:7a:61:c4:20:17:4d:49:7a:
                    17:9e:86:0f:98:bb:c5:a2:30:ab:68:c3:a1:93:72:
                    4a:7d:72:2c:89:38:f1:08:da:b9:b1:97:7d:aa:dd:
                    92:dc:55:ba:dd:30:90:6a:10:6b:5b:a1:ff:fc:43:
                    a9:e6:05:6b:91:25:19:b8:d4:59:c2:77:63:44:70:
                    18:67:9c:f4:43:57:e3:b5:31:ad:c6:44:9d:b3:db:
                    76:07:29:3d:20:76:07:fe:fd:09:12:30:15:c5:4c:
                    2b:0a:00:bd:f7:35:6b:56:0a:5b:9a:6f:97:d1:44:
                    3a:8f:78:29:54:40:08:1c:60:a6:e9:7f:bd:90:d9:
                    27:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C3:C2:14:2E:37:7A:BF:22:94:67:D9:0E:65:87:ED:EE:82:2F:59
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/n8PCFC43er8ilGfZDmWH7e6CL1k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.106.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:98:11:ad:5d:5a:41:cf:5a:89:99:68:77:d5:0f:43:04:13:
         18:95:f5:44:aa:5d:14:b7:9d:4c:7b:e7:91:17:fe:a9:70:95:
         5c:5d:d7:66:ae:6a:e8:c3:e5:66:55:f4:50:f2:65:22:a7:24:
         81:23:f2:39:42:36:db:4f:1e:d9:00:8e:6b:23:26:4a:0c:d7:
         b7:af:30:63:c3:e5:98:ff:e4:ca:3b:67:19:6e:fc:64:ff:60:
         3b:e7:d4:c2:56:05:66:d7:7d:17:ce:a3:1b:ef:7e:2b:5b:8c:
         d7:59:e1:55:f7:1c:2d:c0:a6:66:f7:c3:ff:68:c3:c6:bb:10:
         3e:96:bb:a9:21:bd:67:42:4a:57:87:8a:e1:09:aa:b9:b8:be:
         bd:9a:69:60:90:fa:26:24:55:04:5c:4a:bd:93:fd:4e:35:28:
         bf:24:97:9e:11:76:20:b8:4d:b9:68:41:dc:e5:84:7c:c0:db:
         cc:24:dc:ee:53:44:a0:19:68:47:0f:f6:da:94:c9:dd:52:af:
         26:f6:7c:ec:de:4d:2a:57:8c:91:f3:e9:96:70:c5:9a:82:55:
         f7:f2:c3:4c:21:05:79:e9:3c:03:c8:2e:75:70:0d:33:8a:28:
         fe:96:26:94:2d:ae:75:d2:5e:0e:94:67:2a:cf:8a:29:e2:9e:
         e0:ea:a6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:52 2024 by rpki-client on console-fra.rpki-client.org