Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7EzhjIdVcz5lsqHe20KVFad3Kqk.roa
File:                     7EzhjIdVcz5lsqHe20KVFad3Kqk.roa (raw, json)
Hash identifier:          ueerOGg2IG+HMMrDzMEpAl8NMsuq8H86b+taJAHgX+M=
Subject key identifier:   EC:4C:E1:8C:87:55:73:3E:65:B2:A1:DE:DB:42:95:15:A7:77:2A:A9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       09C2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7EzhjIdVcz5lsqHe20KVFad3Kqk.roa
Signing time:             Sun 30 Jun 2024 01:40:24 +0000
ROA not before:           Sun 30 Jun 2024 01:40:24 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        110.161.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2498 (0x9c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:40:24 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=EC4CE18C8755733E65B2A1DEDB429515A7772AA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:6c:d3:b8:a9:04:5b:df:d9:d0:d6:53:36:
                    b0:a3:a2:4d:6c:c6:9e:55:59:48:38:b7:cf:bf:3d:
                    d8:cf:17:95:e6:08:8f:7b:cf:9c:76:d2:6e:ff:6e:
                    72:a0:34:e0:a8:a4:49:32:d1:2f:ec:df:39:7b:e9:
                    52:6a:f7:3b:c0:bf:18:c7:7e:bc:b3:11:37:ba:f7:
                    5c:c8:62:f8:c3:0d:d1:bd:a1:72:33:cf:83:14:7e:
                    e5:c8:f1:c3:14:0d:42:46:26:6f:f6:91:5c:ee:96:
                    73:21:17:f1:dc:a1:93:58:7a:85:8b:09:ff:bb:89:
                    cb:16:c0:fb:93:20:4e:fd:61:b5:a1:1f:be:c2:93:
                    12:78:41:48:b8:4a:71:e5:c1:2b:ab:57:fa:1d:a3:
                    16:c4:e7:a5:c2:b6:97:f2:34:26:bb:ad:8b:f4:d3:
                    3b:f6:0e:53:51:22:d4:75:14:1e:ed:a4:0b:ea:e5:
                    15:86:86:11:d1:1a:ea:a8:03:33:f1:61:8a:25:66:
                    17:65:71:e7:4c:05:7f:29:e6:d7:05:4c:9f:8d:16:
                    09:60:66:90:ff:1b:a0:ab:ef:cb:35:9a:ae:7b:2d:
                    41:d9:c0:55:39:b3:2b:2d:06:a2:a1:1f:25:04:24:
                    ee:52:af:da:3e:a6:56:59:23:b2:42:c2:cf:7a:7f:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4C:E1:8C:87:55:73:3E:65:B2:A1:DE:DB:42:95:15:A7:77:2A:A9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7EzhjIdVcz5lsqHe20KVFad3Kqk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         28:94:0b:e2:fd:3b:e2:52:55:52:e1:a6:2e:1e:11:af:36:ed:
         05:75:9b:c9:6a:34:97:2d:55:d7:5f:b9:d2:0d:a0:fe:64:37:
         6b:5b:ea:33:f1:cd:7d:6f:df:4d:94:5d:5d:40:c0:d4:ee:d5:
         f5:d8:b0:91:e1:1f:88:93:9b:3a:08:0c:17:11:25:99:66:cd:
         4d:47:76:bd:8b:8e:6b:24:7a:da:17:c7:91:32:32:15:6b:9d:
         51:51:f4:6c:a9:71:86:9b:28:6b:3f:1f:47:5f:cf:dd:dd:35:
         f4:f6:a8:ca:22:4b:7a:90:b2:b7:e0:a0:ab:aa:69:8e:34:9b:
         b2:34:d7:d5:17:fa:21:41:d4:a2:69:ee:30:5e:c6:0c:74:a7:
         ac:90:a0:76:c1:8b:b6:23:a9:01:82:97:45:19:c8:29:e4:ee:
         e9:bc:cd:eb:72:45:3c:61:b1:d2:d2:ee:c8:03:b1:ec:55:d9:
         8d:57:cb:b1:f4:8c:dd:c5:c8:5f:8e:74:46:93:59:2b:7f:e0:
         a3:f1:6a:cf:02:8c:cd:07:2c:d9:1e:0d:4c:1d:90:2b:3a:d2:
         44:9e:38:ce:86:cb:79:9d:4e:61:bd:6b:3e:7c:67:c8:cf:10:
         75:00:94:44:4e:10:70:5c:54:cf:a9:51:9b:f7:28:44:ca:c7:
         35:16:c5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:09 2024 by rpki-client on console-fra.rpki-client.org