Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WjV1032ohPHFHD9Z42LcNmaacF4.roa
File:                     WjV1032ohPHFHD9Z42LcNmaacF4.roa (raw, json)
Hash identifier:          cu/x4J0MRRG06bMOfxelxr019v9Oorq2lhMJjmQASCY=
Subject key identifier:   5A:35:75:D3:7D:A8:84:F1:C5:1C:3F:59:E3:62:DC:36:66:9A:70:5E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       045D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WjV1032ohPHFHD9Z42LcNmaacF4.roa
Signing time:             Thu 27 Jul 2023 16:43:19 +0000
ROA not before:           Thu 27 Jul 2023 16:43:19 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        220.210.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1117 (0x45d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:43:19 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=5A3575D37DA884F1C51C3F59E362DC36669A705E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6f:35:03:99:e6:d1:dd:12:51:82:51:0e:c2:
                    a0:f4:d2:cd:84:78:06:22:5d:7a:b0:f0:aa:61:2e:
                    c7:bd:87:83:e6:1b:c9:14:5c:41:8f:92:bf:92:6f:
                    b8:b2:58:4a:39:1c:b4:9f:78:5b:c7:bb:39:84:1b:
                    a9:1a:b3:26:92:13:21:a0:13:72:fa:78:67:ed:7c:
                    48:8a:3b:8d:d4:32:12:13:53:55:18:0f:2f:9a:10:
                    e4:fb:1f:ea:e0:d6:63:cb:14:d3:87:17:c8:19:61:
                    ba:5c:2a:99:9a:d6:f0:93:e2:40:7b:b2:c5:53:34:
                    5c:7b:89:10:6d:8b:46:5d:ed:12:e8:c9:c3:5c:c8:
                    ad:1a:ec:0f:74:d6:63:f3:62:dd:70:cd:bb:23:d1:
                    fb:1d:3d:20:f2:d1:46:de:be:11:13:70:e9:15:03:
                    41:00:8c:4b:48:c6:8f:b4:a5:cc:3f:09:90:e3:7e:
                    fa:81:69:21:05:aa:d6:82:1f:74:f2:4d:1a:e0:48:
                    dc:4e:43:98:c4:74:0d:f5:1f:fd:57:10:b4:a9:ec:
                    2c:67:51:55:5f:94:e4:f4:fa:09:03:c6:d9:78:1f:
                    6f:42:45:1c:9b:cd:86:79:ac:cf:3c:61:99:b7:b5:
                    7c:10:b9:68:40:18:bc:03:b0:9b:3a:05:b0:06:6b:
                    1a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:35:75:D3:7D:A8:84:F1:C5:1C:3F:59:E3:62:DC:36:66:9A:70:5E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WjV1032ohPHFHD9Z42LcNmaacF4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:09:5f:d0:db:17:c5:03:13:ee:33:19:fc:d3:d1:2f:63:1b:
         d4:ba:a6:89:c7:f3:e5:7a:3d:55:d8:f6:11:96:71:a7:a1:0a:
         7a:95:54:94:f6:89:0b:d8:e3:a5:2f:c4:65:b5:04:8c:a8:44:
         27:79:b8:17:a4:7d:d7:50:36:54:c2:58:7a:bd:7c:64:e5:e8:
         cb:a6:3e:e4:6e:80:c0:57:5b:82:6d:b4:70:dc:48:e4:8b:d7:
         7e:26:76:74:44:89:60:85:9c:76:a8:0f:10:8b:7b:be:44:08:
         24:1f:fd:2f:48:24:4e:b6:5b:bf:da:8a:40:ab:6a:66:56:19:
         9f:c9:da:c8:03:2f:de:2b:67:53:46:33:9c:61:5f:1d:07:19:
         8f:60:31:2c:1d:2e:a4:99:81:21:14:d1:7e:1a:95:e1:49:79:
         16:1a:e7:cd:59:bd:c6:fb:4b:35:5e:fa:0d:12:85:c2:a0:5d:
         9c:86:d8:33:1b:d3:ae:5e:61:76:37:bc:67:fc:37:88:0d:e9:
         69:8b:55:e7:44:a2:4f:73:66:b2:8d:7c:cc:1b:db:6a:a6:ad:
         3c:4e:d2:c4:d4:ee:1b:78:6f:97:38:65:80:03:da:07:21:d6:
         03:89:8f:ce:92:ef:77:f2:2b:f7:df:87:02:be:6a:52:0c:7b:
         cf:fc:21:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org