Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9q5_95f6BWtIbKO0lI1kIo8rcQQ.roa
File:                     9q5_95f6BWtIbKO0lI1kIo8rcQQ.roa (raw, json)
Hash identifier:          GkSH4y27O2oTTiKh3DrJWZvEAgb8cYE45VkaHCCJz+I=
Subject key identifier:   F6:AE:7F:F7:97:FA:05:6B:48:6C:A3:B4:94:8D:64:22:8F:2B:71:04
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       094B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9q5_95f6BWtIbKO0lI1kIo8rcQQ.roa
Signing time:             Sun 30 Jun 2024 01:29:34 +0000
ROA not before:           Sun 30 Jun 2024 01:29:34 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        110.158.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2379 (0x94b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:29:34 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=F6AE7FF797FA056B486CA3B4948D64228F2B7104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:d2:b4:d1:65:11:c9:66:ef:91:eb:55:a3:
                    73:0a:ee:ae:69:e4:aa:24:47:37:02:77:67:75:16:
                    90:ef:9c:c8:07:8a:78:14:f9:10:89:37:cc:a0:b6:
                    e3:36:8e:35:1f:71:c1:fe:c7:64:e8:07:dd:22:b5:
                    29:f2:cf:d4:d9:2e:e3:58:78:de:ec:48:70:40:d4:
                    23:1f:d7:9c:f1:77:a8:a5:91:73:10:fd:c0:aa:23:
                    14:3f:a7:07:96:33:48:c0:1c:cd:5d:06:76:7b:4e:
                    d9:50:15:77:46:40:e6:88:e4:5d:10:e6:11:60:f0:
                    c4:44:b5:a3:15:66:92:29:d2:55:b4:aa:6f:2a:4f:
                    39:a6:85:a8:b5:c0:3d:9a:c5:51:85:ab:06:d3:81:
                    01:74:4e:c3:33:f7:9d:00:9f:9f:23:9c:83:60:51:
                    e4:d8:2b:d7:a5:ca:55:4f:c4:49:a0:28:7b:a7:77:
                    f1:00:82:ed:78:45:d2:bb:0a:51:f4:8d:21:3f:77:
                    62:02:38:0f:b0:71:c5:af:03:60:8e:a9:82:f6:5d:
                    1e:96:57:ba:40:48:da:b2:ae:99:0b:2e:c6:a2:84:
                    f2:51:76:42:e3:0f:e1:43:ca:53:85:3d:8e:d5:8b:
                    f4:a5:29:e3:4c:24:80:bf:98:f6:30:5c:e5:18:f9:
                    0e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AE:7F:F7:97:FA:05:6B:48:6C:A3:B4:94:8D:64:22:8F:2B:71:04
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9q5_95f6BWtIbKO0lI1kIo8rcQQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:69:fd:49:3a:19:ff:05:68:a4:b9:73:47:3e:8d:ef:f1:2f:
         2e:07:50:7e:cf:a0:d9:7a:b1:71:f1:27:8b:56:99:18:2f:da:
         3b:1a:bd:c8:91:be:ae:54:89:57:c8:07:5c:e6:6e:c8:33:a3:
         8c:ea:0b:c6:e0:83:be:cf:e4:f2:fe:eb:fb:3a:0e:f1:fe:5c:
         4c:61:c8:a1:65:5e:03:1f:d5:b2:5b:d8:59:41:6d:6b:de:3b:
         54:33:ea:1b:fd:88:67:7e:11:9c:21:38:10:04:8c:2c:b6:f6:
         63:d0:2d:f8:83:ab:1e:87:c0:b6:f7:2a:4f:0c:67:50:c7:25:
         05:6a:ba:4d:d6:7f:6f:5a:b1:05:b7:df:38:e4:43:6f:95:a0:
         63:6b:97:9c:f2:23:8c:a7:dd:75:a2:4c:9b:c8:dd:13:b2:53:
         4a:b3:9c:bc:0b:ed:85:ec:e7:93:03:38:bb:55:0a:f2:fc:33:
         50:99:56:da:b3:46:74:2a:da:cd:b3:02:1f:f3:c5:ee:2f:47:
         09:6f:9b:66:04:14:cf:0d:79:75:f9:87:84:9d:86:af:7f:b6:
         5e:ac:e4:95:bf:c3:63:03:16:2b:25:d4:e4:cb:59:f5:7e:c6:
         6e:b4:8b:bb:4a:95:55:7e:7c:98:8e:df:27:ce:24:96:93:07:
         8f:ce:d0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:46 2025 by rpki-client