Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/Za4WJJAaAz4NXWLChWqjWHDwYjg.roa
File:                     Za4WJJAaAz4NXWLChWqjWHDwYjg.roa (raw, json)
Hash identifier:          c0w1RjSlY+VtsWc4pnIVKFLyAztyLEmqYa7/quBvaKI=
Subject key identifier:   65:AE:16:24:90:1A:03:3E:0D:5D:62:C2:85:6A:A3:58:70:F0:62:38
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       B3
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Za4WJJAaAz4NXWLChWqjWHDwYjg.roa
Signing time:             Fri 31 May 2024 01:31:54 +0000
ROA not before:           Fri 31 May 2024 01:31:54 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     2518
IP address blocks:        27.127.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May 31 01:31:54 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=65AE1624901A033E0D5D62C2856AA35870F06238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:45:05:c5:a6:73:20:15:a6:20:13:da:fe:
                    42:98:6f:ef:8b:d3:77:45:0a:ae:02:7d:b8:31:0c:
                    df:55:0e:dc:86:1f:a3:58:6d:37:55:0a:93:b6:fe:
                    86:d5:d7:fb:4d:7a:3f:de:38:d3:a5:54:87:a1:14:
                    d2:91:f8:5c:23:fe:19:03:30:fc:75:84:6f:ad:49:
                    84:f6:1c:17:86:60:82:00:d1:62:80:63:08:6d:9a:
                    59:b1:62:d1:dd:8f:bb:71:ed:7d:62:f2:bb:d8:25:
                    b1:41:59:b1:06:df:a5:d5:9e:3d:d8:c8:e8:a0:ff:
                    78:08:a1:1a:bd:fb:b0:51:38:3e:db:15:1a:39:02:
                    63:ec:92:d8:5f:d1:f1:bf:6d:2d:8b:97:a7:18:f1:
                    76:99:3a:9a:eb:44:cd:35:b3:55:8e:9e:97:a4:27:
                    ba:4f:55:79:b2:83:27:a1:44:bf:e3:19:72:18:bc:
                    64:34:a9:b8:65:81:ae:7d:70:85:1c:b7:7e:4d:01:
                    91:de:30:71:08:4d:14:04:48:99:c5:0f:9a:13:18:
                    62:f4:6d:5d:6e:12:bb:27:d5:54:c4:20:aa:7d:a0:
                    bc:08:47:31:55:4c:64:b5:57:ee:9f:b0:9d:91:4f:
                    55:38:ca:23:dc:e2:49:28:09:b7:d1:d7:15:73:fa:
                    3b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AE:16:24:90:1A:03:3E:0D:5D:62:C2:85:6A:A3:58:70:F0:62:38
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Za4WJJAaAz4NXWLChWqjWHDwYjg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.127.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         91:c9:e0:12:1f:c0:33:66:98:4b:19:81:2d:f9:51:df:1a:b8:
         f8:e5:ce:18:ff:35:d5:f9:09:6e:4b:02:92:c0:06:4e:e0:e7:
         5a:25:c2:31:c5:24:ef:6d:d8:dd:6f:87:8d:90:5a:e5:33:6c:
         27:25:58:be:c3:ca:d2:24:e6:15:fe:aa:6e:8f:97:44:3f:0a:
         56:2a:a9:4c:34:30:bc:cc:1a:e5:2d:18:c9:d8:ea:9a:7b:9e:
         45:0b:4c:d3:e3:44:72:38:b1:3e:17:0e:10:84:85:36:f4:6d:
         63:d9:15:95:2e:4b:06:52:83:43:78:4c:90:5a:89:68:27:ba:
         3f:5d:dc:e2:17:88:2c:3e:fb:48:b1:50:70:28:3e:8b:f4:d0:
         b2:e6:a4:65:39:79:8f:b1:9a:23:9d:09:eb:b6:55:9d:a8:bc:
         31:b4:10:1f:8b:80:75:93:95:99:36:c2:01:53:46:f5:c1:fb:
         05:f1:2f:0b:3a:58:9a:fb:38:0c:9b:c4:12:4e:8a:26:2e:f5:
         94:20:5b:32:23:90:93:e4:72:a6:60:71:96:41:c7:99:16:2b:
         fb:3c:6e:56:90:3b:95:e4:55:45:62:c3:36:20:8a:dc:aa:95:
         9e:fe:bb:54:42:36:44:1e:95:ff:57:b7:0e:b8:b3:71:b1:70:
         a8:96:2d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:19 2024 by rpki-client on console-fra.rpki-client.org