Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/702qWQJ-eV0HkaSdWxMpcEDdIak.roa
File:                     702qWQJ-eV0HkaSdWxMpcEDdIak.roa (raw, json)
Hash identifier:          T02Dx8BFlOO3G8b/8SiRbCaC6RGju1PYwaAXOFjsDsE=
Subject key identifier:   EF:4D:AA:59:02:7E:79:5D:07:91:A4:9D:5B:13:29:70:40:DD:21:A9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0874
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/702qWQJ-eV0HkaSdWxMpcEDdIak.roa
Signing time:             Tue 30 Apr 2024 02:18:32 +0000
ROA not before:           Tue 30 Apr 2024 02:18:32 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2164 (0x874)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:18:32 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=EF4DAA59027E795D0791A49D5B13297040DD21A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:ee:05:1a:ad:18:b5:6e:a9:5f:79:2a:f9:
                    87:63:26:c0:69:2d:1e:50:45:00:8b:c0:28:be:78:
                    c6:81:1c:ed:5f:00:f4:38:0d:f8:9f:c9:97:a4:ac:
                    ae:96:41:cb:ff:26:b2:2f:74:b1:37:46:bc:76:67:
                    30:b9:f1:77:96:12:91:ba:49:35:f9:f5:93:77:fd:
                    aa:2c:de:a4:6c:38:0d:fa:0d:4e:81:01:8e:e5:35:
                    b9:e0:f8:1c:04:d6:0d:39:9a:1d:56:27:09:e0:1e:
                    c2:38:c1:7a:86:eb:b2:dd:a9:5e:05:83:c5:e3:ed:
                    e8:87:b4:94:eb:d4:53:86:23:78:e2:a8:d9:8a:e0:
                    05:eb:2f:e0:e2:43:67:2a:6c:09:3a:ae:6d:76:ac:
                    34:96:9f:a3:a5:46:f3:4c:71:ae:80:aa:98:08:9e:
                    11:45:e1:5f:52:70:1a:48:e5:97:1e:27:ca:2f:3c:
                    13:2d:48:bd:a7:54:31:d5:cf:73:6d:0a:08:ea:8e:
                    cf:b8:09:10:7b:3e:bb:6c:a1:88:d6:5c:c6:57:21:
                    72:9f:60:b2:67:2a:25:82:5d:63:34:bb:80:ca:ed:
                    db:8c:73:10:ca:83:40:6a:c8:62:f1:b0:5f:92:d0:
                    1a:f0:a1:9f:58:73:6e:a0:3a:e0:ab:33:e2:08:1f:
                    28:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4D:AA:59:02:7E:79:5D:07:91:A4:9D:5B:13:29:70:40:DD:21:A9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/702qWQJ-eV0HkaSdWxMpcEDdIak.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:04:a5:dc:21:8a:1a:9c:a8:cd:f2:c1:f7:90:9f:88:4e:12:
         68:fa:22:5b:81:be:f2:a6:a9:07:c1:7f:ef:c8:59:70:2d:99:
         f0:ce:58:30:b9:72:22:ed:16:f4:55:12:3c:c8:ce:28:60:96:
         be:6a:38:dc:33:0c:fa:de:06:ed:ee:00:8b:62:d0:8e:72:b4:
         fb:c9:d6:f6:ba:27:8f:20:4a:36:f5:52:0f:fc:0f:a3:61:d3:
         a6:03:4f:1f:21:fe:3a:96:39:e1:78:06:84:4d:0d:13:a9:60:
         4e:f3:5f:83:0f:9a:a8:13:83:cf:3d:66:d0:5b:72:35:0d:1b:
         5a:c1:a8:9b:d8:bc:c3:49:81:83:bb:b4:0d:44:2b:7a:d5:fd:
         76:e1:1d:90:6a:c8:41:d4:50:b8:16:8a:80:2c:f9:31:78:d6:
         8c:71:b0:53:df:19:3a:43:67:63:15:78:7f:94:8e:3b:a9:a1:
         67:ff:99:32:4c:95:09:45:cb:30:d9:75:7d:9e:da:3b:96:a3:
         81:4b:04:a4:ef:62:04:47:01:2d:cf:f8:7d:7d:14:35:ec:eb:
         2e:f4:58:b1:b1:0a:d6:2a:34:4b:4a:ef:97:77:ca:a3:a8:55:
         7c:ba:ae:e1:13:85:18:4d:b1:25:3f:d5:82:12:b6:55:f7:d1:
         01:7e:96:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org