Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3frxaRSCtLFbWXA7mBHshWhI5Gs.roa
File:                     3frxaRSCtLFbWXA7mBHshWhI5Gs.roa (raw, json)
Hash identifier:          e44NHQfe1Yg22FrF4Jomtv2v7VTdLeawKbOLlBLllW4=
Subject key identifier:   DD:FA:F1:69:14:82:B4:B1:5B:59:70:3B:98:11:EC:85:68:48:E4:6B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0466
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3frxaRSCtLFbWXA7mBHshWhI5Gs.roa
Signing time:             Thu 27 Jul 2023 16:44:01 +0000
ROA not before:           Thu 27 Jul 2023 16:44:01 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        110.162.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1126 (0x466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:44:01 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=DDFAF1691482B4B15B59703B9811EC856848E46B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1c:07:b1:dd:ca:fd:a6:03:6f:79:46:39:e3:
                    2d:a0:64:80:58:40:da:f9:9b:21:4f:ea:65:c8:ad:
                    08:8b:92:bb:9e:0e:f9:a0:7e:33:fe:32:c8:1f:3f:
                    7a:c5:0a:6a:d3:51:be:69:eb:38:f7:45:a4:83:51:
                    70:94:39:9c:ca:8b:d8:2e:e2:25:b6:bb:13:71:7e:
                    a1:51:96:4e:fc:c2:d6:b6:cd:89:39:2f:c7:20:20:
                    86:60:42:55:57:00:fc:6d:1d:65:ef:d0:89:59:ca:
                    8f:77:5e:c4:41:e9:ef:72:82:f9:9d:63:b7:d1:e1:
                    1e:7f:6d:a5:f0:2b:e1:47:5f:31:c2:61:18:2f:5c:
                    84:bc:6a:9b:85:32:31:75:09:39:89:da:7e:54:09:
                    2b:de:28:e4:b7:ba:2e:e3:63:60:8f:a5:e8:af:e5:
                    3a:f3:d8:fd:cd:42:5a:2f:65:55:59:51:1f:6d:8b:
                    5d:1f:4d:3b:1b:2f:c1:50:2d:a6:10:bb:23:bb:9d:
                    57:83:6f:ad:c6:67:08:83:4f:74:27:7e:29:0a:d1:
                    aa:aa:52:2d:38:db:63:b2:67:18:b2:15:84:3e:f6:
                    d3:2a:ae:7e:a1:2f:0b:44:26:96:9b:e5:df:cf:0a:
                    ed:6e:2e:6f:61:7e:94:ac:79:c5:e7:4b:32:fe:18:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FA:F1:69:14:82:B4:B1:5B:59:70:3B:98:11:EC:85:68:48:E4:6B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3frxaRSCtLFbWXA7mBHshWhI5Gs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.162.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:16:5b:8e:b4:6f:cf:42:ea:fc:43:1d:6a:6f:c7:6f:74:0e:
         f1:c1:2e:db:3f:20:ff:03:84:76:da:25:3d:83:38:6b:d0:30:
         a5:a8:b6:b6:ef:28:a3:84:75:55:eb:a9:be:75:77:90:9a:d6:
         86:7b:68:21:1f:83:7e:82:06:90:c3:1e:79:f0:ef:50:93:bb:
         e1:c0:0b:89:4f:e3:fd:be:90:de:90:86:09:05:6b:32:73:86:
         18:7f:b1:80:53:33:68:19:7f:22:7d:3d:7a:e5:1b:99:2e:c0:
         d5:c3:be:68:14:41:88:6e:78:43:40:f1:8d:09:22:f7:f2:94:
         0d:89:b9:97:8a:8c:da:f2:5c:e1:ba:d7:ff:a0:ad:69:81:79:
         b3:f3:7f:00:54:20:ed:5e:9a:dc:00:97:ba:5a:d5:16:b8:4b:
         1d:d7:d3:56:8a:1c:d5:c9:24:39:31:05:f6:4c:5b:60:6f:9c:
         fd:87:22:9c:d7:63:4e:97:b2:55:05:75:4a:87:a6:7d:eb:2c:
         bd:52:1e:1a:a6:19:14:08:34:d7:bf:e7:cd:7a:fb:6a:56:0a:
         b7:47:ae:40:5d:54:1a:57:ea:e2:7e:24:df:a0:6d:c8:08:33:
         85:9c:33:05:41:3f:7d:db:51:1b:05:9f:da:c3:59:c4:de:05:
         2e:45:f3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:51 2024 by rpki-client on console-ams.rpki-client.org