Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/jgIJmOt1vofBXDT3Eo3b0IDGo8k.roa
File:                     jgIJmOt1vofBXDT3Eo3b0IDGo8k.roa (raw, json)
Hash identifier:          7y2OvLUqAUxGaBZW7VyH9/fN7bVOOxxcClAErcNfp7E=
Subject key identifier:   8E:02:09:98:EB:75:BE:87:C1:5C:34:F7:12:8D:DB:D0:80:C6:A3:C9
Certificate issuer:       /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial:       37
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/jgIJmOt1vofBXDT3Eo3b0IDGo8k.roa
Signing time:             Sun 01 Oct 2023 01:29:47 +0000
ROA not before:           Sun 01 Oct 2023 01:29:47 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     23805
IP address blocks:        27.100.48.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
        Validity
            Not Before: Oct  1 01:29:47 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=8E020998EB75BE87C15C34F7128DDBD080C6A3C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ff:a8:7a:3d:f8:65:88:8a:34:42:16:96:26:
                    6e:57:25:53:f1:97:e4:5f:11:64:d1:2f:81:71:0c:
                    51:bb:53:6e:4f:35:b1:7e:9e:ae:ce:27:38:73:8f:
                    93:43:28:58:b3:ef:fe:65:1b:b0:9b:2e:2c:9d:8c:
                    69:d6:17:ec:67:01:50:04:9e:e5:31:5e:57:04:3e:
                    59:23:b6:de:30:64:60:f6:40:27:f1:99:80:51:00:
                    46:22:8e:b5:16:ef:b7:4f:16:b0:e5:89:82:3a:80:
                    dd:55:7c:5d:f3:cc:ff:13:ea:20:71:c6:7d:6a:5c:
                    e9:7b:8c:1e:23:b2:a2:ef:ce:9b:1d:62:a4:80:33:
                    42:8f:e3:12:30:c3:1a:f5:5f:4e:15:d2:52:44:ed:
                    9b:dd:ee:89:d4:09:c6:cc:00:90:4d:9f:6a:d6:6a:
                    12:bf:10:bf:50:f3:36:a8:25:48:f3:6e:cf:e1:06:
                    01:c5:53:ec:88:cb:71:53:9a:8d:3a:bb:a7:bd:1b:
                    fb:c6:33:0e:31:d4:6c:2c:ae:f4:da:23:3f:42:1c:
                    d1:ce:d9:4e:4d:05:06:44:8e:5c:3a:33:3b:6f:ae:
                    b6:93:2c:2b:0b:cd:ee:fd:56:ab:b4:86:84:c0:f6:
                    29:a5:1d:b7:72:00:76:48:1b:cf:82:e4:8a:db:1d:
                    4d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:02:09:98:EB:75:BE:87:C1:5C:34:F7:12:8D:DB:D0:80:C6:A3:C9
            X509v3 Authority Key Identifier:
                keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/jgIJmOt1vofBXDT3Eo3b0IDGo8k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.100.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:2d:e8:36:23:56:12:05:28:b2:6d:1a:fa:89:a6:c8:5a:7c:
         fe:34:4c:75:0e:a1:b3:2d:ad:98:6e:6d:13:c0:74:46:fd:71:
         80:98:40:90:6d:ba:b3:7d:ff:ab:b8:79:83:cc:f4:56:78:52:
         ab:42:cf:c6:8b:dc:fa:2f:98:79:a3:8e:41:27:8c:cb:75:e8:
         1d:61:56:4e:e9:72:19:b1:5a:3c:cd:74:9d:34:8f:05:00:84:
         13:53:08:12:95:f3:b5:0a:db:ca:ed:6f:44:cf:5f:a7:83:de:
         18:77:a1:ac:98:5f:24:d4:98:5a:c0:b6:dd:6c:61:64:53:69:
         4f:90:2d:9f:c0:8a:08:00:0a:5f:03:f5:77:5f:3b:40:fc:09:
         97:22:e5:ce:44:99:63:88:13:67:d5:2e:07:b0:78:2e:3d:81:
         12:9f:83:88:e6:12:75:1f:21:24:25:17:4e:bf:42:a8:d6:0b:
         b0:68:26:eb:d4:73:ab:13:6e:68:55:41:bb:2f:70:f8:a8:82:
         7f:c9:ca:8c:c2:ef:c3:56:d7:18:4b:6a:fd:59:3a:0b:b1:8c:
         91:0c:14:79:bb:42:a1:e3:43:cf:f7:b6:9b:03:86:a6:38:e6:
         b2:af:12:5a:0a:d1:4e:ca:55:4e:c1:e5:f3:dd:5c:4d:a5:5a:
         29:92:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:26 2024 by rpki-client on console-fra.rpki-client.org