Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5B8I7e2lxS131mgr1v-wlDSlUZM.roa
File:                     5B8I7e2lxS131mgr1v-wlDSlUZM.roa (raw, json)
Hash identifier:          4g7Mqe16O6YBP66J3DbBtuPZs0rU/bFINFmrT9ASQ4c=
Subject key identifier:   E4:1F:08:ED:ED:A5:C5:2D:77:D6:68:2B:D6:FF:B0:94:34:A5:51:93
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       044B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5B8I7e2lxS131mgr1v-wlDSlUZM.roa
Signing time:             Thu 27 Jul 2023 16:43:12 +0000
ROA not before:           Thu 27 Jul 2023 16:43:12 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        110.158.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1099 (0x44b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:43:12 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=E41F08EDEDA5C52D77D6682BD6FFB09434A55193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:33:5b:ec:01:43:db:f6:05:cd:c8:ba:35:eb:
                    2b:90:d9:b7:67:49:57:28:86:b0:f1:59:3c:9a:98:
                    ae:77:95:90:eb:7b:0a:eb:de:08:b0:84:29:83:bb:
                    db:f6:8f:7d:79:d0:8a:b3:78:36:ad:ef:91:78:88:
                    d3:69:3a:8b:a6:e5:b7:bc:ac:64:ca:ad:ff:ed:49:
                    f0:11:a1:f6:54:5d:6a:10:7c:e5:3f:40:40:05:59:
                    db:23:f2:e3:11:f6:a8:ad:f7:e6:9d:5a:f3:0e:91:
                    ab:b9:99:a8:1e:4c:cf:ce:18:14:b7:ee:41:c9:e8:
                    e8:e8:65:22:c1:09:4a:5a:97:5f:f5:e2:f4:a6:8b:
                    c7:1c:d0:61:a2:93:aa:73:a1:6e:e3:2e:58:7b:f1:
                    67:27:8c:c9:af:96:bf:a3:89:63:1b:e6:f9:a2:d6:
                    fd:09:f1:52:09:e7:bd:3d:c9:69:5b:77:cd:4c:0a:
                    88:f7:2b:32:7a:64:01:ca:7d:7e:9e:dc:87:6d:4e:
                    f1:db:6a:b7:10:a8:61:db:5a:b6:72:4d:63:4d:ff:
                    eb:db:01:5c:dc:4c:6c:cb:b7:4d:6f:77:e5:45:1a:
                    fd:f3:80:08:d3:a4:a6:f9:c4:e1:b5:d2:64:15:d5:
                    b4:a8:e5:57:ec:af:c4:3f:05:ed:d9:a1:cb:f9:63:
                    fb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1F:08:ED:ED:A5:C5:2D:77:D6:68:2B:D6:FF:B0:94:34:A5:51:93
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5B8I7e2lxS131mgr1v-wlDSlUZM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         e7:7d:df:4f:62:9f:9a:dd:c0:84:c8:d9:bc:60:58:ed:5c:5c:
         d0:d9:09:8e:d1:04:b3:61:ef:7c:f2:af:c1:15:4a:77:90:14:
         93:2e:f6:23:e8:78:ad:9f:63:8c:34:6f:e6:32:8b:14:5b:5b:
         64:11:eb:94:3c:24:77:a7:82:88:b4:2c:57:e5:7a:0e:97:7d:
         0b:a5:d9:02:4e:c1:32:53:8f:15:27:ee:f7:93:dd:84:07:64:
         06:90:33:c6:ca:22:20:0f:4c:a2:64:54:9d:be:56:36:5c:c5:
         2b:64:5f:59:5a:81:23:ed:59:c4:9f:cb:61:63:64:42:e2:60:
         5e:3f:75:df:1c:e5:2a:50:88:ad:59:18:73:63:a5:75:31:dc:
         8c:b1:40:5a:e4:c9:8c:a2:8e:f7:e0:21:d6:89:82:46:f5:c2:
         2d:80:4b:03:dd:ef:e5:43:b1:a8:d8:e3:cc:69:83:58:04:d5:
         cf:de:ae:4d:e4:49:1e:ef:5a:19:da:9c:5b:d3:71:3d:d5:5c:
         ac:96:b6:0a:98:e5:65:10:92:d2:68:37:70:34:2f:2f:af:ca:
         23:c1:9b:2c:ee:19:e2:92:c8:5a:96:43:6e:10:a2:8d:08:1e:
         98:77:20:67:b5:76:1e:2d:ed:82:31:63:42:01:46:cf:58:6c:
         8a:8c:65:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org