Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_RUumPNfkW5G15H8zMxC51SGlUc.roa
File:                     _RUumPNfkW5G15H8zMxC51SGlUc.roa (raw, json)
Hash identifier:          Bm73WkaROAv3g6oBA+nMertX671ofPzDj05gY6x8cBw=
Subject key identifier:   FD:15:2E:98:F3:5F:91:6E:46:D7:91:FC:CC:CC:42:E7:54:86:95:47
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0579
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_RUumPNfkW5G15H8zMxC51SGlUc.roa
Signing time:             Thu 27 Jul 2023 16:58:07 +0000
ROA not before:           Thu 27 Jul 2023 16:58:07 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        110.158.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1401 (0x579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:58:07 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=FD152E98F35F916E46D791FCCCCC42E754869547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:05:64:53:4e:a5:7e:c0:cd:4b:c0:50:fb:
                    b5:47:c7:a2:cc:39:58:21:66:45:21:42:c1:fd:e1:
                    23:92:ca:f0:13:2e:fe:79:d7:57:19:62:c4:3d:79:
                    51:fd:83:eb:95:86:f5:bf:56:88:ef:89:76:95:60:
                    45:92:c1:a3:7d:cd:b0:6c:d4:95:ee:6a:40:a0:c9:
                    b0:b5:41:9a:e6:d4:7f:d5:07:26:e1:85:3b:f8:bc:
                    45:3b:16:d7:47:bb:db:4b:e0:ab:9b:a7:45:89:4e:
                    f7:78:08:00:5b:ca:97:0f:f8:3b:c7:93:3a:e0:d0:
                    05:72:91:5f:90:29:c2:0e:9c:56:96:46:ba:c7:b4:
                    7a:a5:53:8a:9e:72:85:0d:a3:07:07:72:f7:01:7d:
                    53:ad:4d:93:a4:79:dc:40:71:c5:be:f4:66:e4:1b:
                    b3:6c:7b:c4:2f:f0:f2:16:e0:ff:32:9b:a2:b1:29:
                    6d:a5:4d:c2:da:97:21:ce:3a:ac:0e:46:e3:46:fd:
                    93:a0:8a:5d:03:5b:cf:0d:c0:79:f8:b7:0b:15:95:
                    52:55:b1:28:63:80:b4:c5:a0:ea:f8:e9:91:a4:4f:
                    cc:09:c5:ff:bd:6a:02:6c:d0:7d:96:ab:cf:8c:9d:
                    94:73:1c:75:3f:15:d9:7d:96:fb:3c:5f:35:31:f4:
                    d4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:15:2E:98:F3:5F:91:6E:46:D7:91:FC:CC:CC:42:E7:54:86:95:47
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_RUumPNfkW5G15H8zMxC51SGlUc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:7b:71:a1:a0:d4:84:43:0e:ab:d8:94:46:fc:9e:8d:c2:7d:
         40:81:1f:ea:43:dc:1c:88:79:5e:64:8b:90:3e:50:60:01:e5:
         c7:2b:2b:a0:25:c8:68:ce:84:0e:b9:6e:ee:d9:6a:b0:21:fb:
         98:85:7a:b2:f6:86:8d:7c:c6:b1:0c:91:aa:11:16:12:0e:9b:
         47:12:5d:a2:8d:8b:3d:d8:dd:63:a3:9f:7f:87:d6:93:f5:dc:
         02:65:33:31:52:3f:7c:f6:53:9a:c6:4a:ab:88:5c:b8:46:f5:
         a4:ef:b7:46:b7:cc:1e:24:65:9c:28:17:53:17:d6:cc:01:fe:
         0e:01:50:65:3c:fd:65:42:5b:12:b1:b8:de:d0:85:e0:d9:3e:
         63:89:a0:3a:fa:e6:77:46:f8:37:71:8d:9b:48:62:5d:3c:78:
         e3:90:02:e8:13:64:62:68:13:14:d4:ba:06:77:ad:ad:74:a7:
         66:07:fb:e0:00:63:a1:92:a3:24:98:70:d3:62:2c:77:24:5c:
         00:e1:63:d6:32:08:84:a0:13:d0:59:1a:58:89:0c:5e:4c:d0:
         26:eb:de:88:47:5c:dd:d4:70:c0:ca:08:8a:7e:a4:15:bc:70:
         f1:f5:77:bc:86:25:a8:a1:85:c0:3e:8f:c2:44:25:5c:f2:d4:
         fe:21:17:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org