Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7UZB03Bu_rv9-s8XVh1vretOzf4.roa
File:                     7UZB03Bu_rv9-s8XVh1vretOzf4.roa (raw, json)
Hash identifier:          UHYbS/KTbvvl0BnqIOhz2QVcYZ8ftpl8CnohKL7XHbc=
Subject key identifier:   ED:46:41:D3:70:6E:FE:BB:FD:FA:CF:17:56:1D:6F:AD:EB:4E:CD:FE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       093E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7UZB03Bu_rv9-s8XVh1vretOzf4.roa
Signing time:             Sun 30 Jun 2024 01:29:28 +0000
ROA not before:           Sun 30 Jun 2024 01:29:28 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        219.114.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2366 (0x93e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:29:28 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=ED4641D3706EFEBBFDFACF17561D6FADEB4ECDFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:e8:0f:20:cd:4d:bf:0c:31:30:34:de:4e:
                    05:9e:4e:26:ef:6e:90:23:8f:1f:94:e6:19:74:1a:
                    3d:2c:1c:2e:48:52:59:0f:ff:f4:91:7a:80:4c:a5:
                    c7:e7:83:f9:f4:a3:93:ed:50:74:b8:ef:6c:68:1e:
                    b0:e3:6b:5e:09:a0:c7:90:84:8c:4e:48:26:fb:70:
                    80:c1:c1:ef:59:3f:ce:5d:a0:e7:62:5a:9c:2c:20:
                    d4:32:db:a8:39:41:4f:ac:b9:61:87:89:f6:ed:b5:
                    f3:be:9c:5e:74:1a:4d:cb:ec:61:cc:d1:4e:f5:00:
                    b5:79:b3:71:28:15:32:a4:91:03:91:c0:27:36:70:
                    80:ae:9c:aa:fc:98:df:c2:2a:9b:08:8a:ea:21:1f:
                    a9:d2:e6:cc:89:33:ce:86:f1:ee:ac:d1:cb:42:39:
                    25:59:58:8e:ce:3a:89:45:d7:74:8c:2c:a5:b8:98:
                    23:e8:9b:08:e3:0a:0c:ec:18:f1:33:fb:95:05:d2:
                    1b:1a:0d:a2:15:34:06:ae:c3:ee:09:30:21:d8:2e:
                    89:24:1e:9f:dd:8c:c0:bd:7f:fe:90:c5:b5:5f:c0:
                    a7:08:93:00:53:5a:b3:54:5d:9c:d6:61:7a:84:0f:
                    69:2f:f2:dc:3e:8c:4e:ac:a6:8a:9c:60:50:a0:76:
                    a3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:46:41:D3:70:6E:FE:BB:FD:FA:CF:17:56:1D:6F:AD:EB:4E:CD:FE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7UZB03Bu_rv9-s8XVh1vretOzf4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e7:01:ad:e1:37:46:3b:2d:94:a2:30:fd:fe:2d:6a:c4:2c:d9:
         2c:9a:02:99:99:06:aa:2d:d5:e3:23:18:62:12:12:ff:dc:8a:
         65:ef:ec:76:33:72:1a:17:a3:3e:92:05:50:d8:3d:0b:22:bf:
         11:e2:20:d5:55:b1:2e:d2:ce:b3:a2:65:a0:79:89:3e:69:f7:
         e1:51:54:9e:b1:92:5f:cb:5d:9e:47:02:25:48:8f:bf:50:4e:
         6c:b9:7e:25:89:8e:30:f2:04:3b:56:48:57:e1:53:c0:30:b1:
         2c:df:30:91:31:74:1a:04:c2:8f:e0:c7:89:ac:af:87:f6:1c:
         b7:7b:9f:0c:56:1a:8c:5e:b2:42:bd:6c:f6:1c:7e:3a:b3:e2:
         60:89:6a:b8:37:2c:02:84:a3:8e:f2:2c:02:cf:6d:82:ab:ff:
         b1:88:fe:1c:4d:ad:4c:ef:a5:6d:0a:5a:85:28:ca:d1:cb:d5:
         26:54:e5:a0:ef:75:c4:03:ae:59:04:d4:af:90:6e:96:12:4b:
         2b:20:56:b1:26:ab:15:56:f9:43:21:46:de:f4:8e:53:df:23:
         50:82:d4:7e:07:47:bb:e0:07:c3:4f:de:63:e1:80:d4:f2:47:
         d1:e6:17:59:99:1e:ed:e3:cb:b4:fe:26:4a:60:e0:c1:43:07:
         68:2b:0b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:39 2024 by rpki-client on console-ams.rpki-client.org