Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DPvuT3RfHF-_pJaIzosTQcQCh2A.roa
File:                     DPvuT3RfHF-_pJaIzosTQcQCh2A.roa (raw, json)
Hash identifier:          5/fnR8AL6UbKz4lfZqYUUZwK1hXrNrNQD1hjdCBKfeY=
Subject key identifier:   0C:FB:EE:4F:74:5F:1C:5F:BF:A4:96:88:CE:8B:13:41:C4:02:87:60
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       09A6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DPvuT3RfHF-_pJaIzosTQcQCh2A.roa
Signing time:             Sun 30 Jun 2024 01:38:16 +0000
ROA not before:           Sun 30 Jun 2024 01:38:16 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        220.159.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2470 (0x9a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:38:16 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=0CFBEE4F745F1C5FBFA49688CE8B1341C4028760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:f0:ab:02:7f:3f:0f:f3:ba:db:29:2e:1a:
                    7c:12:1f:a7:1e:a0:cd:98:2a:f4:d8:11:e4:78:cc:
                    67:17:5a:8f:f9:e3:76:01:c7:63:27:96:c0:c8:44:
                    12:56:17:99:ce:a2:2d:4b:4b:86:4c:80:15:6f:97:
                    0e:f8:57:10:56:e3:74:f1:a7:d8:54:a0:5f:18:b8:
                    f9:28:d2:f9:73:be:09:ae:c2:0f:e8:9b:95:2c:18:
                    27:ce:0a:08:c6:37:7a:85:86:9f:1b:93:a8:27:a7:
                    83:b3:a1:27:7b:42:c3:9e:7f:a3:30:3e:c6:f1:35:
                    5b:a0:ab:2f:17:d6:6b:b7:28:97:dd:29:8e:ba:11:
                    b6:9c:e2:82:f8:43:e4:fb:a7:dc:73:8b:9e:01:85:
                    a3:97:34:51:dc:e7:6f:8b:39:cc:7f:1b:5f:42:b1:
                    82:13:e8:40:02:df:43:66:ea:67:c1:7c:be:c1:80:
                    8b:31:dc:f4:43:f0:9c:06:2c:8f:ef:3b:ed:75:5e:
                    a8:89:3e:74:82:28:e4:6d:9a:d4:e5:06:4b:46:31:
                    2d:0d:b0:69:42:74:c8:e9:92:88:0b:67:a2:ad:55:
                    d8:c7:96:65:a4:ef:31:bd:22:76:10:49:8f:84:ac:
                    29:42:5f:f5:25:bf:9a:33:b4:2e:ae:a1:5d:d1:c0:
                    39:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FB:EE:4F:74:5F:1C:5F:BF:A4:96:88:CE:8B:13:41:C4:02:87:60
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DPvuT3RfHF-_pJaIzosTQcQCh2A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.159.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:61:16:b5:05:1e:5e:6e:99:ed:92:3c:95:50:47:08:7e:24:
         da:6e:2e:e0:68:59:96:1d:5a:db:7c:9a:8b:3a:c7:7f:8d:b0:
         87:bb:29:01:10:03:56:c4:f4:d3:47:92:1d:84:f5:8a:06:78:
         7f:7f:54:a2:47:7d:0a:93:75:67:d9:0b:f0:14:48:55:32:5d:
         eb:75:70:e6:59:0d:3f:24:92:96:3f:06:fd:6e:e0:fc:02:eb:
         9a:8c:46:3c:3d:6f:fc:bb:72:3b:8c:1c:f2:e8:0e:89:9a:01:
         a1:fc:9f:35:1b:ac:20:2e:73:2c:ec:d2:da:85:ee:12:16:81:
         df:f3:a1:b2:60:d0:a3:8b:76:d1:7f:ad:fb:ec:87:da:6c:ad:
         78:46:1b:10:af:a8:6d:74:13:d4:19:c8:65:3e:13:87:63:5e:
         ba:2d:a6:9b:aa:a0:a3:97:df:f7:06:73:43:b1:5d:51:fe:b9:
         4b:3f:c4:a4:b8:aa:e8:ff:3c:b9:d9:06:a3:10:be:d6:95:02:
         39:e3:38:90:3c:55:7c:21:13:a3:31:07:c8:19:26:ab:e9:ec:
         f0:b4:de:eb:81:37:34:be:99:65:5f:d1:e4:79:9a:97:ef:6d:
         ed:2a:90:30:45:13:0d:71:b6:3f:22:08:f7:26:0e:d2:d3:0f:
         2d:b2:39:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:09 2024 by rpki-client on console-fra.rpki-client.org