Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AQhgeVb0c3SQJjSJmx1DwzS5u2c.roa
File:                     AQhgeVb0c3SQJjSJmx1DwzS5u2c.roa (raw, json)
Hash identifier:          cjwupMq/Qy5qi5k2269r5mHl9S+ogPQ0/x1W/GcN6MQ=
Subject key identifier:   01:08:60:79:56:F4:73:74:90:26:34:89:9B:1D:43:C3:34:B9:BB:67
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0695
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AQhgeVb0c3SQJjSJmx1DwzS5u2c.roa
Signing time:             Tue 30 Apr 2024 01:43:09 +0000
ROA not before:           Tue 30 Apr 2024 01:43:09 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:43:09 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=0108607956F47374902634899B1D43C334B9BB67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8a:c2:4f:d5:f1:5b:f1:8e:ca:0a:e6:ee:a9:
                    1b:c7:33:82:fe:64:5e:e8:45:bd:3b:08:c6:90:08:
                    c5:b2:b0:fc:d6:bd:dd:c4:94:67:05:e2:6a:7e:f4:
                    b6:4c:63:c1:bb:04:a2:ee:ef:7c:d1:21:64:0d:04:
                    2a:fb:66:99:58:ac:a2:bd:df:3a:2b:b1:9f:41:71:
                    39:65:35:04:f7:71:50:a7:25:d7:70:62:9d:0f:d9:
                    a6:08:6d:9e:23:d5:70:15:f1:cb:d2:3c:c0:68:3e:
                    5e:b9:1b:6e:eb:17:09:f7:44:79:d3:f4:fe:30:12:
                    79:f0:c2:4c:e1:28:b9:72:c7:05:91:1c:e2:5a:cc:
                    ee:e3:d8:34:f6:0f:16:55:ac:cc:61:5e:bf:0d:9e:
                    d3:f2:f7:46:7d:3b:01:24:0e:75:4e:ec:97:7d:02:
                    32:6b:ed:b6:2c:58:e2:73:72:68:a5:9b:94:f5:90:
                    f2:22:28:59:e2:74:af:a9:e9:84:aa:d8:62:42:96:
                    ff:92:da:35:d1:83:05:b8:7e:2c:7a:aa:32:5c:39:
                    5f:14:b5:36:30:97:cf:d3:52:bc:ec:e6:c5:79:f2:
                    45:53:93:1c:42:1f:fd:ab:19:8c:f7:51:40:28:24:
                    86:14:48:11:f9:72:1b:7f:98:31:80:9a:07:81:ad:
                    76:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:08:60:79:56:F4:73:74:90:26:34:89:9B:1D:43:C3:34:B9:BB:67
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AQhgeVb0c3SQJjSJmx1DwzS5u2c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:2e:ef:ef:fa:c6:d0:ab:2b:5e:5d:ab:8d:a7:f1:37:09:24:
         40:d5:79:72:62:f8:13:68:7c:0b:13:9b:10:be:7c:17:09:e4:
         44:7c:73:e2:6a:80:1f:01:bb:b5:94:60:ca:bd:2a:07:f1:4e:
         29:5a:a0:47:57:40:d1:3e:37:70:21:06:dd:64:73:6b:0d:2d:
         bb:b1:a0:25:d9:cd:63:ec:30:83:eb:10:0a:6f:e3:e8:f9:b7:
         66:d7:de:2f:d4:9f:a3:9d:98:db:ca:0f:ee:38:71:4d:4e:2f:
         ae:b2:73:6c:ed:84:c6:54:2c:dd:cc:d5:2d:29:0a:da:a1:03:
         2e:9c:fa:cd:0c:2a:0b:d6:2b:8c:99:03:22:24:7d:d7:6f:e7:
         db:cf:c3:21:90:42:1f:fa:81:9d:cd:49:6d:88:96:97:f6:56:
         e9:f3:59:0e:de:6b:5c:ad:60:2a:01:f4:e6:f7:41:62:e1:24:
         66:3c:a8:e3:1a:80:e0:ce:af:e3:23:44:79:67:2f:e0:9f:38:
         75:05:34:3d:ae:f4:c4:73:81:2b:95:f1:da:ca:55:cb:a0:40:
         80:fc:6e:44:a6:b4:42:c0:68:d5:fc:15:d8:9f:72:67:1b:fd:
         20:b8:6d:bb:a8:4b:79:97:b1:71:66:7c:ba:c6:69:a6:6e:43:
         91:e3:40:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:59 2024 by rpki-client on console-fra.rpki-client.org