Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-Y-bVL5z1FxdbzdpEojmSocW3WE.roa
File:                     -Y-bVL5z1FxdbzdpEojmSocW3WE.roa (raw, json)
Hash identifier:          HibOlGU/FSUY84Q/c/LgUc4Z3zi3TeoypHNK/JT/9e8=
Subject key identifier:   F9:8F:9B:54:BE:73:D4:5C:5D:6F:37:69:12:88:E6:4A:87:16:DD:61
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A54
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-Y-bVL5z1FxdbzdpEojmSocW3WE.roa
Signing time:             Sun 30 Jun 2024 01:48:32 +0000
ROA not before:           Sun 30 Jun 2024 01:48:32 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        110.160.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2644 (0xa54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:48:32 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=F98F9B54BE73D45C5D6F37691288E64A8716DD61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:12:80:1e:14:f1:69:a1:13:1e:fa:3b:ec:ff:
                    12:9d:5f:55:23:89:f1:7e:b4:a8:ba:cc:a3:70:e1:
                    f0:16:a3:db:6d:d0:51:b4:05:e7:26:e1:f9:71:fb:
                    99:23:4b:94:91:f6:37:2a:dc:59:91:00:76:18:6d:
                    89:97:e5:03:69:2c:b8:4e:23:ad:75:3c:b6:76:e5:
                    41:80:ab:6d:98:e1:9e:72:46:eb:be:88:af:8a:92:
                    1f:44:3c:d0:7d:b4:67:c3:e2:ae:a4:06:c2:1f:0d:
                    2b:a3:f8:2b:b1:75:b4:2e:2e:ec:39:d9:9e:ea:7a:
                    62:15:7e:e0:9f:88:0a:8c:44:98:12:c9:19:40:85:
                    de:35:52:1d:24:66:78:b0:fe:9d:b2:6f:c8:2e:fe:
                    fa:26:62:92:0e:9c:7d:d2:1c:cc:e8:8c:27:f2:8f:
                    1e:f8:48:86:b2:d4:5c:d1:4d:76:2c:3e:60:67:b8:
                    12:b4:1f:69:df:8a:11:ec:32:1f:90:e1:3c:5e:74:
                    b1:d9:4f:ab:a7:42:d6:0a:5d:37:65:35:98:f4:56:
                    32:d7:6f:ca:78:68:7d:7a:af:25:77:fa:31:eb:cf:
                    b5:04:c2:5d:6c:a4:a2:a6:10:b5:db:1f:34:58:69:
                    09:61:8e:8e:cc:7e:54:42:ec:e4:fd:da:cb:d4:8a:
                    a9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8F:9B:54:BE:73:D4:5C:5D:6F:37:69:12:88:E6:4A:87:16:DD:61
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-Y-bVL5z1FxdbzdpEojmSocW3WE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.160.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         78:56:a3:ac:1d:5d:97:80:15:57:0c:e5:dd:4d:bb:40:39:e1:
         16:bc:8e:68:5e:62:ed:40:85:45:40:26:a5:e1:bb:dc:12:12:
         d5:48:18:99:a1:d9:34:19:7e:7b:95:4a:85:96:2b:80:34:65:
         72:3f:d2:9e:95:b5:88:67:82:5d:45:0f:65:98:ef:5f:4b:2c:
         16:3a:46:b8:39:6b:63:2f:c4:b9:8b:49:d9:88:91:87:ba:52:
         51:ed:15:7d:a3:43:c9:98:fa:dc:32:09:bb:f7:06:dd:70:c7:
         ad:67:78:25:d8:2f:f2:1c:b9:3d:0b:68:c0:94:00:6d:a6:0f:
         8b:f4:2d:52:9d:8e:bf:28:b3:1a:05:b1:b7:cc:59:c7:02:0b:
         83:e1:bc:6e:10:55:6c:72:be:28:60:30:56:2e:a2:88:76:42:
         05:c2:50:88:f4:5c:6a:cf:bf:ad:b7:3c:41:b9:1d:2b:38:b9:
         1f:7a:7a:00:bf:f7:73:d4:20:c8:64:e2:3e:6c:41:9e:d3:fe:
         66:a6:fe:85:09:2d:78:a1:3d:8c:bf:5c:9f:44:a8:a2:1b:b5:
         16:c1:12:4c:83:54:78:c2:50:68:7d:08:d6:5a:88:77:20:e1:
         8f:6f:cc:f2:de:92:2e:4a:f0:fc:24:ce:4f:4a:84:9f:80:85:
         8d:0e:1e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:58 2024 by rpki-client on console-fra.rpki-client.org