Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9EEfzQ0lEaUbaw2Bgtyg9_3bmuA.roa
File:                     9EEfzQ0lEaUbaw2Bgtyg9_3bmuA.roa (raw, json)
Hash identifier:          5mBowFm9C9Acn8ciY4oSoliScU3v0gCCZajbXDYU8iw=
Subject key identifier:   F4:41:1F:CD:0D:25:11:A5:1B:6B:0D:81:82:DC:A0:F7:FD:DB:9A:E0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0519
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9EEfzQ0lEaUbaw2Bgtyg9_3bmuA.roa
Signing time:             Thu 27 Jul 2023 16:54:05 +0000
ROA not before:           Thu 27 Jul 2023 16:54:05 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        220.159.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1305 (0x519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:54:05 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=F4411FCD0D2511A51B6B0D8182DCA0F7FDDB9AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6c:c2:b4:48:ad:55:a6:a5:3e:e2:75:c1:e4:
                    05:c4:d4:d2:4c:9d:a6:96:34:e7:d5:de:04:cd:33:
                    f7:cd:cd:b4:cd:99:0b:58:85:29:aa:95:38:c0:07:
                    c0:55:92:41:69:19:9e:fe:96:93:49:25:47:86:42:
                    59:71:a9:0c:46:0d:5d:e4:cc:a4:85:06:53:ba:3f:
                    e1:a2:18:79:45:00:1c:da:5f:79:29:91:17:35:bd:
                    5a:62:cc:ba:7d:ce:94:3a:99:e9:9f:87:67:74:9f:
                    2d:d8:46:68:70:75:cf:ef:04:e3:b5:59:2b:f1:b0:
                    1e:f3:99:67:40:5a:35:52:01:6d:77:a9:d8:03:e8:
                    f6:91:bb:7e:c0:73:23:56:27:f3:92:91:9d:f7:5c:
                    ee:ea:1c:fd:69:16:1c:48:d7:f8:90:77:0f:a2:80:
                    ae:4b:12:fb:6d:8f:8f:f1:8a:0a:88:b2:d4:d6:a8:
                    1c:d8:c1:fc:03:28:5c:20:2e:09:3b:e3:62:9b:8f:
                    71:53:4f:d4:4f:69:dd:0f:4e:c6:b6:2d:a0:2a:c8:
                    6a:9e:d3:a0:50:e0:e0:d0:de:27:09:0c:9c:1c:f1:
                    08:be:23:b7:c6:e4:01:46:74:94:f0:9c:91:79:7e:
                    71:c5:8f:86:dc:82:42:7a:82:12:9a:c0:43:10:0e:
                    f1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:41:1F:CD:0D:25:11:A5:1B:6B:0D:81:82:DC:A0:F7:FD:DB:9A:E0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9EEfzQ0lEaUbaw2Bgtyg9_3bmuA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.159.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:26:78:61:60:24:18:62:4b:7a:e5:4d:44:b2:db:25:be:33:
         58:4f:cc:e7:dc:af:ce:48:e6:df:23:0f:01:4e:db:53:d1:e0:
         7b:7f:cb:e0:48:9f:7c:b7:69:d5:d8:a0:61:6c:48:37:63:c0:
         68:dc:83:84:59:8c:10:32:23:14:a4:35:76:d4:8f:3b:ec:1d:
         58:e6:ba:1e:14:07:3c:dc:c3:5a:65:96:c5:76:8f:44:ac:50:
         df:4a:e6:f4:cb:8e:49:50:76:2f:1f:39:f8:fc:eb:36:a2:d5:
         5e:24:1c:34:1a:b5:af:9a:19:8c:33:1d:15:67:9a:7e:78:be:
         c3:2f:2e:f4:8a:35:31:70:8f:e8:58:e2:35:4e:9c:17:9b:45:
         4e:c1:15:a1:35:73:40:37:d3:d2:88:ee:2b:ee:af:be:24:15:
         75:d6:f5:f6:f1:b5:b6:73:67:26:2e:3a:ca:23:65:f7:0b:1e:
         ac:3e:79:7e:a4:d0:e8:ae:ac:1c:a7:95:26:0e:e9:e8:45:1d:
         7f:1c:09:a4:2d:65:70:d4:9e:1f:d1:fd:43:0c:ed:f0:f8:9b:
         16:5e:3b:47:cb:db:da:7e:4f:ee:5d:2f:a9:49:f9:f7:3b:77:
         67:08:47:d4:bb:3b:0c:81:c0:fb:ab:a4:bf:f7:2f:52:8a:c4:
         cd:f2:8c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org