Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/N6qCge4jUgvzbXda8zGy3QNrmtw.roa
File:                     N6qCge4jUgvzbXda8zGy3QNrmtw.roa (raw, json)
Hash identifier:          1c3T4yfr3aWTOF59FC9FNeBtvGbTFT+oGhZQudT4LvE=
Subject key identifier:   37:AA:82:81:EE:23:52:0B:F3:6D:77:5A:F3:31:B2:DD:03:6B:9A:DC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0AAD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N6qCge4jUgvzbXda8zGy3QNrmtw.roa
Signing time:             Sun 30 Jun 2024 01:54:29 +0000
ROA not before:           Sun 30 Jun 2024 01:54:29 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        110.162.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2733 (0xaad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:54:29 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=37AA8281EE23520BF36D775AF331B2DD036B9ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8a:5f:82:f8:d8:e3:b7:98:51:3d:d7:2c:41:
                    d2:6d:07:0a:e1:05:3b:a6:3f:c3:21:29:f6:d7:e6:
                    a3:c6:07:54:86:c9:b9:57:cf:93:83:24:c9:b4:6b:
                    2c:63:92:8e:f0:93:2e:49:07:83:10:73:13:0e:24:
                    5b:03:5d:81:e7:93:a9:77:26:3c:0c:c5:07:17:55:
                    cd:5a:6f:ea:60:3e:43:d3:90:1c:b0:49:93:f2:b4:
                    fb:44:40:50:33:9e:19:bc:d5:20:32:3c:71:e3:1c:
                    a7:27:1d:e0:9e:97:a9:90:bb:98:31:cf:20:1e:80:
                    f3:36:1a:87:2c:70:43:17:4b:97:49:41:55:cc:c7:
                    4b:46:a9:7e:5b:e1:ee:71:ef:eb:ea:a4:a7:53:29:
                    6b:b0:6b:94:e4:d5:a6:9b:9d:9c:a4:25:35:94:fa:
                    5f:44:60:59:92:18:79:52:d6:13:7b:f2:77:14:37:
                    1d:6d:28:6d:f7:ab:3a:5b:b6:8b:9d:61:bd:46:87:
                    71:ac:72:42:62:1a:13:da:75:82:7e:b5:de:6c:68:
                    6d:33:08:c2:0c:6c:3b:47:f7:d5:44:68:64:96:0e:
                    10:9c:8a:71:77:20:f9:c0:d1:7e:8a:73:67:ad:49:
                    c7:b5:c5:7e:65:63:34:b6:20:b5:27:55:7f:ab:72:
                    24:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AA:82:81:EE:23:52:0B:F3:6D:77:5A:F3:31:B2:DD:03:6B:9A:DC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N6qCge4jUgvzbXda8zGy3QNrmtw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.162.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3f:50:2f:a4:47:1c:4b:cd:66:46:ee:1d:3f:a7:35:42:3d:61:
         9f:0e:e4:cd:1d:1d:2b:25:69:ca:d2:f2:c9:df:a4:07:88:c5:
         8e:b0:71:46:bf:4f:c4:22:ca:91:e1:95:20:0b:91:df:0c:73:
         d6:a4:cf:ae:2b:08:59:e7:4a:5e:f8:5c:2e:2b:5c:f9:02:71:
         24:81:d1:48:9f:e7:74:f3:13:6a:3f:09:9f:21:30:3a:e5:ad:
         04:dd:45:ac:6d:95:23:f0:74:9d:2e:58:de:4f:c4:a1:4d:39:
         c0:53:77:f6:8e:c0:4a:08:f9:fc:7e:76:30:46:06:61:ac:2a:
         98:d6:20:c6:2a:c7:22:22:46:f0:84:9a:22:5c:89:fa:d0:df:
         05:77:5b:a4:32:b3:2d:26:af:ca:19:74:78:10:d8:7c:c4:b9:
         10:77:c7:18:11:ad:2e:ce:9d:b3:a4:5f:07:69:63:69:13:3b:
         cb:60:d7:da:aa:e9:f8:c7:22:cf:a4:1e:40:1d:45:43:46:29:
         2c:18:40:e4:14:eb:1c:6e:22:71:86:68:f7:a3:71:93:39:0f:
         c5:2e:59:1c:c8:f3:1e:9d:7d:18:c4:cd:d1:88:38:97:9f:a3:
         d0:56:f8:fc:32:34:da:1d:e6:be:7b:b4:f1:eb:a1:fc:6a:ce:
         e0:1f:2b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:41 2024 by rpki-client on console-ams.rpki-client.org