Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Dtvby1R5a9Wd8xjUVpUniwlgyyw.roa
File:                     Dtvby1R5a9Wd8xjUVpUniwlgyyw.roa (raw, json)
Hash identifier:          RbbrMENsS3Ru8UwAev9Z8trSBkei/+WAWsMfTH+McFo=
Subject key identifier:   0E:DB:DB:CB:54:79:6B:D5:9D:F3:18:D4:56:95:27:8B:09:60:CB:2C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0670
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Dtvby1R5a9Wd8xjUVpUniwlgyyw.roa
Signing time:             Tue 30 Apr 2024 01:34:58 +0000
ROA not before:           Tue 30 Apr 2024 01:34:58 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1648 (0x670)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:34:58 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=0EDBDBCB54796BD59DF318D45695278B0960CB2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cf:93:48:ae:04:91:d2:34:29:eb:1a:4e:32:
                    88:fc:b5:ce:3d:5d:e2:df:6d:44:97:53:7f:66:14:
                    cc:97:bd:0a:7f:c5:9e:a3:c0:d4:29:ce:3e:4d:a5:
                    54:fa:41:34:9c:2c:4c:94:75:6b:d4:db:c1:40:02:
                    4e:91:9b:06:21:65:8b:81:8d:30:24:51:8c:55:85:
                    3c:bc:b3:5c:fd:03:82:ff:dd:01:47:59:89:f2:fd:
                    2a:72:1f:75:35:cf:48:89:98:7c:52:06:3b:38:2d:
                    7d:90:47:01:5d:28:b1:a2:79:bf:ec:a2:5b:c5:47:
                    61:e0:ac:cb:12:68:fe:fb:43:83:1f:07:98:03:3b:
                    61:25:6b:e3:1b:bf:94:b8:2d:38:3e:f2:bb:15:00:
                    ef:9b:a1:4e:82:6d:73:6d:7b:1d:8c:e3:51:84:38:
                    54:ad:8c:7c:cc:d3:a8:fd:36:40:7d:4a:33:35:e3:
                    f1:34:78:81:3f:b8:19:99:1b:8d:71:d4:25:c2:af:
                    93:30:1e:2a:fe:93:b3:90:c3:47:cd:69:46:07:52:
                    84:4b:71:c2:da:14:c8:78:67:0c:ef:ee:17:bc:88:
                    0b:de:6c:f6:e2:43:c4:33:26:4b:50:64:3a:3f:b3:
                    0c:f4:d6:fb:79:68:13:1c:9f:b3:0f:22:4d:02:28:
                    94:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DB:DB:CB:54:79:6B:D5:9D:F3:18:D4:56:95:27:8B:09:60:CB:2C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Dtvby1R5a9Wd8xjUVpUniwlgyyw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:c4:de:59:ff:98:1a:dd:56:91:fc:b6:c5:65:7b:81:11:cb:
         86:db:df:a2:a1:ef:a6:53:30:ff:ba:fc:db:af:c0:63:25:a3:
         3a:a2:5e:6f:cc:49:e8:c7:3b:24:2a:2d:67:95:7b:57:0e:77:
         7d:70:a4:ec:84:2a:b2:87:f7:08:ad:cd:cb:d9:a6:07:4a:99:
         97:04:3f:3d:34:28:61:50:ce:8d:50:24:f3:5f:17:99:4e:74:
         8b:18:aa:9d:0c:b2:04:7c:7c:bf:c7:35:35:46:8e:95:1c:d6:
         80:a9:ca:c1:f2:69:e8:9a:eb:bf:39:c7:13:28:61:cd:cb:bf:
         5d:ae:23:64:6f:c3:cf:d9:e6:be:71:e8:15:0b:3b:df:05:4a:
         95:66:f1:b4:15:44:e0:05:7f:10:4f:a6:36:33:89:f3:eb:3a:
         aa:10:b2:ba:6f:6a:c0:2f:90:fc:28:f0:0f:b4:d4:46:90:79:
         c6:35:5c:c0:a3:39:0b:93:39:28:6e:cc:71:ef:76:72:09:ad:
         31:1a:f2:ec:44:1b:28:5c:51:51:64:9b:ad:0a:09:cc:ec:92:
         b0:aa:1c:7d:e6:31:f8:af:15:3c:e1:44:b6:f0:5c:a7:6b:1b:
         5c:6e:a0:99:e1:c2:f0:ce:17:18:86:dc:c4:9d:e9:0d:74:73:
         71:bf:0e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org