Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5q3DFaSiM98DbQXorWpZxFUZK3g.roa
File:                     5q3DFaSiM98DbQXorWpZxFUZK3g.roa (raw, json)
Hash identifier:          TfHs9Oxos8yiP5MbigjQOLNRSFgQn0a3EVaIar9zJQI=
Subject key identifier:   E6:AD:C3:15:A4:A2:33:DF:03:6D:05:E8:AD:6A:59:C4:55:19:2B:78
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0855
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5q3DFaSiM98DbQXorWpZxFUZK3g.roa
Signing time:             Tue 30 Apr 2024 02:16:29 +0000
ROA not before:           Tue 30 Apr 2024 02:16:29 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2133 (0x855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:16:29 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=E6ADC315A4A233DF036D05E8AD6A59C455192B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3b:27:11:54:60:18:ba:b0:34:e2:68:e5:d6:
                    27:ce:4c:6c:ed:8b:da:ae:7b:e9:2c:77:b3:35:5c:
                    b7:d5:5d:5f:b4:8c:88:b8:6c:05:ca:b0:45:e0:57:
                    7d:03:35:e7:aa:c4:6c:2c:a4:80:a1:78:f4:da:4b:
                    67:f4:77:a1:bc:59:26:9c:98:6e:78:82:ce:c8:86:
                    2e:78:7f:fe:4d:ec:55:26:24:b4:c6:80:cb:4b:7b:
                    b8:05:2c:ef:29:eb:54:e9:ed:ad:3e:8b:2c:44:24:
                    b5:42:fe:32:ad:c1:32:cf:1d:11:95:cf:f2:95:7f:
                    9e:54:91:bb:7a:c5:b4:67:54:53:02:98:4d:2b:a8:
                    f7:20:05:de:21:16:99:cb:db:e2:b9:9c:8f:fb:2a:
                    f3:e1:f4:53:56:66:14:13:8a:a0:2a:85:1c:ca:bd:
                    3e:ad:72:20:20:37:0e:71:da:fc:9e:33:ba:58:3f:
                    1d:7b:6f:ba:7a:b4:f1:ae:83:12:c9:47:d7:6f:30:
                    0a:2d:8c:79:d9:ac:6b:14:b5:81:69:01:ae:d9:a2:
                    9f:fc:cb:ea:89:ec:a3:74:14:ba:bc:35:b6:17:bd:
                    04:eb:18:17:8a:cc:a5:bc:56:89:c9:3d:99:eb:30:
                    4e:61:2b:16:d5:64:44:f7:87:00:de:c5:15:22:08:
                    74:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AD:C3:15:A4:A2:33:DF:03:6D:05:E8:AD:6A:59:C4:55:19:2B:78
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5q3DFaSiM98DbQXorWpZxFUZK3g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:65:19:e1:91:63:5d:81:72:e6:6f:34:b9:e0:00:d1:75:e2:
         23:2b:0a:73:ee:ae:28:62:97:a6:72:66:01:5e:36:6e:7e:31:
         ad:53:28:8c:b6:2e:d6:e8:c1:20:1a:2e:03:c2:fb:c1:34:44:
         78:5e:f0:67:75:13:af:01:ab:fc:28:1f:51:1d:66:58:7e:57:
         6c:ca:52:b8:fc:a7:42:4c:4b:9d:84:2a:37:a5:d0:e9:eb:a2:
         2a:a1:d1:9c:37:73:cc:ca:21:52:d1:8d:4b:53:34:a7:b7:5c:
         fa:62:66:12:a5:d3:9f:a8:bb:45:4e:21:63:32:43:7e:8f:ff:
         3c:85:a2:53:f1:f4:91:77:9b:0b:3f:a4:4b:86:74:a1:ad:c8:
         30:80:e3:52:a6:38:d6:30:78:2a:36:0f:c5:f5:1e:82:48:02:
         52:53:9a:40:d5:f9:dc:21:4b:36:f2:5f:44:ec:80:d7:5d:11:
         a9:dd:a7:89:f7:32:e1:c2:5f:45:30:fe:e6:a9:96:b1:b7:73:
         2c:a4:39:1c:8f:52:2c:ce:21:ea:e6:51:3e:47:0a:0a:ff:15:
         2a:b0:d1:f9:53:bc:f6:86:be:05:54:06:60:b5:a0:5c:39:ac:
         c3:15:58:74:5c:cd:1d:04:dc:1f:f4:41:32:0f:4c:df:ce:cd:
         f1:40:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:39 2024 by rpki-client on console-ams.rpki-client.org