Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WaSNN3saqp5VaGoWVzIpymEouqA.roa
File:                     WaSNN3saqp5VaGoWVzIpymEouqA.roa (raw, json)
Hash identifier:          Hn5aeblwjOFU9jRkND3Nkuk8ZbWElgwiUjywDidn0XU=
Subject key identifier:   59:A4:8D:37:7B:1A:AA:9E:55:68:6A:16:57:32:29:CA:61:28:BA:A0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05B3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WaSNN3saqp5VaGoWVzIpymEouqA.roa
Signing time:             Thu 27 Jul 2023 17:00:23 +0000
ROA not before:           Thu 27 Jul 2023 17:00:23 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        220.210.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1459 (0x5b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 17:00:23 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=59A48D377B1AAA9E55686A16573229CA6128BAA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:ba:f6:53:98:28:dc:b1:65:3a:95:82:2c:
                    ec:77:01:65:c9:a3:8b:ac:31:75:04:eb:36:c4:1a:
                    b0:08:e5:79:a0:7d:c8:87:15:8e:c7:f3:3c:8b:1c:
                    ec:cf:09:5e:3d:e7:31:37:b8:e4:75:61:bf:71:4c:
                    78:18:9f:d4:d9:15:5f:96:f7:82:13:b4:c8:59:50:
                    5b:8c:d2:f7:9b:51:59:13:5b:db:e1:8f:a2:b5:a5:
                    04:f4:5f:8d:0e:0e:58:70:20:12:7e:9b:19:5f:c0:
                    1f:c8:ce:38:66:39:27:6e:e4:6a:86:c2:23:e8:c9:
                    cf:74:26:3b:ce:1d:d8:5e:94:e2:2b:b3:44:88:05:
                    69:a3:72:51:47:7f:a6:80:53:5d:33:a0:48:2c:80:
                    13:49:41:a0:0b:e4:0c:3d:6f:c6:34:eb:08:da:93:
                    6a:3f:62:f3:07:30:4a:7e:a7:3d:43:d4:c0:0b:d0:
                    88:96:08:35:52:e4:5c:51:33:81:c2:54:cb:36:e9:
                    2f:aa:f8:89:bb:98:58:cc:a9:22:74:f7:09:0e:ed:
                    6f:07:6f:b6:61:7e:8e:20:9e:0a:a2:ab:9d:cc:fc:
                    04:6f:8a:7e:4a:19:08:da:0d:eb:c3:32:73:12:ea:
                    32:93:2c:c4:c6:99:66:70:5a:e5:13:c8:84:d0:04:
                    58:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A4:8D:37:7B:1A:AA:9E:55:68:6A:16:57:32:29:CA:61:28:BA:A0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WaSNN3saqp5VaGoWVzIpymEouqA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:a2:94:af:6e:3f:f5:54:9c:19:74:3b:29:69:58:cb:ff:05:
         22:f1:ef:e1:62:1c:3b:32:58:89:94:3a:9c:08:b0:00:30:bc:
         e5:5a:f1:ad:40:30:7a:b5:56:9e:e7:df:38:20:c0:c3:02:42:
         73:12:d2:30:76:36:2e:0a:cc:3b:61:d7:ff:48:1d:e9:3a:73:
         34:2c:60:5c:7d:d1:ab:b9:65:d3:82:c9:b9:17:6b:aa:aa:cc:
         7f:27:28:3f:72:39:92:b7:12:20:9f:66:68:ff:89:88:b2:dd:
         88:ca:a1:f2:6c:e6:6c:c0:c2:78:73:d0:a7:68:36:28:ba:41:
         65:b9:b0:15:15:c4:12:56:01:69:35:74:68:4b:2a:c9:1a:08:
         7a:e5:87:b7:b7:5b:48:71:1a:7c:8a:1c:fd:2d:9f:d5:49:5f:
         72:05:a2:6f:9b:c6:cd:92:e0:93:72:bd:8f:20:dc:df:40:d4:
         a1:ae:81:df:1b:7d:06:0d:94:dd:f5:d4:5e:10:4e:90:bf:f5:
         fc:74:03:9f:01:10:df:04:fd:a3:d6:66:a6:35:4c:a6:7f:52:
         b8:90:0c:29:00:e8:62:05:97:b4:8e:1b:00:22:25:0a:ab:5b:
         92:5c:a7:8f:23:3c:57:37:ad:fb:0d:0d:91:f3:2c:76:f1:b6:
         1b:2d:28:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org