Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZE5QUb6OibtYAhBbYlkhNTpPPPo.roa
File:                     ZE5QUb6OibtYAhBbYlkhNTpPPPo.roa (raw, json)
Hash identifier:          +DHoeGC+RakR+CkpOgNrs/8Lx2OwP+aKJtuPhMjWEe0=
Subject key identifier:   64:4E:50:51:BE:8E:89:BB:58:02:10:5B:62:59:21:35:3A:4F:3C:FA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A8A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZE5QUb6OibtYAhBbYlkhNTpPPPo.roa
Signing time:             Sun 30 Jun 2024 01:52:36 +0000
ROA not before:           Sun 30 Jun 2024 01:52:36 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        110.162.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2698 (0xa8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:52:36 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=644E5051BE8E89BB5802105B625921353A4F3CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:05:63:21:9a:e9:de:fc:c2:7f:9a:51:68:6c:
                    e6:ac:e4:88:43:db:61:37:5d:ff:59:d8:84:1c:1a:
                    9b:5e:2e:56:a0:48:07:a5:b9:a1:c1:a2:83:10:e9:
                    60:4c:a8:9c:fb:8d:6d:e2:90:31:58:40:b9:09:3d:
                    30:32:98:d1:f4:8f:6d:14:fa:da:4e:00:6f:cb:f0:
                    ce:9d:d1:66:e3:11:3c:ca:c1:36:33:9b:e7:de:f8:
                    07:d4:a9:c6:f1:48:79:f0:8e:15:82:e4:d3:c0:d0:
                    e7:7c:b6:d1:1e:27:55:77:e3:ac:87:f6:c9:29:8f:
                    e2:f1:4c:f4:91:04:94:f1:29:a5:34:a7:85:fc:6f:
                    66:cf:ed:11:75:8a:b1:69:4c:f2:c1:91:3a:c5:0c:
                    46:e5:93:2c:92:09:d2:b3:bf:e2:5f:36:cc:5e:96:
                    8c:eb:c3:1e:f9:8c:c5:92:64:7a:23:63:4e:74:b5:
                    d4:e0:a2:02:a2:7f:75:f8:ec:3d:87:4c:08:c7:df:
                    ba:6d:7e:03:ed:ec:30:fc:fa:ae:9e:6b:05:df:79:
                    31:f7:e9:1d:f3:c6:8a:b9:39:0a:42:9e:4d:b0:12:
                    70:b4:1c:20:28:3b:ed:ea:69:17:e0:54:11:a3:18:
                    73:76:19:46:3e:3a:5d:ae:23:dc:14:b3:f0:40:b8:
                    4a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4E:50:51:BE:8E:89:BB:58:02:10:5B:62:59:21:35:3A:4F:3C:FA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZE5QUb6OibtYAhBbYlkhNTpPPPo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.162.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1a:6f:16:c0:59:7d:52:b2:47:7b:9c:48:e3:1a:78:17:21:61:
         12:a0:b2:e3:6c:49:63:57:5c:4b:15:39:7d:dc:69:17:dd:f7:
         8e:79:85:9b:26:e2:5b:be:92:43:ad:46:c0:d3:17:7d:8e:24:
         51:36:c9:52:c5:78:9b:66:29:22:ea:9c:39:17:90:79:87:0e:
         c1:2c:33:2a:5b:1b:7c:4b:40:81:29:5c:a7:76:f0:b3:72:5b:
         7c:ce:1c:fa:67:b1:7b:2c:ff:06:31:ba:cf:d7:62:d0:99:10:
         51:ad:b4:74:ae:bd:95:9d:b6:b6:9f:49:8d:0f:8a:5e:6a:b3:
         d4:1c:b0:f6:16:1a:28:ce:b2:64:5d:32:22:04:b9:fe:dc:01:
         cd:eb:03:9a:6d:17:da:b4:a6:2b:94:cd:70:61:a9:99:a4:32:
         be:4b:8b:3b:bf:a9:c3:33:59:86:79:63:eb:d1:46:d3:98:0f:
         76:3f:45:4e:2f:17:3d:75:e9:39:c1:34:cf:ce:e7:82:3b:28:
         a7:f4:56:d5:a8:81:29:23:00:6d:b5:fe:27:60:da:d3:c6:1d:
         71:40:16:ca:82:83:d8:1c:b7:62:a2:dd:1e:59:0d:3e:58:bd:
         cd:5b:54:b6:86:5f:86:6f:34:05:70:28:80:03:5e:9a:35:bb:
         de:05:f5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:01 2024 by rpki-client on console-fra.rpki-client.org