Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/4HwLxq39Jp4bNk9RUHc34E3tyzc.roa
File:                     4HwLxq39Jp4bNk9RUHc34E3tyzc.roa (raw, json)
Hash identifier:          VteTo+NUytLgn9v0U0YcytZQPMWv68xpGKof5uV0NY8=
Subject key identifier:   E0:7C:0B:C6:AD:FD:26:9E:1B:36:4F:51:50:77:37:E0:4D:ED:CB:37
Certificate issuer:       /CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
Certificate serial:       36
Authority key identifier: 06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/4HwLxq39Jp4bNk9RUHc34E3tyzc.roa
Signing time:             Wed 10 Apr 2024 05:48:02 +0000
ROA not before:           Wed 10 Apr 2024 05:48:02 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     24284
IP address blocks:        27.133.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
        Validity
            Not Before: Apr 10 05:48:02 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=E07C0BC6ADFD269E1B364F51507737E04DEDCB37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:09:25:ea:46:17:17:d8:c4:5d:46:4f:cc:1d:
                    12:21:07:c6:da:14:f9:70:3d:42:51:c0:a9:2d:16:
                    20:c7:96:27:65:b0:23:21:2a:84:36:1f:6e:ba:74:
                    18:79:0b:35:14:c3:ea:5f:66:1d:61:68:79:4e:c1:
                    2c:dc:5a:bf:89:4e:09:2e:51:e0:23:71:64:e2:fa:
                    4f:72:f8:13:d4:bc:8b:74:23:85:b1:54:35:c1:ec:
                    0c:97:ba:d9:0c:d0:46:7d:af:4b:05:3b:ab:9e:05:
                    8e:c6:f2:db:cd:8e:20:66:d0:22:16:81:f6:69:ba:
                    c6:0e:fd:61:2f:dd:05:bf:42:6d:c7:2e:07:07:d5:
                    9c:bd:d6:b4:41:16:6e:7e:a5:dd:ab:50:bc:f0:dc:
                    35:87:ef:fd:53:ab:8c:a1:54:d3:12:cb:45:0e:72:
                    8c:ab:52:22:95:25:39:58:d5:4b:a9:29:fc:b6:75:
                    01:c2:2a:cf:4d:25:f2:4f:9f:6f:dd:08:53:ec:f9:
                    58:d8:06:c0:61:ae:53:f9:12:35:8f:85:19:f8:75:
                    b8:99:5f:8a:16:c9:1f:3a:64:c3:8f:ab:e0:52:72:
                    2a:13:1c:87:0a:92:b7:87:59:3c:cd:e9:9e:c5:be:
                    55:9b:f0:98:0e:c1:02:0c:3c:57:dc:ee:1c:10:83:
                    70:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7C:0B:C6:AD:FD:26:9E:1B:36:4F:51:50:77:37:E0:4D:ED:CB:37
            X509v3 Authority Key Identifier:
                keyid:06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/4HwLxq39Jp4bNk9RUHc34E3tyzc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         47:95:d9:4f:b0:b1:c8:d1:86:d1:6b:de:63:f3:93:9d:1b:44:
         ac:9c:18:0e:a1:dc:cd:6d:73:51:cb:59:97:b5:d7:13:40:dd:
         9b:00:ed:d0:b8:1a:40:9c:7f:25:22:2b:a9:1a:4b:3f:6c:1c:
         75:43:a9:af:7f:1f:79:fc:30:98:e6:21:14:90:b1:6c:43:fa:
         a1:d5:7b:3a:14:06:db:8a:ca:4e:7c:77:90:3c:a3:e3:49:ec:
         56:93:a7:a8:2e:b5:37:8c:69:a6:a2:bd:26:3f:79:57:25:8a:
         0e:4e:a5:6d:c4:9b:14:5e:75:bc:39:a0:99:8d:9b:14:d9:30:
         ea:98:97:8e:e2:8d:e7:f7:8e:34:b9:ab:a5:fa:76:55:d7:00:
         22:f3:ee:f5:05:9a:e3:d6:c4:14:88:66:d2:0b:d8:ea:de:ea:
         22:15:7c:5c:22:ee:21:e2:da:5b:01:ad:aa:74:b5:19:5d:80:
         2b:20:2b:0a:e4:d2:8b:5d:13:1d:c2:89:c4:5e:eb:e7:35:d2:
         0b:3f:04:bc:67:c0:5d:19:a1:a4:45:df:f6:c0:f6:2c:72:71:
         d5:ce:93:5e:6b:3f:9d:bb:3d:62:eb:7d:84:55:5a:03:9a:40:
         14:94:d0:22:d4:a5:86:36:4c:c8:24:77:00:e2:dd:a7:24:0c:
         e4:a1:44:cd
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkE4
NDg0REY0RkJBRkU1QzQ4RDk4OEEwNDZCNkFCNkE4MUIyREYzMB4XDTI0MDQxMDA1
NDgwMloXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRTA3QzBCQzZBREZEMjY5
RTFCMzY0RjUxNTA3NzM3RTA0REVEQ0IzNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANMJJepGFxfYxF1GT8wdEiEHxtoU+XA9QlHAqS0WIMeWJ2WwIyEq
hDYfbrp0GHkLNRTD6l9mHWFoeU7BLNxav4lOCS5R4CNxZOL6T3L4E9S8i3QjhbFU
NcHsDJe62QzQRn2vSwU7q54Fjsby282OIGbQIhaB9mm6xg79YS/dBb9CbccuBwfV
nL3WtEEWbn6l3atQvPDcNYfv/VOrjKFU0xLLRQ5yjKtSIpUlOVjVS6kp/LZ1AcIq
z00l8k+fb90IU+z5WNgGwGGuU/kSNY+FGfh1uJlfihbJHzpkw4+r4FJyKhMchwqS
t4dZPM3pnsW+VZvwmA7BAgw8V9zuHBCDcBUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTgfAvGrf0mnhs2T1FQdzfgTe3LNzAfBgNVHSMEGDAWgBQGqEhN9Puv5cSNmIoE
a2q2qBst8zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTI0L0JxaElUZlQ3ci1YRWpaaUtCR3RxdHFnYkxmTS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JxaElUZlQ3ci1YRWpaaUtCR3RxdHFn
YkxmTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MjQvNEh3THhxMzlKcDRiTms5UlVIYzM0RTN0eXpjLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBBuF0DANBgkqhkiG9w0BAQsFAAOCAQEAR5XZT7CxyNGG0WveY/OTnRtErJwY
DqHczW1zUctZl7XXE0DdmwDt0LgaQJx/JSIrqRpLP2wcdUOpr38fefwwmOYhFJCx
bEP6odV7OhQG24rKTnx3kDyj40nsVpOnqC61N4xppqK9Jj95VyWKDk6lbcSbFF51
vDmgmY2bFNkw6piXjuKN5/eONLmrpfp2VdcAIvPu9QWa49bEFIhm0gvY6t7qIhV8
XCLuIeLaWwGtqnS1GV2AKyArCuTSi10THcKJxF7r5zXSCz8EvGfAXRmhpEXf9sD2
LHJx1c6TXms/nbs9Yut9hFVaA5pAFJTQItSlhjZMyCR3AOLdpyQM5KFEzQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:32 2024 by rpki-client on console-ams.rpki-client.org