Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DDATJ2zea203hTu31dvfY_5Khfc.roa
File:                     DDATJ2zea203hTu31dvfY_5Khfc.roa (raw, json)
Hash identifier:          XG9cXr8KWqJ4kT6L+j3aLrnlU02jcynjunrZHzCk3xI=
Subject key identifier:   0C:30:13:27:6C:DE:6B:6D:37:85:3B:B7:D5:DB:DF:63:FE:4A:85:F7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05AB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DDATJ2zea203hTu31dvfY_5Khfc.roa
Signing time:             Thu 27 Jul 2023 17:00:21 +0000
ROA not before:           Thu 27 Jul 2023 17:00:21 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        110.162.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1451 (0x5ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 17:00:21 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=0C3013276CDE6B6D37853BB7D5DBDF63FE4A85F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:7a:f8:55:12:1b:28:88:9e:ea:1e:73:ea:
                    bc:4d:70:29:a5:f5:c7:60:ff:2b:56:74:31:54:48:
                    e1:ac:52:ac:45:a5:2d:e4:32:21:eb:1f:68:96:3d:
                    d4:92:2e:ac:77:43:5f:bd:fd:23:1d:0b:28:0e:41:
                    57:f4:1b:85:4b:b5:7d:42:9d:6a:39:1d:ea:28:fc:
                    f8:93:13:71:cd:9c:59:e1:31:52:39:c3:d4:0d:87:
                    dc:e9:2c:2a:c8:f7:5c:b0:e3:0d:a1:d9:f8:79:e8:
                    7a:e3:a8:bd:09:f7:f9:e2:1f:e0:b2:2d:a7:89:37:
                    6b:f4:93:4c:7f:92:c1:6b:bb:e3:d5:54:77:9d:95:
                    ff:ba:05:27:47:41:85:a0:6e:e6:35:6c:61:a0:17:
                    5a:e1:c1:d6:e8:81:57:dc:58:fe:9e:34:fa:fd:38:
                    51:71:c4:be:6f:dd:cf:65:bc:1c:c1:c9:bf:85:dc:
                    3d:86:11:ab:47:f0:8f:2b:a1:b7:5b:17:7e:44:7e:
                    75:78:22:e5:55:e3:b5:9e:af:45:a9:60:c7:45:65:
                    1c:12:b1:da:75:f4:e0:6e:49:c8:8a:d3:04:9e:0a:
                    01:85:bb:04:91:ff:68:f3:06:31:df:c1:bd:8a:53:
                    4c:f2:8e:e0:7b:f9:88:4b:43:cf:39:a5:ca:e5:c4:
                    21:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:30:13:27:6C:DE:6B:6D:37:85:3B:B7:D5:DB:DF:63:FE:4A:85:F7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DDATJ2zea203hTu31dvfY_5Khfc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.162.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5a:c4:34:5e:f6:db:e7:25:8a:b3:94:ca:29:91:ec:d0:eb:55:
         a1:7a:3f:77:c8:f1:7a:44:62:ab:54:e8:ec:c2:d1:81:60:02:
         e1:1c:7e:ac:af:b0:75:18:68:52:9a:76:25:0f:f2:b9:9e:70:
         3a:83:4f:44:65:d2:7e:79:6b:98:c5:69:43:56:0d:6f:10:c8:
         0c:15:4e:f4:0d:fa:d2:30:f2:41:53:a3:4a:20:4f:17:5f:0b:
         09:48:7a:d4:6c:5d:d9:a1:04:34:fd:6a:01:7a:39:c2:c0:dc:
         ce:37:b6:66:db:79:ba:a8:23:d1:39:76:1e:24:bd:8f:66:56:
         4b:f2:e3:40:e5:1c:28:28:b6:ad:87:19:9e:be:98:2c:e9:a3:
         44:da:d8:93:ee:a9:6d:09:77:01:22:b3:38:43:cc:02:c3:72:
         85:27:c4:4f:6f:4a:25:09:b5:3b:50:1e:24:f1:8b:b0:63:41:
         22:05:ee:31:90:3d:06:5d:57:64:63:7f:e4:44:43:28:2f:fd:
         15:c9:79:54:8c:a1:ea:5e:37:cf:dd:f0:5e:65:86:dc:ee:a2:
         7a:e1:f7:6b:d0:e2:c4:2e:41:d6:f1:a3:a4:d4:c3:3c:74:9b:
         39:18:77:2f:2b:2b:be:d3:48:74:0e:e0:85:1e:54:0d:20:59:
         6e:d7:02:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:21 2024 by rpki-client on console-fra.rpki-client.org