Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7O7-NlW8QcMDBXlGYdZMkPojwTw.roa
File:                     7O7-NlW8QcMDBXlGYdZMkPojwTw.roa (raw, json)
Hash identifier:          dNME4I7LGpmnsnjApcpp6LDiossN/hiy9AKtVuJYVrw=
Subject key identifier:   EC:EE:FE:36:55:BC:41:C3:03:05:79:46:61:D6:4C:90:FA:23:C1:3C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       09EA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7O7-NlW8QcMDBXlGYdZMkPojwTw.roa
Signing time:             Sun 30 Jun 2024 01:42:22 +0000
ROA not before:           Sun 30 Jun 2024 01:42:22 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        220.210.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2538 (0x9ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:42:22 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=ECEEFE3655BC41C30305794661D64C90FA23C13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:41:23:0a:65:92:7f:08:bb:42:8c:03:04:ed:
                    ab:b1:12:cf:c8:af:47:31:79:27:4a:bf:1a:7c:4b:
                    4d:ef:8a:9f:60:37:f1:68:5a:0f:90:48:ac:14:ed:
                    24:03:57:24:7f:cf:28:14:b0:48:c5:02:44:20:33:
                    e4:52:6d:d2:f0:d6:09:01:40:50:5a:f5:cd:2c:55:
                    c4:9a:ef:44:c8:29:17:3c:42:91:ec:1e:5d:f0:4d:
                    c2:61:6e:42:89:6b:4c:6e:27:88:49:ea:45:37:2d:
                    81:9e:10:b0:b2:de:4e:3f:8b:71:e9:f0:92:20:6d:
                    37:1a:06:7c:e2:20:8f:53:40:7f:f5:ff:73:e9:99:
                    b9:d4:e3:f9:3e:bf:3d:01:04:49:46:56:5d:a9:aa:
                    d0:68:3c:c7:cf:98:b6:b4:47:f2:a2:5e:08:32:ca:
                    5c:4e:25:70:10:e8:37:af:4b:f9:34:d1:51:02:57:
                    96:27:b0:bd:b4:72:5a:4f:55:cf:6e:c8:eb:72:78:
                    e6:53:32:34:18:cf:ad:18:21:46:6b:6a:6b:f5:55:
                    ff:f2:b5:d5:53:60:94:61:35:89:c8:24:17:24:1f:
                    f2:6e:52:53:27:fe:a9:be:80:1f:8e:c5:8d:b4:07:
                    bb:1f:f9:1a:1c:28:c4:05:2f:e0:f0:82:67:4e:85:
                    05:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EE:FE:36:55:BC:41:C3:03:05:79:46:61:D6:4C:90:FA:23:C1:3C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7O7-NlW8QcMDBXlGYdZMkPojwTw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:33:f8:d8:4c:8e:92:77:e9:2f:fa:0a:37:37:ba:8e:16:c7:
         87:a2:92:dd:c8:ea:48:99:58:8d:4f:12:77:b7:77:50:d2:4d:
         b7:31:53:69:63:e1:7d:bd:37:45:24:c7:53:d9:34:0c:19:0a:
         22:7c:4f:d8:ba:8a:71:6d:53:5b:25:0c:c6:bf:41:d3:32:5f:
         6b:98:e7:d8:50:a1:27:e2:3e:c7:9e:95:2d:dc:9f:53:58:53:
         cf:e2:de:0e:f6:66:2a:95:c3:6e:ee:b2:80:b9:40:81:db:17:
         ae:84:a5:1b:d0:d2:2f:dd:e4:73:f6:63:b0:66:64:4c:f9:7d:
         1b:b5:aa:16:0b:fb:8e:88:c3:33:8f:ba:70:78:e7:63:84:22:
         a0:64:c1:ae:9c:6b:95:ed:87:c3:e4:ae:75:07:20:61:16:d6:
         4c:7a:60:05:dc:97:d3:2b:2e:2b:f2:fb:a9:10:85:54:e6:04:
         e8:4d:1d:0c:7b:76:fa:26:33:6f:71:f3:25:a4:d3:6f:a5:a8:
         69:51:60:a5:2a:ea:87:e6:81:85:dd:87:a6:b1:ef:4f:ac:a2:
         42:91:9d:55:48:10:e2:0e:36:35:1a:61:1c:4b:2d:b0:a7:02:
         75:ed:f2:bf:fa:f7:c0:d7:a3:b1:82:b1:0a:65:ad:08:a2:65:
         87:59:d1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:11 2025 by rpki-client