Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GHmmbyBPCb3vzTHSuFlaY-_rip8.roa
File:                     GHmmbyBPCb3vzTHSuFlaY-_rip8.roa (raw, json)
Hash identifier:          gsn03vTo6Tx2H6NVDxllaYkhHIFpF1j1Uzutv0lhRxM=
Subject key identifier:   18:79:A6:6F:20:4F:09:BD:EF:CD:31:D2:B8:59:5A:63:EF:EB:8A:9F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       09A0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GHmmbyBPCb3vzTHSuFlaY-_rip8.roa
Signing time:             Sun 30 Jun 2024 01:38:12 +0000
ROA not before:           Sun 30 Jun 2024 01:38:12 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        220.210.74.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2464 (0x9a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:38:12 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=1879A66F204F09BDEFCD31D2B8595A63EFEB8A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7a:91:5d:4a:f2:04:b3:82:46:a1:fc:14:12:
                    dd:1a:17:4c:67:c3:8f:e2:ba:03:c9:f9:19:b9:ef:
                    09:45:02:c5:3d:e9:20:60:d4:2b:0c:9d:c5:ce:fb:
                    38:76:d0:2d:76:b9:bd:93:ab:97:33:5c:59:ae:14:
                    4e:f7:2d:c7:20:ef:91:5b:a7:27:e4:19:bb:4a:fd:
                    68:3e:9f:0c:f7:3e:7a:80:71:db:29:32:f2:f6:61:
                    5c:92:68:e4:9e:88:a7:b6:97:c6:b3:3e:8c:0a:e9:
                    6b:44:f3:74:19:52:6e:99:9d:c0:23:18:ff:da:62:
                    63:ce:7a:26:f2:8d:ee:f1:54:d9:e7:dd:0b:aa:ea:
                    d9:09:c7:49:24:ef:93:48:0e:66:b2:2a:90:52:2c:
                    97:b4:ec:36:0e:b0:43:bc:3e:6d:5b:4b:fc:5c:9c:
                    8b:da:e0:d5:d3:3c:79:9d:40:d6:7b:a9:34:42:3b:
                    ee:e2:ee:fa:39:56:44:19:5f:8b:bb:a5:ae:4f:02:
                    62:af:48:90:86:cc:ec:93:79:77:a6:6a:ab:78:58:
                    bf:bb:41:3d:f6:7f:17:51:ee:b4:53:d5:88:e5:1b:
                    61:b5:13:e5:85:ac:4a:ea:c9:88:ff:00:d3:8e:60:
                    76:ac:12:9d:9d:37:9d:32:f4:1c:0d:bb:36:90:78:
                    21:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:79:A6:6F:20:4F:09:BD:EF:CD:31:D2:B8:59:5A:63:EF:EB:8A:9F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GHmmbyBPCb3vzTHSuFlaY-_rip8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:18:f4:2e:f8:9f:90:ac:63:a4:3b:f0:87:42:dc:b7:86:02:
         19:ab:5b:6f:e1:5d:21:55:f3:ad:4e:e5:0a:6a:36:46:f3:cd:
         3f:95:05:5a:f3:c9:22:fd:6c:80:fb:bd:4c:66:97:07:7d:ad:
         48:7d:a3:0e:51:f1:5e:0e:14:6f:3f:2c:ed:d2:d1:38:2e:11:
         f7:ac:14:61:7d:d8:c7:ef:e1:36:2f:d6:89:a0:49:32:23:03:
         c5:30:7c:14:ba:99:a7:1c:4b:80:6f:24:13:ef:48:00:a3:ea:
         0f:14:26:c2:2a:64:5e:7b:20:16:b8:7e:63:60:1d:1d:5b:cc:
         ed:36:79:15:8d:94:41:f4:ab:cd:02:c6:a9:db:20:d0:42:26:
         21:52:c1:9c:93:2e:fd:4f:34:f4:20:0f:88:fd:bc:5e:6f:30:
         3e:af:42:c7:8d:1c:0e:ea:59:6a:35:9f:f0:40:a8:a3:9f:8f:
         b2:8b:4d:fb:8f:20:ad:32:d3:b5:8a:52:fc:8c:42:db:35:e3:
         d1:b5:71:d9:f7:67:e0:2f:ca:c6:bc:45:84:72:32:af:bd:de:
         ba:06:ea:8f:6f:9a:55:fb:9d:3b:24:76:6b:3f:56:53:6a:0e:
         2d:37:70:82:d4:d9:e7:ce:39:78:fb:37:ba:23:cc:5b:85:c7:
         6d:21:43:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:59 2024 by rpki-client on console-fra.rpki-client.org