Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/C29T34xwQfekKa65u66gTyQWeQg.roa
File:                     C29T34xwQfekKa65u66gTyQWeQg.roa (raw, json)
Hash identifier:          8mc4PGvYSThfhkBy9JekJ/WIOF/oPs2OFuMKp/6Z8pk=
Subject key identifier:   0B:6F:53:DF:8C:70:41:F7:A4:29:AE:B9:BB:AE:A0:4F:24:16:79:08
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A68
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/C29T34xwQfekKa65u66gTyQWeQg.roa
Signing time:             Sun 30 Jun 2024 01:50:25 +0000
ROA not before:           Sun 30 Jun 2024 01:50:25 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        110.163.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2664 (0xa68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:50:25 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=0B6F53DF8C7041F7A429AEB9BBAEA04F24167908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cb:0d:85:ec:56:48:32:f2:17:1c:2f:60:56:
                    1d:e2:bd:a9:0d:c7:4f:eb:f4:2e:97:51:4b:3a:49:
                    b7:2d:b9:f6:3a:42:15:ca:5b:61:ea:b3:4b:84:e5:
                    65:0c:f8:cd:f5:5a:33:6f:06:e4:1f:e7:04:50:9a:
                    6e:22:bc:b2:86:d2:2f:b0:34:f8:1d:bd:20:22:46:
                    2b:d4:7c:dd:9c:42:88:d4:8a:32:c6:d4:04:a3:a7:
                    44:b0:50:34:32:38:74:30:ed:55:96:2e:52:85:3e:
                    71:c9:c7:69:25:82:f3:51:31:3b:c1:53:17:8d:22:
                    a8:ca:f6:f5:43:86:f7:07:bc:be:57:0f:85:a1:fb:
                    8c:0f:5c:dc:97:9c:88:81:49:f6:14:04:3f:63:52:
                    39:39:a2:b5:6e:94:08:3f:13:f8:3b:9d:c5:a5:17:
                    a3:77:64:24:df:8c:0e:00:fe:37:d6:6e:e8:39:1b:
                    df:56:8f:a2:3d:1a:5d:fd:2e:4c:e6:c8:e5:44:89:
                    5f:c0:f2:36:30:96:7c:b7:84:a5:51:63:56:ae:54:
                    83:79:2a:3f:f6:01:9a:7e:12:be:ab:b6:48:07:20:
                    dd:fb:f6:48:f5:91:c0:42:d9:44:68:07:18:7d:7f:
                    f4:d4:2c:f8:a3:e7:2e:14:09:75:90:a2:23:8b:56:
                    e8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6F:53:DF:8C:70:41:F7:A4:29:AE:B9:BB:AE:A0:4F:24:16:79:08
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/C29T34xwQfekKa65u66gTyQWeQg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:22:57:60:45:29:88:45:d5:13:72:f0:3b:7c:09:ec:e4:58:
         f7:42:fc:42:1f:be:05:69:cf:e6:38:63:6e:93:3e:34:74:22:
         c7:88:98:05:ea:e4:ac:db:16:e6:1c:ec:b3:43:06:f1:a1:a2:
         a6:d1:c1:79:c9:2f:2f:9b:60:5a:f8:95:89:92:37:c0:74:4a:
         bc:4b:96:89:26:fe:92:e0:2c:ca:1e:19:05:fb:16:40:c0:7b:
         8f:12:6b:89:cb:59:3c:4a:db:13:87:e3:d1:ca:a6:3f:ae:73:
         fe:76:c6:ef:13:f7:7c:56:d2:9f:99:a7:76:d0:50:b3:94:8f:
         d7:92:a8:f7:90:a4:21:2c:ab:31:86:b6:49:22:ad:23:98:e4:
         6e:96:63:25:bc:dc:79:c6:96:19:0c:56:58:ec:a7:60:8a:3b:
         d8:78:53:0e:c4:f0:50:a6:71:40:5c:1d:3a:51:14:1d:4a:a0:
         62:a8:5c:a8:9d:c1:91:59:72:be:22:00:b6:8f:77:75:0b:c7:
         6e:c4:d8:3c:07:f8:1e:98:5e:76:26:7b:27:60:a1:0f:f6:88:
         0b:c6:48:db:99:00:cc:80:78:de:68:df:dc:2f:13:35:a3:b7:
         2a:8d:25:7e:f3:79:2d:fc:ff:24:f8:86:9a:62:9e:39:ec:4a:
         df:b5:8c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:14 2024 by rpki-client on console-ams.rpki-client.org