Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vr-Z8NV2-u_lttf0Wkz_Es3Pb4o.roa
File:                     Vr-Z8NV2-u_lttf0Wkz_Es3Pb4o.roa (raw, json)
Hash identifier:          Cshg6ud5H363l9pXuyYiwbh2V0knWtjg7opAHE2z1mg=
Subject key identifier:   56:BF:99:F0:D5:76:FA:EF:E5:B6:D7:F4:5A:4C:FF:12:CD:CF:6F:8A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       09EC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vr-Z8NV2-u_lttf0Wkz_Es3Pb4o.roa
Signing time:             Sun 30 Jun 2024 01:42:24 +0000
ROA not before:           Sun 30 Jun 2024 01:42:24 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        110.161.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2540 (0x9ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:42:24 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=56BF99F0D576FAEFE5B6D7F45A4CFF12CDCF6F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:61:f4:86:ce:f5:d6:bf:00:85:bf:d4:81:ef:
                    04:ce:c5:85:02:ec:80:db:c8:fc:b6:57:0d:5c:01:
                    64:fb:74:68:9c:f3:e5:d5:b9:13:3a:58:fc:3e:8d:
                    df:5c:7d:a5:30:c8:1a:88:fd:0d:9f:4a:f3:e0:79:
                    54:a9:88:90:e0:ff:bb:1e:f7:28:62:32:14:f6:f7:
                    17:de:42:58:fd:c4:7b:c0:d4:50:e6:51:10:f7:dc:
                    90:f2:cd:74:83:a9:ff:27:69:6d:41:8c:1e:b5:06:
                    5a:62:3f:17:77:7c:ef:80:8f:39:1b:e2:58:99:78:
                    bf:c0:ce:ae:82:0f:f9:08:ba:62:15:05:f8:fe:a3:
                    dc:0e:f0:03:7a:2d:01:d8:3f:89:2f:24:bc:15:78:
                    a0:9c:9c:1f:75:4b:b1:3f:cd:50:9a:78:14:ad:4e:
                    61:8c:d3:22:42:4d:ee:72:ab:41:20:50:27:1c:1a:
                    f8:01:9d:dd:48:ad:ef:d4:9b:72:c1:87:f0:17:31:
                    18:99:ba:7a:66:97:9d:3f:62:5e:5d:13:69:f9:64:
                    90:78:70:ff:6e:b1:58:cd:57:9a:c5:72:70:8b:66:
                    fb:ed:9e:a9:75:40:b0:d1:ca:76:6d:e9:d3:d3:44:
                    d7:ef:79:67:f5:6d:ab:1d:bf:19:95:0d:9e:86:0a:
                    bf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BF:99:F0:D5:76:FA:EF:E5:B6:D7:F4:5A:4C:FF:12:CD:CF:6F:8A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vr-Z8NV2-u_lttf0Wkz_Es3Pb4o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         51:30:1e:90:59:90:b3:da:a8:fe:fd:a4:1e:6f:6b:d3:39:24:
         ff:59:26:7f:a7:13:ea:e7:86:fa:1b:ef:95:40:c8:33:b7:39:
         ed:3c:e8:83:5d:27:25:c6:68:f8:02:9d:46:3b:e7:93:56:ee:
         e1:4c:f9:4c:89:da:7f:0c:31:29:6f:d3:99:e1:f2:28:60:db:
         99:a9:c9:c2:b9:ba:85:70:0d:14:b9:9a:f2:b6:bd:15:d1:92:
         fc:82:4c:26:8a:5f:c5:9e:56:cc:c8:ed:84:a0:d8:79:0d:4d:
         1b:e7:ed:94:02:37:84:e0:55:f8:25:d8:e7:c4:3c:eb:e2:88:
         5c:f8:30:67:a8:0f:7d:46:e6:d9:9d:b6:17:6a:92:0d:51:74:
         85:f1:3f:0c:96:bb:e0:92:2d:74:f1:b5:96:21:cc:7c:cb:0e:
         30:7e:ce:a3:c2:b9:bd:22:e8:49:7f:5c:55:46:3f:f4:99:e4:
         1c:74:1e:2e:70:91:1e:0c:64:06:b5:15:b8:2c:a8:f4:eb:f5:
         68:a1:18:25:8c:d8:0f:ee:5c:d1:84:41:7c:db:20:f4:a6:bb:
         28:6b:f8:38:79:40:aa:ac:b1:48:f4:f4:1e:b4:64:96:dc:5b:
         d9:0f:4b:97:8f:95:a0:4c:21:b2:25:51:4a:c7:90:ae:09:73:
         00:c6:0b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:13 2025 by rpki-client