Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0B6FGGU9SqhyjFnq9Ca_c_CAaNw.roa
File:                     0B6FGGU9SqhyjFnq9Ca_c_CAaNw.roa (raw, json)
Hash identifier:          znjFm2akW0Qg49qJWmsScQ5Q62MBUT3I/Qxssic+Rd8=
Subject key identifier:   D0:1E:85:18:65:3D:4A:A8:72:8C:59:EA:F4:26:BF:73:F0:80:68:DC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A56
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0B6FGGU9SqhyjFnq9Ca_c_CAaNw.roa
Signing time:             Sun 30 Jun 2024 01:48:32 +0000
ROA not before:           Sun 30 Jun 2024 01:48:32 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        220.159.60.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2646 (0xa56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:48:32 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=D01E8518653D4AA8728C59EAF426BF73F08068DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:2f:df:32:cb:7e:b7:b2:18:26:eb:20:1b:
                    a2:ee:52:16:da:7b:78:08:1c:67:40:8c:79:30:bb:
                    ff:a6:c8:b4:03:a8:51:cc:14:0a:34:f4:92:dd:45:
                    7d:82:a4:33:23:70:73:d5:4b:fd:21:95:77:dc:9a:
                    70:04:60:48:be:a9:26:16:7e:ac:b0:fa:9c:12:92:
                    51:ba:40:d4:01:7f:f5:ce:b2:39:c3:9d:a7:f7:1a:
                    fd:02:36:0f:8b:de:76:25:6a:22:f9:e8:1c:66:11:
                    4e:2d:11:cc:a7:2f:fa:70:60:5d:5c:91:35:65:02:
                    71:d0:80:59:d8:e2:c1:b0:c0:15:a4:77:11:9a:57:
                    2d:5e:a1:2f:0c:62:55:46:d1:8a:88:bf:d1:49:5c:
                    0a:2a:1d:c1:1c:41:7f:c5:33:15:2d:f5:ec:0c:2b:
                    bb:5f:a3:9f:d3:3a:76:e9:a4:ca:b4:51:7e:5c:d1:
                    4d:8b:03:7f:3f:3e:ac:ba:c6:52:60:4d:3c:23:e4:
                    d0:23:12:95:67:88:fd:35:be:f2:cc:3e:1a:e2:71:
                    53:4a:4b:6d:9f:60:ae:f3:78:92:29:2d:50:f1:9c:
                    17:e6:17:a7:ef:00:2b:63:bf:91:dc:db:b4:8e:27:
                    2d:44:0a:09:9c:8a:8e:cd:58:34:c0:00:23:e1:94:
                    09:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1E:85:18:65:3D:4A:A8:72:8C:59:EA:F4:26:BF:73:F0:80:68:DC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0B6FGGU9SqhyjFnq9Ca_c_CAaNw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.159.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:8b:1a:b7:92:be:fc:4c:bf:6f:f2:e1:a3:c1:55:20:00:a8:
         2b:39:22:38:f6:5c:66:b2:58:5e:70:29:71:a6:7e:39:71:d6:
         61:4c:44:c8:13:dd:0a:45:6d:2e:a3:1e:0b:da:98:e2:84:08:
         eb:38:fe:01:90:4b:32:8d:d4:53:ef:38:c3:a6:df:42:45:a9:
         8a:ee:19:cb:c0:33:f5:3b:82:1e:b7:95:85:4c:09:3d:c2:4c:
         56:20:69:46:e3:9f:b0:c7:36:36:1d:84:95:47:65:97:0c:9f:
         48:6f:90:a1:4c:ca:f2:d3:ca:92:0b:ef:cc:ee:c8:e0:7d:d4:
         4a:52:19:91:1e:a7:5b:7c:1f:75:8a:67:18:03:86:7b:c5:a2:
         81:3f:7d:48:d5:8b:ad:0e:27:71:a5:ab:4f:1a:c9:9d:d3:37:
         53:eb:4d:b6:de:49:4a:01:f4:0c:52:65:f6:61:b7:57:b9:54:
         39:78:40:08:ef:ce:aa:ab:e0:c3:e7:1d:d0:34:78:13:f9:24:
         22:b1:e1:42:42:ce:75:46:f0:ba:9e:12:48:3c:a3:d6:64:fa:
         b8:5b:21:82:cb:d8:44:9f:26:9f:01:9c:b7:b6:ec:d4:86:3e:
         b6:86:52:fa:c0:2f:d8:b1:3a:c7:8e:4b:06:d6:8d:ac:86:fc:
         fa:b7:1c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:09 2024 by rpki-client on console-fra.rpki-client.org